Security and Proprietary Issues, Focusing on Microsoft Abuses

posted by Roy Schestowitz on Apr 30, 2023

• Quick IOC Scan With Docker, (Fri, Apr 28th)

• The weird world of Windows file paths

  File system paths on Windows are stranger than you might think. On any Unix-derived system, a path is an admirably simple thing: if it starts with a /, it’s a path. Not so on Windows, which serves up a bewildering variety of schemes for composing a path.

• Security Risks of AI

  Stanford and Georgetown have a new report on the security risks of AI--particularly adversarial machine learning--based on a workshop they held on the topic.

• How Secure is Code Generated by ChatGPT? [Ed: It is barely even usable. Better to search for existing code that actually works, chatbots are not the way.]

• GitHub Copilot Emits GPL. Codeium Does Not.

  To start, what is GPL (General Public License)? By definition, open source software (OSS) is, well, open. But just because some code is public does not automatically mean it can be used for commercial purposes without permission. OSS licenses define acceptable use of the particular library - permissive licenses (ex. MIT, BSD, Apache) means you actually can legally use that code for whatever, including commercial reasons, but non-permissive licenses such as GPL mean that you cannot without consent.

• PLI Chronicle: Policy for Generative AI Best Practices

  Check out my latest article. Hot off the presses (and 100% human-written).

• ChatGPT, GitHub Copilot, & the Coming Code Apocalypse

  Listen now (24 min) | The Lunduke Journal of Technology Podcast - April 27, 2023