• 2 Posts
  • 1.39K Comments
Joined 3 years ago
cake
Cake day: June 16th, 2023

help-circle
  • I wouldn’t worry too much about IQ numbers falling. It doesn’t fully capture human intelligence, and definitely has some biases (IYKYK).

    The IQ test has had a profound impact on psychology and society, offering a standardized measure of cognitive functioning. Yet its limitations are significant. Cultural biases, reductionism, limited predictive validity, and a history of misuse all complicate its role as a definitive measure of intelligence. While IQ tests can be useful tools, they must be interpreted cautiously and supplemented with broader measures of human ability.

    Ultimately, criticisms of IQ testing remind us that intelligence is a complex, multidimensional phenomenon that cannot be fully captured by a single number. The challenge moving forward is to balance the utility of IQ tests with a recognition of their limitations, ensuring that assessments of intelligence are both scientifically rigorous and ethically responsible.

    https://simplyputpsych.co.uk/psych-101-1/criticism-of-the-iq-test




  • Keep in mind, some of the children in Alpha had their schooling methodology switched up during the Covid-19 pandemic. They went from learning in a classroom environment to learning in an online environment for a couple of years.

    The teaching strategies do not translate the same across those two mediums, and the teachers had to adapt to it as fast as they could, but they were not experienced online teachers.

    Teachers with 10, 15, and 20+ years of classroom experience all of a sudden had to teach their classes online. They has to learn the system themselves, as well as teach their students how to use it.

    Many schools were underfunded and were not able to offer adequate technology to accommodate for this change. Many families couldn’t even afford internet, so governments had to establish voucher programs to fund low-bandwidth tiers of internet for them (which develops at the speed of red tape government).

    At least one adult had to be home with their children if schools were online-only, so they had one less income earning presence in the home, unless they were able to work online themself. That affects the longterm financial goals of each family, which they might still be recovering from to this day.

    By the time children went back to a classroom setting, they were missing some key skills that they would have picked up normally. Now you have 3rd graders returning to a classroom in 5th grade, but they still have 3rd grade reading levels. They have to learn 5th grade level material, and take 5th grade level testing. The online material they learned online during the covid years were a completely different set of educational material versus whats used in a classroom, so now the students have to adjust AGAIN.

    Anyway, thats just my thoughts on it.




  • Yeah I have a dedicated IoT wifi network for those types of random devices. They are isolated, so any device on that particular network cant talk to any other device. If they must communicate with each other, I will set up firewall rules between the two, but wont let them access anything else on the network.

    If they need internet access, you can rate limit their speed to like 1kb/s and set their dns resolver to a pi hole to keep tabs on where they are phoning home to and block accordingly.

    If you can configure that devices TTL, set it low to like 4 or 5, and increase by 1 if its having trouble reaching the necessary destination. Also, block access to outside countries, as you probably aren’t needing remote management from the foreign motherlands.










  • the part that we’re arguing against isn’t that a microsoft signing key would have fixed the problem, it’s

    I didn’t say a Microsoft signing key is required. Im saying Microsoft requires that you go out and obtain a signed certificate that proves your identity as a developer.

    this update mechanism already exists: it’s the reason the hijack was possible. whatever the technical process behind the scenes is irrelevant… that is how it currently works; it’s not a “what if”

    The update mechanism was successful hijacked because integrity checks and authentication checks were not properly in place. Notepad++ even said that they moved hosting providers after this happened to them.

    Per https://www.rapid7.com/blog/post/tr-chrysalis-backdoor-dive-into-lotus-blossoms-toolkit/

    adding signing into that existing process without any 3rd party involvement is both free, and very very easy

    Can you point out an existing open source application that runs on Windows that only uses GPG signatures?




  • The gpg sig method works great on other operating systems that aren’t Windows or MacOS, but Windows and MacOS do not use that method to verify the authenticity of developer’s certificates.

    The update mechanism works fine, but you will not be able to execute the binary on a Windows or MacOS system. The OS will not allow it to run without it being signed.

    The malicious actor would not be able to drag and drop their malware in without the Notepad++ certificate. The signature wouldn’t match.

    The certificate is not only doing authentication of the developer, but it is also doubling as an integrity check to make sure the code hasn’t been modified.