Welcome to Incremental Social! Learn more about this project here!
Check out lemmyverse to find more communities to join from here!

@viking@infosec.pub avatar

viking

@viking@infosec.pub

This profile is from a federated server and may be incomplete. Browse more on the original instance.

viking ,
@viking@infosec.pub avatar

Yeah you better set it to Ireland or Malta to get full EU conformity.

viking ,
@viking@infosec.pub avatar

Are there multiple servers of your VPN in the country? Might be worth switching around, or even using a neighboring country instead, assuming that people from across the border shop there as well.

viking ,
@viking@infosec.pub avatar

You don't need root to change the launcher? You can simply install launcher manager and the custom launcher (wolf or whatever), and set it through there.

I'm usually rooting all my android devices, but the shield is the first one where I didn't see a need for it.

UK Trial: Pornhub's Chatbot Halts Millions from Accessing Child Abuse Content (www.wired.com)

A trial program conducted by Pornhub in collaboration with UK-based child protection organizations aimed to deter users from searching for child abuse material (CSAM) on its website. Whenever CSAM-related terms were searched, a warning message and a chatbot appeared, directing users to support services. The trial reported a...

viking ,
@viking@infosec.pub avatar

Probably not, but you can still use related search terms.

viking ,
@viking@infosec.pub avatar

A court in Germany has recently decided that reading the code of a software you legally purchased and finding plain text passwords there is illegal hacking.

The person was hired to do a security audit (by a third party) and disclosed the finding to the software developer, not even to his own employer.

The developer decided to sue him instead of fixing the problem.

At this point I have lost all trust in the technological capacities of judges out there.

viking ,
@viking@infosec.pub avatar

Lemmy is not a singular software or website, every instance on its own need to ensure compliance with their respective laws where they are domiciled.

But if instance A is domiciled in the EU, and the content mirrored to instance B in Zimbabwe, where no right to be forgotten exists, then a user of instance A can't invoke any laws beyond what the local admin can control.

That's amazing for high availability of content - it's essentially mirrored in perpetuity - but a nightmare for privacy advocates. AFAIK there haven't been any court cases related to deletion requests, so that's still virgin territory.

viking ,
@viking@infosec.pub avatar

The link doesn't seem to work. Did you include the instance?

AI-generated content and other unfavorable practices have put longtime staple CNET on Wikipedia's blacklisted sources (www.tomshardware.com)

In the wave of AI controversies and lawsuits, CNET has been publicly admonished since it first started posting thinly-veiled AI-generated content on its site in late 2022— a scandal that has culminated in the site being demoted from Trusted to Untrusted Sources on Wikipedia....

viking ,
@viking@infosec.pub avatar

CNET lost my trust when they repacked software and drivers in their archive with a homebrew installer that bundled bloatware. Initially the bing search bar, then Opera, latest I remember was some antivirus solution. Sure, you can deselect them all, but I hate those business practices with a passion.

viking ,
@viking@infosec.pub avatar

Unemployment and references should be the norm, nothing to request.

viking ,
@viking@infosec.pub avatar

They don't show explicit banner ads or anything, but every now and then there will be links to "recommended software" in your start menu's app drawer or the notification thing in the bottom right (not the taskbar, that foldable drawer thing).

You can disable those as well, but not by default.

viking ,
@viking@infosec.pub avatar

Sounds like someone cloned the account and is running the clone in an unofficial version, that's why you didn't get locked out in the original installation.

Whatsapp allows to sign in by scanning a QR code in the web app, I believe that's how the unofficial apps work. So maybe the person got tricked into scanning something?

Cutout.Pro, an AI-powered visual design platform, leaked 20M records, including email and IP addresses, names and salted MD5 password hashes, which have then been broadly distributed. (haveibeenpwned.com)

Haha, brand new company with MD5 password hashes. Maybe they oughta consult about securities with their/other AIs more often. Hopefully, nobody did anything naughty on the site....

viking ,
@viking@infosec.pub avatar

That really depends on the password complexity. Sure, you can crack a password of 6-8 characters in below 30 minutes, but anything more complex than that will take days and longer.

My default password is 22 characters long and includes a unique identifier for each service plus a checksum. Say as an example (similar enough to my actual use case) for Adobe I'll have "Ae" (first and last letter of the service) and "41" in a specific position (A = 41 in Hex).

That way even if I repeat the other 18 characters (including symbols, upper and lower case characters) it will take years to crack my password, and the hash is unique for each service/website, so there won't be any collateral damage either, even if some service I used got breached and my password somehow fully exposed.

viking ,
@viking@infosec.pub avatar

Like I mentioned, I'm using a related pattern, nothing as simple as the one I sketched out here.

