Welcome to Incremental Social! Learn more about this project here!
Check out lemmyverse to find more communities to join from here!

@viking@infosec.pub avatar

viking

@viking@infosec.pub

This profile is from a federated server and may be incomplete. Browse more on the original instance.

viking ,
@viking@infosec.pub avatar

Google is Mozilla's biggest source of income, and google developers have actively contributed code to the Firefox engine.

So you decide for yourself what level of independence you assign to it.

viking ,
@viking@infosec.pub avatar

Yeah I can see why. Thanks for the comment, always happy to populate my blocklist and improve the user experience on Lemmy!

Redbox’s owner files for bankruptcy after repeatedly missing payments and payroll (www.theverge.com)

informed employees of the filing late Friday [...] that it had filed for a debtor-in-possession loan — a way for companies that are reorganizing after filing for bankruptcy to secure additional working capital to meet payroll. [...] employees have been waiting for paychecks since June 21st [...] it’s not certain that the...

viking ,
@viking@infosec.pub avatar

Without the buyout, the company would have failed even earlier. Doesn't help the employees either.

viking OP ,
@viking@infosec.pub avatar

Thought of that as well, but all ads are blocked and I get this popup even with the browser closed and after a full reboot (not just suspend and reactivate), so it must happen on system level, I assume. Checked my run on startup applications and services, and they appear to be clean as well.

viking OP ,
@viking@infosec.pub avatar

I tried and it doesn't update, even after a clean reboot with no browser open whatsoever. However I did find another entry in the Firewall that comes up right on boot, which is a service called MS.Edge.Webview2, which seems to be triggered through the Teams App. I've now completely uninstalled Teams, and after a fresh boot the ad (or "media control") seems to be gone now. Guess I'll be using Teams from my phone or via browser in the future.

viking OP ,
@viking@infosec.pub avatar

Not that I'm aware of, but I'll double check.

viking OP ,
@viking@infosec.pub avatar

I haven't heard of either, let me check if I can run those with my user profile and not break anything I need to log on to our corporate network in the process.

viking OP ,
@viking@infosec.pub avatar

My employer. Who owns the laptop. And forbids me to fuck around with it...

viking OP ,
@viking@infosec.pub avatar

I live in China, policies are to be followed. There is no "but", and I rather pick a nicer hill to die on, when it comes to that.

viking OP ,
@viking@infosec.pub avatar

Yep I can access the hosts file, that's a great idea. Will give it a shot. I just hope those aren't IPs that MS is using for genuine requests of applications I have to use such as Teams or Outlook... But will give it a try, at least if anything else breaks, I know what to do to resolve that. Thanks for the tip!

viking OP ,
@viking@infosec.pub avatar

Not for the sake of being able to use Linux, no. On other terms most certainly.

viking OP ,
@viking@infosec.pub avatar

Been poking around a bit more, and found another entry in the Firewall that comes up right on boot, which is a service called MS.Edge.Webview2, which seems to be triggered through the Teams App (that I did have on autostart). I've now completely uninstalled Teams, and after a fresh boot the ad (or "media control") seems to be gone now. Guess I'll be using Teams from my phone or via browser in the future. No idea how that happened though, I never played any video through Teams.

viking OP ,
@viking@infosec.pub avatar

It's really not as crazy as the media makes it sound like on a general basis, but yeah. Ever since covid even the last person realized what rights remain when the powers that be go wild. My days here are numbered anyways, just a few more weeks.

viking OP ,
@viking@infosec.pub avatar

Yeah it's very weird, no idea what happened there. Maybe someone had somehow sent me a link and it was looping in the background? No clue. I gave up trying how teams and teams groups work a long time ago, the implementation is a major shitshow.

OneDrive automatically backups folders in Windows 11 without users' permissions (windowsreport.com)

According to the latest reports, Windows 11 has made an independent choice by automatically turning on OneDrive folder backup for Desktop, Pictures, Documents, Music, and Video folders without your permission. This signifies that, whether you approve or not, everything is becoming coordinated with the cloud....

viking ,
@viking@infosec.pub avatar

I have disabled and uninstalled it, but office 365 still enforces it as the default save as location, so now when I use the dialogue, the system hangs for 30 seconds. Even disabled it in the policy management, but no dice.

viking ,
@viking@infosec.pub avatar

Oh nice, thanks! Will give it a shot.

viking ,
@viking@infosec.pub avatar

Aren't they regulated in some way or other? I had problems with them in Europe (travel a lot for work, including some African and Central Asian countries) and they blocked me when I tried to buy something while in Nigeria. Fair play, common scam hotspot.

But no matter what I did to prove my identity after returning, they wouldn't unblock my account. So instead I sent a complaint to the CSSF (the FED of Luxembourg, where they got their European banking license) and within days I had the head of compliance from their HQ in Ireland on the phone telling me that my account was open again and practically begging me to drop the complaint.

viking ,
@viking@infosec.pub avatar

They had their servers seized, but were later returned and the service came back as mega.nz, legit and all.

viking ,
@viking@infosec.pub avatar

Discord is great for casual chatting. Was it ever intended to be a forum though? For that use case, it's completely impractical.

what's your current linux distro?

wanting to hop into the world of linux on a dual boot method (one of my favorite games unfortunately cannot be run on linux at all, and it's a gacha. I don't want to gamble with my account being banned, so I'm keeping windows for it specifically.) this'll be my second go at it, I used Pop!_OS briefly but had some issues with...

viking ,
@viking@infosec.pub avatar

I have a Surface Notebook 2 and for the life of me can't get Ubuntu (or Xubuntu in my case) to work with it. No matter which installation style I use, either it crashes during the installation or never boots into the bootloader. Eventually I installed some custom Arch, but I hate it.

viking ,
@viking@infosec.pub avatar

Yeah I'll try eventually, but I got another Laptop running Xubuntu just fine, so I just don't really use the Surface at all. It's more of a last resort for the time being, and for that, any OS will do.

