Quasarke Forums
  • Communities
  • Multi-communities
  • Support Lemmy
  • Search
  • Login
Technology@lemmy.worldbythemachinestops@lemmy.dbzer0.com
26 days

The ‘Sophisticated’ Bug OpenAI Found in Its Conference Room Can Be Yours for $13.99

gizmodo.com English

cross-posted from: https://infosec.pub/post/53563321

The Seeed Studio XIAO ESP32-S3 Sense is for tinkerers, not super-spies.

61
    The 'Sophisticated' Bug OpenAI Found in Its Conference Room Can Be Yours for $13.99
    gizmodo.com
    The Seeed Studio XIAO ESP32-S3 Sense is for tinkerers, not super-spies.
    You must log in or register to comment.

    • db2@lemmy.worldEnglish
      25 days

      Actual image of OpenAI and Kash Patel’s FBI meeting:

      Cabinet meeting scene from "Idiocracy"

      • Buffalox@lemmy.worldEnglish
        25 days

        If they are insinuating that because it’s cheap it’s not sophisticated think again.
        You can get motion sensors based on quantum dynamics principles for just $1, they are in all phones today, and those are based on extremely sophisticated theory and production methods. But industry has managed to find ways to make them extremely cheap despite that.

        So putting the sophisticated in quotes based on the low price is an oversimplification.
        That said, there are probably more sophisticated miniaturized options for spying than the cheap gadget they used.

          • [deleted]@piefed.worldEnglish
            25 days

            Sophisticated is commonly used as a comparison to other sinilar things. So a sophisticated computer in 1980 is different from one in 2026 because technology advanced significantly. A lot of common features on cell phones would have been called sophisticated 20 years ago, but not anymore.

            In this case sophisticated is intended to mean relative to other similar devices. Since this is a commodity electronic device you can easily buy for under $13 it doesn’t fit the common usage of ‘sophisticated’ for 2026.

              • schipelblorp@sh.itjust.worksEnglish
                25 days

                Language is messy. I sometimes think of sophisticated as the opposite of simple.

                  • Buffalox@lemmy.worldEnglish
                    25 days

                    It kind of is, isn’t it?

                    Edit:
                    Goddam people are contrarian here.
                    https://www.merriam-webster.com/thesaurus/sophisticated
                    Simple is the first antonym (opposite) stated, and simplistic is number 4.
                    This place is a cesspool sometimes 🤡

                      • schipelblorp@sh.itjust.worksEnglish
                        25 days

                        Depends on what you mean by is.

                          • Valmond@lemmy.dbzer0.comEnglish
                            24 days

                            And depends on what you mean by depends. 🤔

                            🤗

                          • [deleted]@piefed.worldEnglish
                            25 days

                            Complex is the opposite of simple.

                              • Sanctus@anarchist.nexusEnglish
                                25 days

                                Complex is a synonym of sophisticated within this use case

                                5KeQ9xt0qLB0Ay3.jpg

                                • Buffalox@lemmy.worldEnglish
                                  25 days

                                  One does not exclude the other:
                                  https://www.merriam-webster.com/thesaurus/sophisticated
                                  Simple is literally the first antonym to sophisticated!

                                • just_an_average_joe@lemmy.dbzer0.comEnglish
                                  25 days

                                  No, it isn’t.

                                  (Source: https://www.youtube.com/watch?v=ohDB5gbtaEQ461260665047)

                                    • Buffalox@lemmy.worldEnglish
                                      25 days

                                      I stand corrected. 😋

                                • Buffalox@lemmy.worldEnglish
                                  25 days

                                  A computer from the 80’s is still a sophisticated device.

                                    • [deleted]@piefed.worldEnglish
                                      25 days

                                      Not compared to modern top end hardware, which is how the word is used in this context.

                                        • Buffalox@lemmy.worldEnglish
                                          25 days

                                          Ok, but you could also say a simple pc about a modern pc, that does not mean it’s actually simple. It’s because it is used in place of ordinary. And ordinary also doesn’t mean simple in the literal sense. Even a “simple” mobile phone is in fact not simple.

                                    • Eheran@lemmy.worldEnglish
                                      25 days

                                      Which sensor in phones uses quantum states? Do you mean things like SQUIDs? They are a completely different beast than classical sensors like MEMS.

                                        • Buffalox@lemmy.worldEnglish
                                          25 days

                                          Motionsensors

                                            • fonix232@fedia.io
                                              25 days

                                              Do you mean the Soli radar? That ended up in what, 2-3 phone models altogether?

