• 0 Posts
  • 6 Comments
Joined 2 years ago
cake
Cake day: June 10th, 2024

help-circle

  • Cookies are specifically separated out per-domain. Your browser will not give a random website access to your auth cookies/localstorage for other websites. There are some awful companies which do set cross-website cookies (e.g. facebook, google, and other adware), but (1) those cookies are not auth credentials and are used mostly for fingerprinting and ad targeting, (2) should be filtered out by your browser’s tracking protection (hence “if your browser is set up correctly”).

    Realistically there is still be a way for the website to fingerprint you enough to know who you are even without cookies, so the most adversarial outcome from clicking a link is that the attacker can know that you clicked that link, along with your general location (from geoIP) and some device info.

    iirc that’s how the linux tech tips channel got into trouble.

    Nah, that was pretty much an .exe sent out by a fake sponsor, which was downloaded and executed. It then stole all browser data (including google auth cookies). Opening a link ≠ running an unsandboxed exe.



  • We actually have a big shortage of talent

    That review may lead to changes in roles, responsibilities, and continued employment. Individual outcomes will be communicated directly once decisions are finalized.

    Knowing how the hiring/onboarding process works in IT — i.e. how fucking hard it is to find, hire, onboard, train and build up a working relationship with an adequate employee — I strongly doubt they have a “shortage of talent” if they’re willing to fire (or even just threaten to fire) people over what amounts to tooling use.

    Oh, also, if I got an email threatening my “continued employment” over shit like this I’d be looking for a new job ASAP. And I have been using LLMs for my work for a couple of years now.