What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

  1. 이력서 피드백 받기
  2. 포트폴리오 작성하기

쓰고 보니 취업 관련밖에 없어서 다른것도 한번 생각해봐야겠다...

1
0
0
0
0
1
0
1

你的手機並未秘密監聽你,但真相更令人不安 https://newatlas.com/computers/smartphone-listening-conversations-ads-facebook/

本文探討一個流傳已久的科技陰謀論,即手機是否在未經用戶許可的情況下秘密監聽私人對話以推送精準廣告。雖然許多人都有過「談話後看到相關廣告」的經驗,但實際上,至今沒有足夠證據證明這種監聽行為的存在。然而,幾項研究和新聞揭露了一些與此陰謀論相關的更令人不安的真相。

2024 年媒體報導,Cox Media Group (CMG) 開發了一套名為「主動聆聽」的廣告技術,能利用裝置麥克風採集「即時意圖資料」,並結合人工智慧與行為數據提供高精準度廣告。然而,它並未實現「全天候監聽」,而是在用戶觸發像「Hey Siri」或「Hey Google」指令後,收集短暫的音頻數據。雖然這引發了舊有陰謀論的再度興起,但相關技術細節與實際操作的透明度仍有諸多疑點。

實驗結果進一步澄清了陰謀論的不實性。例如,2019 年行動安全公司 Wandera 的測試顯示,手機若長時間監聽並傳輸音頻數據,將顯著增加電池消耗及數據使用。然而,此類活動並未被偵測到。另一項由 Northeastern 大學進行的研究發現,雖然手機未秘密啟動麥克風,但透過屏幕截圖和行為數據的收集,同樣對用戶隱私構成重大威脅。

與其說手機「聆聽」,不如說企業透過用戶的行為數據(如位置記錄、社交互動、瀏覽歷史等)建立極為細緻的個人檔案,進而推送高度相關的廣告。這種現象導致許多用戶誤以為對話被監聽,實際上只是演算法利用龐大且細膩的資料進行預測與匹配。

Hacker News 上的討論補充了部分背景和觀點。例如,有用戶指出部分應用程式會頻繁截取自身屏幕,並將數據上傳至第三方。一些開發者則描述了手機內建工具如何以較低耗能方式偵測語音指令,例如蘋果的「Hey Siri」技術專門設計為離線模式,僅在特定關鍵字觸發後啟動錄音。此外,對於廣告「精準度」的疑慮,有用戶提及,精確的行為預測可能來自多層數據交叉分析,而非任何直接監聽的結果。

綜合而言,手機不需監聽對話即可透過龐雜的數據捕捉用戶喜好與行為,而這種數據驅動的精準營銷反而更令人不安。文章強調,在面對日益增強的數據挖掘能力時,如何保護個人隱私和數據使用透明性將是未來的重要挑戰。

https://news.ycombinator.com/item?id=43799802

0
0
0
0
0
0
1
0

Trying out Asahi Linux on my M1 MacBook Pro before sending it for trade-in!

It’s like revisiting my hometown — things seem more or less the same (since the last time I used Linux as my daily driver a decade ago), but you notice things have changed here and there 🥹

Photo of MacBook Pro showcasing Asahi Linux with fastfetch on terminal app
0
0
0

Trying out Asahi Linux on my M1 MacBook Pro before sending it for trade-in!

It’s like revisiting my hometown — things seem more or less the same (since the last time I used Linux as my daily driver a decade ago), but you notice things have changed here and there 🥹

Photo of MacBook Pro showcasing Asahi Linux with fastfetch on terminal app
0
1
0
0
1
0
0
1
0
0
0
0
0

AI的世界好可怕。假設有個插圖畫家有高度個人風格,這是他花了一二十年努力琢磨創造出來的,但是AI拿去訓練之後,他可以用一樣的風格生產任何主題的圖片,風格辨識度不下於原作。

那個畫家本來一幅插圖是收某某費用,AI生產只要他的千分之一,速度是他的1千倍。

之後會發生什麼事呢?

0
0
0
1
0
0
1
1
0
0
1
1

アボカド納豆丼 — 韓国のデパートで売っていたので食べてみました。 ChatGPT翻訳

ぬるぬる+ぬるぬる+ぬるぬるの食感になるのではと心配していましたが、ソースとのバランスが良くて完璧でした。
アボカドも新鮮で、納豆も普段食べている韓国の納豆に比べて豆が大きくて柔らかく、少し高級感がありました。
納豆+卵黄+韓国海苔ふりかけ+ご飯はやっぱり王道だと感じました。
普段はぬるぬるした食感があまり好みではないので納豆だけで食べることが多いのですが、卵黄を加えると意外とまろやかで美味しかったです。

0
0
0
1

I'm exploring a new idea called FediOTP (codename): an authentication system that uses DMs to deliver one-time passwords, allowing any account to authenticate with web services. Unlike current solutions that rely on specific APIs (, ), this would work with any ActivityPub-compatible server, increasing interoperability across the fediverse. Would love to hear your thoughts on potential challenges or use cases for this approach.

0

I'm exploring a new idea called FediOTP (codename): an authentication system that uses DMs to deliver one-time passwords, allowing any account to authenticate with web services. Unlike current solutions that rely on specific APIs (, ), this would work with any ActivityPub-compatible server, increasing interoperability across the fediverse. Would love to hear your thoughts on potential challenges or use cases for this approach.

For those skeptical of DMs in : I'm also considering an alternative verification approach using ActivityPub's Question feature. Instead of sending numeric codes, the system could send a poll with several emoji options, and the user would select the one that matches what's displayed on their login screen. This visual authentication method might offer better security against certain automated attacks while still leveraging federation rather than platform-specific APIs. Would this approach address some of the privacy concerns around DM-based verification?

0
1

I'm exploring a new idea called FediOTP (codename): an authentication system that uses DMs to deliver one-time passwords, allowing any account to authenticate with web services. Unlike current solutions that rely on specific APIs (, ), this would work with any ActivityPub-compatible server, increasing interoperability across the fediverse. Would love to hear your thoughts on potential challenges or use cases for this approach.

0