                                              Most phones do not have motion sensors.

                                                • Buffalox@lemmy.worldEnglish
                                                  25 days

                                                  No literally a common motion sensor.
                                                  https://en.wikipedia.org/wiki/Quantum_sensor

                                                  Quantum sensors have applications in a wide variety of fields including microscopy, positioning systems, communication technology, electric and magnetic field sensors.

                                                  One of these are the perfectly common motion sensor that detects if you move your phone, which is based on quantum phenomenon, like the phase shift between photons send in different directions.

                                                    • fonix232@fedia.io
                                                      25 days

                                                      None of the current phone IMUs utilise quantum phenomena for measurement. They’re MEMS/FOG/RLG systems.

                                                      Quantum IMUs are the size that requires rack mounting.

                                                        • Buffalox@lemmy.worldEnglish
                                                          25 days

                                                          OK but still the GPS using timing based on an atomic clock in space is absolutely sophisticated, and that is in even the cheapest smartphones today.

                                                            • fonix232@fedia.io
                                                              25 days

                                                              Your claim was quantum phenomena utilisation in phone sensors.

                                                              Let’s stop moving the goalposts please.

                                                            • DeadDigger@lemmy.zipEnglish
                                                              25 days

                                                              I mean everything electric is a quantum sensor not to defend anything

                                                              edit: further g sensors and accelerometers implemented by piezoelectricity are quantum sensors. They just use materials that make the sensing easy

                                                                • Blue_Morpho@lemmy.worldEnglish
                                                                  25 days

                                                                  If the device doesn’t use quantum effects directly, it isn’t a quantum sensor.

                                                                  Otherwise words have no meaning and textbooks would call 1860’s steam engines electric quantum engines because materials are held together with electric effects and atoms have quantum properties.

                                                      • youmaynotknow@lemmy.zipEnglish
                                                        25 days

                                                        I am extremely ignorant on these things. If what you say is true, it stands to reason that all the claims that “only 3 companies can produce memory chips” are most likely bullshit.

                                                        I hate the way the world is going right now.

                                                          • Buffalox@lemmy.worldEnglish
                                                            25 days

                                                            The 3 major makers Samsung, SK Hynix and Micron dominate the market, but they are definitely not alone. especially not since China has entered the market in force.

                                                        • Evil_Shrubbery@thelemmy.clubEnglish
                                                          25 days

                                                          Could have just hacked the TV like a normal pro.

                                                            • Overwrite7445@lemmy.caEnglish
                                                              25 days

                                                              Why hack it? Just buy the data from LG

                                                              • answersplease77@lemmy.worldEnglish
                                                                25 days

                                                                Seriously how does a multibillion tech company keep a smart tv in their confrence rooms? It has to be modified and its microphones removed, or forever offline at least

                                                                  • Squizzy@lemmy.worldEnglish
                                                                    24 days

                                                                    These meeting rooms have commercial displays but also they have the google or microsoft office speakers anyway

                                                                  • perviouslyiner@lemmy.worldEnglish
                                                                    25 days

                                                                    China’s already got control of that!

                                                                  • 0x0@infosec.pubEnglish
                                                                    25 days

                                                                    Openais products must be shit at coding if it unsuccessfully encrypted the sdcard as asked to

                                                                      • partofthevoice@lemmy.zipEnglish
                                                                        25 days

                                                                        What good will onboard encryption be if the device is seized? They will just figure out how to decrypt.

                                                                        I guess you’d need to set up asynchronous encrypt / decrypt keys, then move the data encrypted end to end. The target device can do the decrypting, while the bug only does encrypting.

                                                                          • 0x0@infosec.pubEnglish
                                                                            25 days

                                                                            Thats not how encryption works when implemented properly

                                                                              • partofthevoice@lemmy.zipEnglish
                                                                                25 days

                                                                                How so?

                                                                                If you ever intend to decrypt the data, don’t you need a decryption key?

                                                                                I think my point stands, you’d need this device to be only capable of encryption. Otherwise, anyone with access to the device can decrypt it. So it goes without saying, you’d have to push the data to a second device which handles decryption.

                                                                                  • black0ut@pawb.socialEnglish
                                                                                    25 days

                                                                                    You can have an encryption key that can’t decrypt the data. That’s what public and private keys are. The device can have a public key to encrypt the data, and then it can only be decrypted with the attacker’s private key. No need to even get it out of the device, you can also perform the decryption on the same device. Just don’t store the private key in there.

