• 6 Posts
  • 18 Comments
Joined 10 days ago
cake
Cake day: February 3rd, 2026

help-circle
  • Helt ärligt så tycker jag att reaktionen runt det här har varit väldigt överdriven, även om jag förstår och håller med om att video identifiering är väl typ det jobbigaste sättet att verifiera sig… men tror inte det är många som tycker att det är jobbigt nog att byta klient för att de behöver göra det en gång.

    Många är snabba att peka på att de läckt all data en gång redan, men det är ju inte helt sant. Det de läckt var enbart från deras support system, när folk öppnade tickets och skickade med foto på sitt ID för att överklaga beslutet. Det säger inte riktigt någonting om det primära systemet och jag tror inte på riktigt att de skulle spara den datan speciellt länge. Låter också som att det är ett annat eller ändrat system nu när de säger att video datan bara behandlas lokalt (också intressant fråga, de litar helt på klienten? Borde göra det möjligt att helt gå runt)

    Så även om jag är ett fan av konceptet av federerade nätverk, och är lite sugen på att sätta upp en egen Matrix/Synapse server för min vänkrets, så orkar jag inte riktigt driva på och övertala folk att flytta. Speciellt inte då det också verkar som att folk kan fortsätta använda de (relativt få) servrar jag är med på utan att verifiera sin ålder.











  • Maybe i misunderstand what you mean but yes, you kind of can. The problem in this case is that the user sends two requests in the same input, and the LLM isn’t able to deal with conflicting commands in the system prompt and the input.

    The post you replied to kind of seems to imply that the LLM can leak info to other users, but that is not really a thing. As I understand when you call the LLM it’s given your input and a lot of context that can be a hidden system prompt, perhaps your chat history, and other data that might be relevant for the service. If everything is properly implemented any information you give it will only stay in your context. Assuming that someone doesn’t do anything stupid like sharing context data between users.

    What you need to watch out for though, especially with free online AI services is that they may use anything you input to train and evolve the process. This is a separate process but if you give personal to an AI assistant it might end up in the training dataset and parts of it end up in the next version of the model. This shouldn’t be an issue if you have a paid subscription or an Enterprise contract that would likely state that no input data can be used for training.




  • For now, BMW is defaulting to a more traditional approach. If it requires a data package of some sort, it will probably have a recurring fee—and BMW says its customers are already comfortable subscribing to such add-ons.

    Sounds like a fairly reasonable position imo, and that they listen to the outrage about heated seats (which tbh was ridiculous). I get the feeling that everyone who commented on this didn’t actually read the article, lol.

    Full disclosure: I own a fairly recent BMW and do like it a lot. Would I have bought it with subscription based heated seats? Maybe not, but I do appreciate other things like having a physical button to go into battery save mode and not having to dive 3 touch screen menus down… or that it’s one of the most powerful hybrids in electric only mode (though not anymore I think)… or being generally more dialed back when it comes to driver assist features.

    That said I will admit that it has a physical button that tells me to pay up when pressed, to enable automatic high beam control… though it’s not like it was an advertised feature (got it used).







  • Indeed and the only thing I have ever seen a larger company running is Microsoft Exchange, but MS is actively pushing to cloud here. I also know a few people who work with Exchange and they kind of hate it.

    The option has the traditional open source stack I guess with Postfix, Dovecot, Spamassassin, some Webmail client, and then you have to make sure that SPF, DMARC, and DKIM signing works… It becomes a lot so I understand why none willingly wants to deal with this. That said there are some more modern alternatives like Stalwart mail server that combines the first three services into one and something I’m considering to try out.




  • I feel it’s very important to point out that specifically email is one of the most common things to outsource. Hosting your own email is simply one of the harder things to run on your own, having to deal with anti-spam measures, IP reputation tracking and the risk of other providers blocking you if one of your users are compromised and used to send spam.

    My point being that yes, you are somewhat likely to use other Cloud products but it’s not a good indicator for how dependent the core business is on cloud providers.

    Tracking specifically email is probably the best thing if your goal is to create an infographic where the dependence numbers are as high as possible though.