theregister.com

WhiteShotgun, to technology in Australia to build Top Secret cloud in AWS for defence users

Bahahahahaha ahhh fark that’s farkin hilarious the Australian government are gonna do what? I can tell you from experience it’s gonna be completely farked like the nbn along with anything technological they have a part in

MalReynolds,
@MalReynolds@slrpnk.net avatar

Cheers for the laugh mate. It’s funny coz it’s true.

skullgiver,
@skullgiver@popplesburger.hilciferous.nl avatar

They hand a shitload of money to Amazon, who then set up one of their AWS data centers complete with software and all, but only allow the government access. 8 don’t know what they’re gonna do with the data center, but the data center construction will probably be absolutely fine.

Rekhyt, to technology in Australia to build Top Secret cloud in AWS for defence users

The register providing contrast to the AWS infrastructure build out:

The Register is aware of government agencies building on-prem private clouds – sometimes on open source platforms – so they can scour code to soothe their security worries.

That’s just a local data center, guys. Like how everything was done before “the cloud” became a buzzword.

progandy,

There is some difference I see in the management layer, with more dynamic resource allocation in a cloud infrastructure compared to traditional data center usage.

refalo,

AWS literally advertises an isolated “GovCloud” service.

Travelator,

Maybe it’s “AI” powered. I’m sure they could sell that concept.

unexposedhazard, to technology in Australia to build Top Secret cloud in AWS for defence users

“Top Secret” <> “AWS”

I can only laugh so much guys, careful.

Recant,

Well I would think that if the customer, in this case the Australian Signals Directorate, encrypted all data prior to going to AWS, it would be protected from any data mining that Amazon does.

I am sure that the ASD isn’t just posting the information unencrypted on AWS or solely trusting Amazon’s encryption where Amazon also has a copy of the key.

unexposedhazard,

Well yes and no. For one there is lots of metadata like access times, the IPs that connect and their locations, traffic amount, etc.

But also like with all “cloud solutions” you are just outsourcing your uptime reliability issues. And for a system like that, im not sure outsourcing that is a great idea.

Recant,

Yes that metadata can exist but can’t that be obscured if AWS isn’t connected to directly?

I think some of the technical details of how the ASD intends to ensure data protection/confidentiality/integrity are omitted for national security reasons.

unexposedhazard,

It looks like it will be on prem, but then i dont even understand why they would involve amazon at all? Just use the existing public solutions. As soon as any major part of a system that is connected to the internet has proprietary code in it, you cant really trust it to protect secret information anymore.

DeltaTangoLima,
@DeltaTangoLima@reddrefuge.com avatar

It’s won’t be on-prem, but it will be dedicated data centres, built and run by Amazon, so almost the same as. Why? Because AWS runs better data centres than the gov ever could.

Gov is outsourcing the physical infrastructure risk, just like any other ocmpany that puts their stuff in the cloud.

FalseMyrmidon,

I'm sure it'll be airgapped and completely separate from the rest of AWS.

MisterD,

AWS is an American company. If the US goes facist, Trump could order Amazon to give him a copy of everything they have in their TS cloud

FalseMyrmidon,

That's why you build it in Australia and only give Australian citizens with appropriate security clearances direct operational access.

FalseMyrmidon,
Vanth, to privacy in Police allege ‘evil twin’ in-flight Wi-Fi used to steal info • The Register
@Vanth@reddthat.com avatar

Doesn’t this seem like an inefficient way to go about? Locked in a flying tin can with the same ~100 people for a few hours. I would think a public library or busy transit station would net way more info, with the added advantage of not being locked in if someone starts getting suspicious.

bdonvr,

I feel like with the advent of nearly ubiquitous unlimited mobile data plans (in some parts of the world) a lot less people use public WiFi. However on a plane you have little choice, so it makes sense.

ResoluteCatnap,

The article said the man had done similar with airport wifi and a place of prior employment. But the airplane one is an odd choice

delirious_owl,
@delirious_owl@discuss.online avatar

What do you do when you’re locked in a flying tin can and bored out of your mind?

Some of us just fire up Kali and play

Hugin,

If you are trying to steel credentials from people with power and money passengers in first class are a good target.

Where else are you going to find a cluster of people like that that are using the wifi and are going to be there for hours. It’s about as optimal as I can think of.