Is it normal for a new lemmy instance to display n+1 registered users on the status page?

I created a lemmy instance and noticed the stats on the index page showed that the instance had 2 users registered, even though only the admin account existed at that point. I created a second account, and now it shows 3 users. However, the database query SELECT name from person WHERE local='t'; only shows only the admin account...

viking ,
@viking@infosec.pub avatar

I'm pretty sure that's some workaround against a divide by zero bug that made it from hotfix to permanent fixture.

viking ,
@viking@infosec.pub avatar

Use Fennec instead, no issues on Android

viking ,
@viking@infosec.pub avatar

I prefer Fennec, Mull is too restrictive. I get the appeal, but I want some of the comforts.

viking ,
@viking@infosec.pub avatar

My biggest pet peeve is the system color scheme detection. Mull always runs websites in white.

viking ,
@viking@infosec.pub avatar

Desktop: Firefox + uBlock + SponsorBlock (for youtube) + Consent-O-Matic + Tampermonkey w/ YouTube HD script (force 1080p resolution)

Mobile: Fennec (Firefox fork) + uBlock + Consent-O-Matic, for youtube I'm using NewPipe with Sponsorblock

viking ,
@viking@infosec.pub avatar

And nothing of value was lost.

viking ,
@viking@infosec.pub avatar

Don't forget the table of contents and page headings like "analysis" or "recommendations".

Garbage software.

viking ,
@viking@infosec.pub avatar

Terrible, of course. Especially since they are aiming the service to improve sign-up reliability in countries that block telegram, acting as a relay exposes yourself. Carriers in China (where I live) and other questionable countries are actively snooping around, and since SMS are generally unencrypted, the simplest heuristic would figure out what you're involved in and start a very serious investigation.

On top of that, phone numbers in many countries are also unique logins to a number of services (again, here in China you need it for literally everything, it's THE number one digital footprint), and attackers could use the information for bruteforce/wordlist attacks on known services, or use them for social engineering.

As much as I like the idea of helping others sign up who don't have the means to acquire a foreign phone number, I would never willingly commit to that.

viking ,
@viking@infosec.pub avatar

Fuck apple with a cactus.

viking ,
@viking@infosec.pub avatar

OnePlus 10 pro.

Would never sacrifice the flexibility and customizability of an Android device for the clunky and unintuitive UI of an iPhone.

viking ,
@viking@infosec.pub avatar

I'm in the medical device field, and user error is the most common patient killer. No matter how many treatment recommendations you put into the UI, Dr. Smartass overrides it all and then you have a casualty. Can't wait for AI to fix stupid.

viking ,
@viking@infosec.pub avatar

Lawyer time. At will, maybe. But you've been assaulted on the job, are now suffering from severe anxiety (right???), and got fired on top of it? They'll eat your boss for breakfast and get a nice severance package out of it.

viking ,
@viking@infosec.pub avatar

I had it running in a genuine small office environment with 8 employees, who all need to run Windows due to some software constraints.

Policy management and user account controls are great for security, and remote management via rdp is also neat.

viking ,
@viking@infosec.pub avatar

Most smartlocks have a bypass lock for power cuts etc. that is shockingly easy to pick.

viking ,
@viking@infosec.pub avatar

I've run mine under the floorboards. CAT6e flat-band cables with multiple redundant outlets. Not a great solution in a finished house, but when redoing the floors, it's great. From room to room just drill through the wall below the floor level and pop the cable through. I've crimped mine myself so the hole is literally tiny, but even for a regular connector you don't need all that big a hole.

In case I ever need to replace them, I hope I'll be able to attach a new one to the old cable and just pull it through slowly.

viking ,
@viking@infosec.pub avatar

For reselling a service already being offered for decades?

Paris votes to crack down on SUVs | Non-Parisians will be charged almost $20 per hour to park large gas or hybrid vehicles within the city center in a bid to address pedestrian safety and air pollu... (www.theverge.com)

Paris votes to crack down on SUVs | Non-Parisians will be charged almost $20 per hour to park large gas or hybrid vehicles within the city center in a bid to address pedestrian safety and air pollu...::Parisians have voted to increase parking charges for out-of-town SUV drivers as part of the city’s efforts to address road...

viking ,
@viking@infosec.pub avatar

I'd love to see how they calculated those 20%. If it's merely a statistic of which type of car was involved in what share of deadly accidents with pedestrians, it says nothing about the car but rather about the drivers.