                                                                                      • partofthevoice@lemmy.zipEnglish
                                                                                        25 days

                                                                                        Right, but that’s referring to where the encryption key lives, what kind is used, and how. In the above comment, I’m just stating you need a decryption key.

                                                                                        Earlier I rose that you could store the decryption key on a separate device. I thought 0x0 was contesting that idea as “not how encryption works when l implemented properly.”

                                                                                      • 0x0@infosec.pubEnglish
                                                                                        25 days

                                                                                        No

                                                                                          • partofthevoice@lemmy.zipEnglish
                                                                                            25 days

                                                                                            Oh… so how do you decrypt your data without a decryption key? Don’t tell me you use a password…

                                                                                              • 0x0@infosec.pubEnglish
                                                                                                25 days

                                                                                                Do you store your password on the device in cleartext? Thats stupid.

                                                                                                Just no, youre plain wrong.

                                                                                                  • partofthevoice@lemmy.zipEnglish
                                                                                                    25 days

                                                                                                    Obviously not. Do you store your false equivalency fallacies on the internet in clear text? Apparently so, but I won’t call you stupid for it.

                                                                                                    • How do passwords get stored? Encrypted.
                                                                                                    • How do they get read? Decrypted.
                                                                                                    • What performs the encryption? Keys.
                                                                                                    • What can the keys be derived from? Passwords.
                                                                                                    • Where are those keys stored? On the damned device.

                                                                                                    Are you telling me, fuck all to the popular mantra that: if they have physical access to device, you’re boned?

                                                                                                    State sponsored forensic programs bypass TPM and shit all the time, requiring physical access.

                                                                                                    So where is your hypothetical security coming from? To me, it sounds like you’re needlessly giving me a hard time on a subject I probably understand better than you.

                                                                                      • sircac@lemmy.worldEnglish
                                                                                        25 days

                                                                                        OpenAI told me in an email that it used its own AI models to analyze data from the device—including forensic images of the data stored on the device—to find their suspect.

                                                                                        They will never find out

                                                                                        • AreaKode@riskeratspizza.comEnglish
                                                                                          25 days

                                                                                          I have a couple of these in a drawer somewhere. Who should I “hack”?

                                                                                            • toiletobserver@lemmy.worldEnglish
                                                                                              25 days

                                                                                              Hack the planet!

                                                                                              • modus@lemmy.worldEnglish
                                                                                                25 days

                                                                                                Super Intelligence.

                                                                                              • YiddishMcSquidish@lemmy.todayEnglish
                                                                                                25 days

                                                                                                deleted by creator

                                                                                                  • WhyJiffie@sh.itjust.worksEnglish
                                                                                                    25 days

                                                                                                    a microphone is cheap. you don’t need a battery if you can plug it in somewhere, be it a real power source, or a usb port or display output on something else.

                                                                                                  Technology@lemmy.world

                                                                                                  technology@lemmy.world

                                                                                                  Subscribe from remote instance

                                                                                                  Create post

                                                                                                  Report community

                                                                                                  Modlog
                                                                                                  You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.world

                                                                                                  This is a most excellent place for technology news and articles.


                                                                                                  Our Rules


                                                                                                  1. Follow the lemmy.world rules.
                                                                                                  2. Only tech related news or articles.
                                                                                                  3. Be excellent to each other!
                                                                                                  4. Mod approved content bots can post up to 10 articles per day.
                                                                                                  5. Threads asking for personal tech support may be deleted.
                                                                                                  6. Politics threads may be removed.
                                                                                                  7. No memes allowed as posts, OK to post as comments.
                                                                                                  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
                                                                                                  9. Check for duplicates before posting, duplicates may be removed
                                                                                                  10. Accounts 7 days and younger will have their posts automatically removed.

                                                                                                  Approved Bots


                                                                                                  • @L4s@lemmy.world
                                                                                                  • @autotldr@lemmings.world
                                                                                                  • @PipedLinkBot@feddit.rocks
                                                                                                  • @wikibot@lemmy.world
                                                                                                  Visibility: Public

                                                                                                  This community is visible to everyone.

                                                                                                  6 users / Day8.07K users / Week11.3K users / Month13.9K users / 6 months1.18K posts25.9K comments1 local subscriber89.5K subscribers
                                                                                                  Mods: L3s@lemmy.world
                                                                                                  • BE: 1.0.0-beta.2
                                                                                                  • Modlog
                                                                                                  • Instances
                                                                                                  • Docs
                                                                                                  • Code
                                                                                                  • join-lemmy.org