Never buy .xyz

I just wanted to post this here because I want to help you all and hurt gen.xyz as much as possible. I had a .xyz domain through njal.la which I used to host jellyfin, homeassistant, and other basic things for friends and family. My domain recently became inaccessible without any notice. After a while of troubleshooting, I found...

viking ,
@viking@infosec.pub avatar

They are indeed the registrar. Would have expected more.

viking ,
@viking@infosec.pub avatar

The thing is that gen.xyz is the registrar itself, i.e. the highest authority for this tld. If they blacklist domains, you're screwed.

viking ,
@viking@infosec.pub avatar

You can just switch it off.

viking ,
@viking@infosec.pub avatar

They might give you the possibility to opt out thanks to living in the EU, the OP might not be as lucky.

viking ,
@viking@infosec.pub avatar

That would work for ads before the content, but not if they are spliced into the running video.

viking ,
@viking@infosec.pub avatar

Just catch everything in the background, play the full ad on mute, and when the ad segment is coming up in the stream you are actually watching, switch to the cached copy. Shouldn't be too hard to program.

viking ,
@viking@infosec.pub avatar

Sure, I'd take that over ads anytime.

viking ,
@viking@infosec.pub avatar

You can actually delete the data for good in both the android and windows software through the interface, and it works. But yeah the amount of data is staggering.

I've got a reminder in my calendar to delete the data on the first day of a new quarter, so this here is accumulated since April 1st:

image

viking ,
@viking@infosec.pub avatar

I can automatically clean up space, or restrict space used, but then I don't get to choose who's data to keep or.

viking ,
@viking@infosec.pub avatar

It does a bit, since every party will be represented in the European council based on the number of votes they have. It's not an election where the winner takes all.

I think the pirates had one or two representatives in the council, which is enough to start debates and make proposals. They obviously can't push anything through by themselves.

viking ,
@viking@infosec.pub avatar

They just plaster the brand name all over the web to score high in number of results. Not intended to rank high on google, just to fake visibility in general.

Spotify is raising the cost of Premium subscriptions, again (www.engadget.com)

Spotify is officially raising its Premium subscription rates in the US come July, following reports of the move in April. The platform is increasing its Individual plan from $11 to $12 monthly and its Duo plan from $15 to $17 monthly — the same jump as last year's $1 and $2 price hikes, respectively. However, its Family plan...

viking ,
@viking@infosec.pub avatar

That's gotta be a running gag now. Fuck em with a cactus.

viking ,
@viking@infosec.pub avatar

Kernel level anti-cheat won't work, thank heavens the Linux developers won't allow that abomination.

No process deserves that kind of elevated permissions.

viking ,
@viking@infosec.pub avatar

I've yet to find a single website that doesn't work in Firefox.

viking ,
@viking@infosec.pub avatar

Yes, a reboot is a reboot. As long as the boot sequence cycles through where the code is validated, you're good.

viking ,
@viking@infosec.pub avatar

I'm using Automate for this purpose, it's a very simple flow:

https://infosec.pub/pictrs/image/244a3743-8018-4c3b-a4c8-d80043ca90d1.jpeg

https://play.google.com/store/apps/details?id=com.llamalab.automate

viking ,
@viking@infosec.pub avatar

No, that's the whole point of using encryption. If the windows boatloader had a means of scanning the content of an encrypted file system, it would have already been exploited to circumvent encryption.

viking ,
@viking@infosec.pub avatar

I have Edge for two things: Teams and Outlook.

The desktop software for both is so bad, I can't even use them half of the time.

Outlook actually works in FF, but that way I can put it on my second screen and use Firefox on my main one so I don't need to switch tabs when emails come in.

viking ,
@viking@infosec.pub avatar

Yeah but occasionally FF hangs and I want to avoid force closing the wrong one through the task manager.

viking ,
@viking@infosec.pub avatar

Oh cool, didn't know that one yet, thanks a bunch!

viking ,
@viking@infosec.pub avatar

DDOS attacks block connection to the servers, they don't actually harm the data itself. You could probably overload a server to the point of it shutting down, which might affect data in transit, but data at rest usually wouldn't be harmed in any way; unless through some freak accident a server crash would render a drive unusable. But even then, servers are usually fully redundant, and have RAID systems in place that mirror the data, so kind of a dual redundancy. Plus actual backups on top of that; though with that amount of data they might have a priority system in place and not everything is fully backed up.

viking ,
@viking@infosec.pub avatar

Wasn't that Pearson or some other shitty "educational" book publisher?

viking ,
@viking@infosec.pub avatar

You can't use those on a router, and they are painful on mobile.

viking ,
@viking@infosec.pub avatar

So you are running a full-fledged OS on a standalone computer that functions as a router. An actual router has a very limited operating system with no such functionality, plus it's always online by design, so you'd basically have to have a key that is permanently plugged in; or depending on the setup you'd have to re-authenticate ever so often. Not exactly great considering most routers are hidden somewhere in an inaccessible corner.

viking ,
@viking@infosec.pub avatar

No, but if I use a service to solve a specific problem only to see the need to have a failover in place regardless, I might as well not use the service.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • random
  • incremental_games
  • meta
  • All magazines
    •