Even better if you are targeting a spefic company. Just pick flights out of the headquarters for that company.

If you want to attack say Microsoft pick a flight from Seattle to DC. Pretty good odds of a Microsoft high up being on the flight and wanting to use the wifi for work.

delirious_owl, to privacy in Police allege ‘evil twin’ in-flight Wi-Fi used to steal info • The Register
@delirious_owl@discuss.online avatar

They arrested him? What was the crime?? People connected to his network. Its not like he hacked their network.

GreenEngineering3475,

emphasis added by me From the article:

The man was investigated after an airline “reported concerns about a suspicious Wi-Fi network identified by its employees during a domestic flight.”

It’s alleged the accused’s collection of kit was used to create Wi-Fi hotspots with SSIDs confusingly similar to those airlines operate for in-flight access to the internet or streamed entertainment. Airport Wi-Fi was also targeted, and the AFP also found evidence of similar activities “at locations linked to the man’s previous employment.”

**Wherever the accused’s rig ran, when users logged in to the network, they were asked to provide credentials.**The AFP alleges that details such as email addresses and passwords were saved to the suspect’s devices.

The charges laid against the man concern unauthorized access to devices and dishonest dealings. None of the charges laid suggest the accused used the data he allegedly accessed.

However three charges of “possession or control of data with the intent to commit a serious offence” suggest the alleged perp was alive to the possibilities of using the data for nefarious purposes.

possiblylinux127,

Cybercrime is illegal just like stealing or committing fraud

delirious_owl,
@delirious_owl@discuss.online avatar

Cybercrime is usually defined as unauthorized system access.

How is running a free WiFi AP a crime?

possiblylinux127,

Because you are stealing peoples data and credentials.

delirious_owl,
@delirious_owl@discuss.online avatar

So the airline is also comitting a crime?

possiblylinux127,

They aren’t stealing login data to my knowledge

tesseract, to technology in Microsoft CEO of AI: Online content is 'freeware' for models • The Register

The sort of mental gymnastics and cognitive dissonance that these subhuman c-suite employ to justify stealing everyone else’s data while demonizing sharing of their data, is just infuriating. If these scumbags were incarcerated for a day each for every time they showed this hypocrisy, they would all rot in the jails for their entire lifetime, perhaps more.

renard_roux,

Lifetime jail + lifetime jail for X generations of offspring, depending on severity?

Or instead of jailing children at birth, maybe just confiscating X yachts, depending on severity.

tesseract,

No. Just leave their corpses in the jail for multiple lifetimes.

renard_roux,

Isn’t that a bit too much like beating a dead horse?

GolfNovemberUniform, to privacy in Microsoft CEO of AI: Online content is 'freeware' for models • The Register
@GolfNovemberUniform@lemmy.ml avatar

As one person on Mastodon said, “AI is a toxic industry created by toxic people with toxic ideals”.

possiblylinux127,

I wouldn’t go that far. As it turns out AI is a buzz word and buzz words have little meaning

GolfNovemberUniform,
@GolfNovemberUniform@lemmy.ml avatar

Yea I thought about that too. But apparently some people find “AI” useful.

possiblylinux127,

I find LLMs very useful

GolfNovemberUniform,
@GolfNovemberUniform@lemmy.ml avatar

Too much of an environmental impact for the usefulness imo.

possiblylinux127,

I don’t care. They are really helpful for a many different tasks. It doesn’t pull that much power to run locally on my machine.

GolfNovemberUniform,
@GolfNovemberUniform@lemmy.ml avatar

Mister/miss, LLMs that can run locally are fine. It’s the infrastructure and the large scale of commercial cloud LLMs that create some issues. You have to read some researches on this topic.

Rekorse,

“See I like AI because I’m selfish. Also those bad things are in the past, I’m using an ethical AI system now! But also, who gives a fuck because I only care about myself!”

Yeah you get it guy! Maybe you can be Trumps secretary of technology!

nooneescapesthelaw,

If an LLM can save me 30 minutes writing nice emails and responses and help me brainstorm, debug, or elucidate my thoughts then it is very useful.

Rekorse,

You really put 30 minutes of your own time above all of downsides this has for the rest of us who don’t have a use for it (most of the world)?

nooneescapesthelaw,

What downsides are there?

