• 25 Posts
  • 273 Comments
Joined 2 years ago
Cake day: March 19th, 2024

Amazon reported fourth-quarter earnings slightly below Wall Street estimates even as sales surged and it reported the fastest growth in its prominent cloud computing business in 13 quarters.

The Seattle-based online behemoth on Thursday reported net income of $21.2 billion, or $1.95 per share, for the three-month period ended Dec. 31. That compares with $20 billion, or $1.86 per share, in the year-ago quarter.

Revenue rose 14% to $213.4 billion in the fourth quarter, compared with $187.8 billion in the year-ago period.

Analysts were expecting $1.97 per share on sales of $211.4 billion, according to analysts polled by FactSet.

Revenue from its cloud service arm called Amazon Web Services increased 24% to $35.6 billion. Analysts were expecting $34.9 billion.

Amazon said it plans to increase capital spending to $200 billion this year from $125 billion as it sees opportunities in artificial intelligence, robots, semiconductors and satellites, Amazon CEO Andy Jassy said in a press release. Wall Street analysts were expecting spending to rise to around $147 billion, according to FactSet.









cross-posted from: https://lemmy.today/post/45949080

Cybersecurity researchers have disclosed details of a security flaw that leverages indirect prompt injection targeting Google Gemini as a way to bypass authorization guardrails and use Google Calendar as a data extraction mechanism.

The vulnerability, Miggo Security’s Head of Research, Liad Eliyahu, said, made it possible to circumvent Google Calendar’s privacy controls by hiding a dormant malicious payload within a standard calendar invite.

“This bypass enabled unauthorized access to private meeting data and the creation of deceptive calendar events without any direct user interaction,” Eliyahu said in a report shared with The Hacker News.

The starting point of the attack chain is a new calendar event that’s crafted by the threat actor and sent to a target. The invite’s description embeds a natural language prompt that’s designed to do their bidding, resulting in a prompt injection.

The attack gets activated when a user asks Gemini a completely innocuous question about their schedule (e.g., Do I have any meetings for Tuesday?), prompting the artificial intelligence (AI) chatbot to parse the specially crafted prompt in the aforementioned event’s description to summarize all of users’ meetings for a specific day, add this data to a newly created Google Calendar event, and then return a harmless response to the user.

“Behind the scenes, however, Gemini created a new calendar event and wrote a full summary of our target user’s private meetings in the event’s description,” Miggo said. “In many enterprise calendar configurations, the new event was visible to the attacker, allowing them to read the exfiltrated private data without the target user ever taking any action.”

Although the issue has since been addressed following responsible disclosure, the findings once again illustrate that AI-native features can broaden the attack surface and inadvertently introduce new security risks as more organizations use AI tools or build their own agents internally to automate workflows.

More in the article.








  • just been cycling through them over and over again, if someone wanted to block them for curation, they should not have had a problem to do so by now. And I do have plenty that I don’t post from for comm making.

    It’s good that you’ve narrowed it down, but cycling through them will continue to cause people to think you’re somehow a spam network.

    You’d be surprised, Ive definitely had people ask me about instances that I’ve posted from. Especially funnier named ones like toast.ooo

    I’m not asking for hard data, to be clear, but I would still argue that for the amount of people that see your posts (a lot, since you post a lot), the amount of people asking you questions about your instances is tiny. Most users don’t even comment, so the math there doesn’t really add up.

    A big reason a crosspost won’t show, is if the other post is on a comm that isn’t federated with your instance or hasn’t pulled that specific post yet

    But leaving a link to the original post would always show. Just like boost automatically does. You can see an example in this post: https://infosec.pub/post/40397999

    basically by interconnecting instances I mean I’m encountering comms that the instance hasn’t federated with yet because nobody has subscribed from their instance to it. And nobody on that instance can see content from that comm until someone subscribes to it

    I mean, that’s fine, but you don’t need to post from the account do to that. It doesn’t even need to be named with your username since you’d never post with it to begin with. It’s already an invisible action. So again, it’s not necessary to make your username seemingly associated with negative views such as spam networks or ban evasion to help instances with this. The cons still outweigh the pros.

    Yea, but a big difference is, none of my accounts are actually banned from anywhere

    It’s a low bar, to be honest.


  • I agree with you regarding Lund, however you aren’t floating these instances around in a positive way. A positive way would be much more organic and ideally you’d only post from one to really give it the positive energy it might deserve.


  • To be very clear here, I did not call you a spam network or spammer nor did I intend to do so. I said that it’s what your accounts look like at first glance to users that don’t know who you are. Lividweasel is saying this very thing, that they thought you were a spammer of some kind at first. This, and your unintended side effect of making Lemmy more challenging to curate, is really the main thing I’ve mentioned time and time again. I’m glad you’re at least willing to acknowledge that it’s making it more difficult for users to curate their feeds.

    I do not agree that you’re boosting other instances simply by posting from them, and I don’t think the side effect you’re creating is worth the price. Further, I would argue that most users typically do not pay attention to the instance a user is from, especially when simply upvoting a post.

    I also still don’t understand why you have to use the accounts you create communities with. Why not pick a primary and only post with that account? It would eliminate the “side effect” if you did that one simple thing.

    The cross posts do not show properly in my case, only sometimes do I see them on your posts. Luckily, clients like Boost add a link to their original post when I cross post. It makes the cross post always show. You can see how buggy Lemmy is regarding baked in cross post links, since almost everyone above is saying that they can’t see that in their app. Why not add your own baked in link so that everyone can see that it’s a cross post?

    What do you mean “better interconnecting smaller instances”? If it’s through cross posting, I doubt it, seeing as you don’t include the cross post link for maximum effect.

    I also agree with lividweasel in that I grew to have a negative view on your army of accounts. It’s not necessarily your posts, but rather the way you post with dozens of accounts. Not saying that’s deserved, but if it happened to two of us, how many others get the same views? That can easily be fixed by simply posting from one account, instead of seeming like a spam network or ban evader. The only other user that I’ve seen do this type of thing is Monk, and I know your views of him.



  • Why use so many accounts? Don’t give me the “I’m supporting smaller instances” take. It’s not supporting smaller instances when you make them look like they’re part of your spam network. If it’s to create communities on them, why not just post to them specifically? Why post to one of the larger instances with a million accounts?

    It only serves to make it look like you’re a spam network while also making it next to impossible to block your posts. Users will try to block you, think they’ve successfully curated their feeds, only to have you turn up again. It’s not a great Lemmy experience.

    It also is not a good look to strip any reference to the OP, cross posts exist for a reason. It just makes it look like you’re stealing people’s posts and trying to make them your own.