Once a car reaches a certain speed, it really doesn't matter if it's an ultralight vehicle or a tank.

viking ,
@viking@infosec.pub avatar

Briar has even fewer N/As than SimpleX and all greens otherwise. Second column in the table.

viking ,
@viking@infosec.pub avatar

Same. Not one interruption during the crackdown.

viking ,
@viking@infosec.pub avatar

Brave? Please educate yourself and stop using that piece of garbage.

How Do I Avoid Giving Home Address to Bank?

I've heard of things like iPostal and Traveling Mailbox. Do these services allow you to register with bank, DMV, IRS, Voting, etc? How do they work? Would a normal P.O box using its physical address from USPS work? I've tried researching it and haven't gotten clear answers....

viking ,
@viking@infosec.pub avatar

Banks require a physical address, that's part of basic KYC (know your customer) requirements and part of anti money laundering / anti terrorism funding laws.

So they won't accept P.O. boxes. While those mail forwarders can work, some will also blacklist them over time.

And really, ask yourself the question if you want your cards, PIN, and general correspondence about your finances mailed to a random third party where some underpaid person opens up and scans your letters all day...

Not quite sure what you mean with whitepages btw., your bank is not signing you up anywhere.

viking ,
@viking@infosec.pub avatar

My cats come and go as they please, one spends about 90% of her time indoors, the other mostly nights, but is gone during daytime. I usually see her when I walk my dog, she'll creep up from behind a bush and finish the walk with us, come in for a snack and then be gone again.

viking ,
@viking@infosec.pub avatar

Nothing. Ideally you'll take a privacy hardened fork though, like Fennec or LibreWolf.

viking ,
@viking@infosec.pub avatar

Opera was effectively the first software I bought, back when they had a trial version in 2001. They had tabbed browsing and mouse gestures, a solid DECADE before they came to any other browser. Lightyears ahead of the competition and worth every penny. I think in 2003 they made it free, and I wasn't even mad.

I was forced to switch to Firefox at some point when a website I had to use for work was incompatible due to some Java applet that wouldn't load properly, and then slowly migrated over.

Shame to see what happened to this amazing piece of tech.

viking ,
@viking@infosec.pub avatar

You bought the ad-free version, they had a small banner on top. And of course there were key generators and such, back in the days there wasn't any online key validation. Or you could kill the banner with a local proxy. Still, I actually wanted to support the development, just like I donate to good FOSS software now, or buy android apps to remove ads although I'm already killing them all with adaway on a rooted phone.

Sure, there were free browsers out there, but back then Opera was really way ahead of the bell curve.

viking ,
@viking@infosec.pub avatar

Yes.

viking ,
@viking@infosec.pub avatar

I don't think you understand how copyrights work. If they are abolished, everybody is free to redistribute your creation without compensation or even acknowledgement. The moment you put it out there, it's instantly public domain.

That means we'd have no more professionally produced movies, series, books, songs, games, etc., but would be stuck with what's essentially fan art.

Sure, there are talented artists out there who produce music as a hobby, youtubers who make great videos and such, but it would be the end of commercial productions.

viking ,
@viking@infosec.pub avatar

I know two couples who got divorced because of it.

viking ,
@viking@infosec.pub avatar

The guys were playing all nights & weekends for years, neglected their wives and in one case children (other couple didn't have any), the childless wife ended up cheating, the other allegedly as well (but wasn't ever proven nor admitted to), both women eventually filed for divorce.

They also neglected their friends and came crawling back once their lives fell apart. I had since moved so didn't really hang out with them again, but from what I hear, both got back into the game eventually and withdrew further.

viking ,
@viking@infosec.pub avatar

It's below the recommended average on German roads (stands at 130kph / ~81mph).

viking ,
@viking@infosec.pub avatar

Are the dev roms fully compatible with Netflix & Co.? I'm running a shield and the one thing that kept me from rooting it was compatibility with hardware DRM. Have since cancelled all my subscriptions after they locked my family out and tried to hike the prices, but I'm still following the developments out of interest.

viking ,
@viking@infosec.pub avatar

You can use wise.com, they also give you free virtual credit cards. Up to 3 simultaneously, it's amazing. Been using them for years, absolutely for free.

viking ,
@viking@infosec.pub avatar

See my comment above - wise works perfectly fine. https://infosec.pub/comment/5824149

viking ,
@viking@infosec.pub avatar

In the US maybe, elsewhere it's common and accessible. Here in China it's commonplace in home water filters and air purifiers for instance. I can also buy endless UV-C LED strips and do with it whatever I please.

viking ,
@viking@infosec.pub avatar

Probably not through some online broker, but OTC with an actual trading desk you can short just about anything. In the end it's just a contract.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • random
  • incremental_games
  • meta
  • All magazines
    •