Rekorse,

All of the resources and energy spent to get you this product you like. You can’t discount what it took to create something just because the final product is small and efficient. Take a look at the manufacturing footprint of nearly all complex hardware.

I’m not saying you created the AI but you are one of its supporters, without which there would be no AI.

If this was all just pitched as developing a new plain English coding language, I think the hype following it would be far more appropriate, but then the funding wouldn’t follow to support the massive development costs of AI.

Its become a circle of hype chasing money chasing hype.

Its not you that is the problem so to speak though, its the collective “you’s” who think the same way.

nooneescapesthelaw,

I’m not discounting it. Improving productivity for office workers by 1% across the world is a massive amount

The power used to train the AI is alot, but after that using the AI uses a lot less electricity, if an AI spikes my gpu by 10 seconds to type something that would have taken me 30 minutes, I’ve saved on electricity:

arxiv.org/abs/2303.06219

barsquid, to privacy in Police allege ‘evil twin’ in-flight Wi-Fi used to steal info • The Register

This sounds like it could be a combination FCC and FAA felony.

barsquid,

Oops, nope, I was thinking of the wrong country.

SnotFlickerman, to privacy in Police allege ‘evil twin’ in-flight Wi-Fi used to steal info • The Register
@SnotFlickerman@lemmy.blahaj.zone avatar
SatansMaggotyCumFart, to privacy in Police allege ‘evil twin’ in-flight Wi-Fi used to steal info • The Register

You can tell because it has a goatee.

intensely_human, to technology in Microsoft CEO of AI: Online content is 'freeware' for models • The Register

They’ve been waiting a while to use this stock image.

jarfil, to technology in Microsoft CEO of AI: Online content is 'freeware' for models • The Register

Using the term “freeware” is silly, but consider this:

Is the act of reading/watching something, equivalent to making a copy? Freedom of thought is an agreement much older than the 1990s, it has nothing to do with copyright, and all to do with secrecy. If something is made public, then it isn’t secret, so obviously anyone can read/watch it, be it with a wetware neural network, or an AI neural network. Making an exact copy is either plagiarism, or copyright infringement… but abstracting a style, then applying it to some other data, is “inspiration”.

Imagine a website with a licensing disclaimer like “you are allowed to read the content, but not to comprehend or express any thoughts based on it”. Nonsense, right?

BuboScandiacus, to technology in Microsoft CEO of AI: Online content is 'freeware' for models • The Register
@BuboScandiacus@mander.xyz avatar

Ooc: Hey you ! Take this laptop !

reagansrottencorpse, to technology in Microsoft CEO of AI: Online content is 'freeware' for models • The Register

I wish Microsoft had anything worth taking for free

renard_roux,

Games?

prex, to privacy in Microsoft CEO of AI: Online content is 'freeware' for models • The Register

From the article:

Also, in 2022, several unidentified developers sued OpenAI and GitHub based on claims that the organizations used publicly posted programming code to train generative models in violation of software licensing terms

They can argue about it not being a copy all they want. If there is a single GPL licenced line of code scraped then anything they produce is a derivative work & must be licenced GPL.

nice.

unwarlikeExtortion,

The only way I can see them weaseling out of this is by keeping the program running the model made in-house and proprietary while releasing the model in a format unusable without the base (proprietary) program. But maybe the GPL forbids such obfuscstion efforts (I don’t know, I haven’t studied it in detail)

bitfucker,

GPL v2 don’t, which lead to tivoization. But Linus himself didn’t agree with that standing.

threeganzi,

I’ll play the uniformed devils advocate here:

  1. Is the GPL license enforceable?
  2. And if so, I assume “derivative” will still subjective to some degree. Where do we draw the line between derivative and non-derivative?

I’m torn about my personal opinion about copyrights and software licensing in general. I think the main problem is the huge power imbalance between people and corporations, not so much the fact a company analyzed a bunch of available data to solve programming problems.

They don’t copy the data and sell it verbatim to others which would be a legal issue and in my mind also a moral issue, as they don’t add any additional value.

prex,

1: yes

2: Normally derivative works are patched or modified versions of the original. I think the common English meaning would apply & chatGPT et al are fucked. I doubt there is a precedent for this yet.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • fightinggames
  • All magazines