Welcome to Incremental Social! Learn more about this project here!
Check out lemmyverse to find more communities to join from here!

groet

@groet@feddit.de

This profile is from a federated server and may be incomplete. Browse more on the original instance.

groet ,

You DONT want to turn it off. Digital forensics work WAAAAAAY better if you have a memory dump of the system. And all the memory is lost if you turn it off. Even if the virus ran 10h ago and the program has long stoped running, there will most likely still be traces in the RAM. Like a hard drive, simply deleting something in RAM doesn't mean it is gone. As long as that specific area was not written over later it will still hold the same contenta. You can sometimes find memory that belonged to a virus days or even weeks after the infection if the system was never shut down. There is so much information in ram that is lost when the power is turned off.

You want to
1: quarantine from network (don't pull the cable at the system, but firewall it at the switch if possible)
2: take a full copy of the RAM
2.5: read out bitlocker keys if the drive is encrypted.
3: turn off and take a bitwise copy of the hard drive or just send the drive + memory dump to the forensics team.
4: get coffee

groet ,

No. It's not a magic invisibility field inside. It's a magic object that works only on living "intelligent" creatures. It also doesn't work the same on different races. Only humans (hobbits are a subtype of human in Tolkiens lore) turn invisible. And because it's magic it also turns their clothing etc invisible. So either Frodo and his poop is invisible or nothing is.

Why Your VPN May Not Be As Secure As It Claims (krebsonsecurity.com)

Virtual private networking (VPN) companies market their services as a way to prevent anyone from snooping on your Internet usage. But new research suggests this is a dangerous assumption when connecting to a VPN via an untrusted network, because attackers on the same network could force a target’s traffic off of the protection...

groet ,

I have set it up in a way where all the packets have to go through their VPN and if they don't, they get dropped before they leave my PC.

That is the function of a firewall and not of the VPN. As I understand portmaster it does both. But that is not normal VPN behavior.

VPNs are not magic. They are a piece of software that encrypt traffic and send it to a special server. They do that by creating a virtual Internet connection (think like pluging in an additional Ethernet cable or connection to an addition WiFi at the same time). Everything that is sent through the virtual connection is encrypted. Your system now has (at least) two valid Internet connections (one real and one virtual). For every packet it sends it needs to decide which connection it should send it from. This is decided by something called the routing table. When you start the VPN it will put two routes into the table.

  • traffic going to the VPN server goes through the real connection (so the encrypted VPN traffic is routed correctly)
  • everything else goes through the virtual connection (the VPN tunnel where it gets encrypted)

The attack described is a way how a network router can add a new route into your devices routing table to basically override the second route from the VPN. The route is still there, there just is another one that has a higher priority.

A VPN is not the ultimate authority over your network traffic. It is just another program sending and recieving taffic.

groet ,

By design nothing in the chain can be altered. But of course you could have a block indicating "person X is now person Y". But you can always read that Y was at some point X (and at what point the change happened). That would not be good, as it would be a public ledger of all trans people. It would also make things like witness protection impossible because inserting a block "today in 2024, person W was born in 1974" is very suspicious

groet ,

pizza

microwave

I don't think the mushrooms are the problem in that situation

groet ,

Most VPNs use UDP. So set up a wireguard, tailscale or openvpn.

But you still need to "open up the firewall". UDP still works on ports the same way as TCP. I do agree however, that exposing a VPN port is more secure than exposing a port for a game server, as you don't know about the security of that server software.

groet ,

If you want any system to connect to you, you need to open a port. You don't need to do that for outgoing connections (the OS and your router will automatically open ports for the return connection). So if everybody connects to one central system, nobody needs to (explicitly) open any ports (except for the central connection point)

groet ,

Wait so without the option it checks against the system trust store and with the option it does exactly the same (but may also includes an additional CA if that was passed as the argument)?

This should be a cve. There is a security feature. It does not work as documented. That's a vulnerability. That should get a cve.

Wtf apple

groet ,

Or it was not really news worthy and got inflated by the media untill it was.

groet ,

Well maybe it's multiple choice.

  • "Dong, beard broad shoulders"
  • "Tits, hips, smaller waist"
  • "Character deleted on death"

Choose any combination you want

groet ,

The thing that confused me when first learning about docker was, that everybody compares it to a virtual machine. It's not. Containers dont virtualize anything. They take a (single) process from the host OS and separate that into its own environment. All system calls, memory access, file writes etc are still handled by the same os (same kernel).
However the process is separated both on the file system and process level. It can't see other processes outside of the container and it also doesn't see the real filesystem. It sees a filesystem provided by the container. This also means it sees different file and user permissions.
When you run a alpine Linux docker container on an Ubuntu system, the container only containes the (few) files for alpine but no Linux kernel no desktop environment. A process inside that container only sees the alpine files and not the Ubuntu files.
It also means all containers see a filesystem independent of each other and can use libraries and dependencies of different versions (they are only files after all).

For administration it makes running complex services easy. You define how to setup that service (what base Linux distro to use, what packages to install, what commands to run, and how to start the process). You can then be save to assume the setup of that service did not interfere with the setup of any other service.
"Service 1 needs a certain system wide config changed? Service 2 needs that config in the default state? And both need a different version of the same library?" In containers you can have all at the same time because they each see a different version of the same config and library.

And all this is provided by the kernel itself. All docker does is provide an "easy" way to create and manage containers but could could do all of that using chroot, runc and a few other.

As a note, containers usually don't come with systemd as they don't need an init system. You would run the service directly inside the container and then use systemd outside the container to make sure the container is started/restarted, or just docker as it can already do that.

I found a great article demystifying containers recently

groet ,

The cells of your body are part of you. They share the same DNA and descend from the same cell (the fertilized egg) and depend on each other to stay alive. However there are more gut bacteria inside of you than there are cells of yourself (they are a lot smaller than human cells). And they are not related to you. So you could reincarnate as a gut bacteria of somebody else

groet ,

its a lot more readable if you replace the : with any other function name

fork() {
     fork | fork &
};
fork

define a funktion called fork, which calls itself twice (call once, pipe ( "|" ) the result to the same function again which is run in a new thread in the background ( "&" )). Then call the newly defined function.
The : is used to make it look more like emoji.

groet ,

There are plenty wild animals in large cities. Foxes, rabits, racoons ... Berlin famously has a large boar population. Having a more human friendly city with green tram lines and less car traffic will surely increase animal populations.
However I doubt it would be a problem that isn't easily solvable or is still preferable to the current situation.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • incremental_games
  • meta
  • All magazines
    •