Recent comments

smartypants OP wrote (edited )

Reply to comment by TallestSkil in WARNING !!!!! ZERO Day exploit in fake JPGs being served to Browsers. A revealed exploit on July 21 2021 to add to long list of remote WebP exploits, and now CATBOX suddenly involved! by smartypants

Its worse, and you are right, as always, because on ConPro hours ago a NEW Feb 2022 WebP zero day unpatched on 60% of all Apple users showed up :

https://consumeproduct.win/p/142BTB1ZSP/fuck-around-and-find-out-shitbul/c/

So the new owners of scored.co (formerly .win) are now exhibiting their funding links more and their glowie tendencies on ConPro links march 21 2022.

This is all so tiring.

https://www.kaspersky.com/blog/webkit-vulnerability-cve-2022-22620/43650/

2

awdrifter wrote (edited )

Reply to What are some good podcasts to listen to? by Rambler

I listen to the Unmade Podcast. It started as a podcast about podcast ideas that will never be made into an actual podcast. But now it has branched into other stuff like travel and souvenir spoon collection.

https://v2.incogtube.com/watch?v=7phLmFbZS_c&list=PLY2OYgTm-83My-n2ST9TdGim2MPKTvoNh

As for more tech related podcast, Cortex is pretty good if you're into Apple product and related stuff (iOS apps etc).

https://v2.incogtube.com/watch?v=cxbA5ot-VL4

1

neilalexander OP wrote

Reply to dendrite-demo-yggdrasil — Matrix with Yggdrasil-native federation by neilalexander

dendrite-demo-yggdrasil is a standalone Matrix homeserver that uses Yggdrasil for the federation between servers. It has an embedded Yggdrasil node — the server name is based on the node’s public key. You can use any Matrix client to register accounts and to log in.

I built this a while ago for the P2P Matrix experiments but it still works and is quite fun.

2

ghast OP wrote

Reply to comment by TallestSkil in Poll: Have you heard about the large anti-mandate protests that happened a few days ago and the trucker convoy? by ghast

With any kind of demonstration, I think the main target audience is the public. It can make a difference when people see a large group protesting against the mandates since people are social and being part of a large movement is psychologically appealing. It helps people who are still holding out against mandates to not be demoralized. It can influence the people in the middle who are just complying without really being on board. And it's a networking opportunity for people who want to resist in other ways.

1

ghast OP wrote

Reply to comment by Wahaha in Poll: Have you heard about the large anti-mandate protests that happened a few days ago and the trucker convoy? by ghast

It's not a bad idea. I've gone cold turkey from politics and news for months at a time when I feel like it's taking up too much time.

But I do enjoy trying to understand what's happening, why it's happening, and what happens next. Since I enjoy it, I don't consider it a complete waste of time.

As for taking action, I think it's important that I do take action, but it's not clear what actions can make a real difference. I think understanding what is going on can help with figuring out which actions are effective and coming up with new ideas.

1

ghast wrote

Reply to The Old Internet Shows Signs of Quietly Coming Back by HMTg927

This will really be accelerated if people who are being censored tell people "subscribe to my rss feed" instead of "give me your email address and I'll email you". The main convenient thing about sites like reddit, facebook, etc. is that you can see a lot of different content you want to see in a convenient format while staying on one website. Lots of people don't even really know about RSS, but if there's a comeback, that will make it easier for people to follow updates on multiple personal blogs and websites.

2

ghast OP wrote

Reply to comment by takeheart in Twitter thread where Snowden describes how he would use a smartphone if he had to by ghast

Some journalists who read the article or twitter thread might decide to go without. But I think the reason many journalists are willing to risk bringing their phone amount to more than just the reasons Snowden mentioned (camera, microphone, and word processor). There’s the risk of government hacking but there are also various safety benefits to having a phone while traveling in a dangerous area in a foreign country. (Having a map of the area in a compact form, being able to message someone to request help if something has gone wrong, being able to look up local businesses, call a taxi service etc.) If Snowden just told journalists “don’t carry a smartphone” I think that message would largely be ignored for this reason. That might have been the reason they went with that iPhone too… probably figured it’s best to make mass adoption easier than give advice that won’t be listened too.

You’re right that the introspection engine turned out to be “too much” for most journalists. If I ran a newspaper and wanted journalists to use the introspection engine and/or remove internal microphones to replace with external mics, I’d assign it as a task to someone from IT to set that up on the phones of all the journalists who want it. But yeah, I was watching a video by the guy who Snowden collaborated with on this project (Andrew "bunnie" Huang ). He said he found out out that journalists need something that’s super straightforward to use. Afterwards he started working on another project called Betrusted which will be more straightforward for journalists. Betrusted looks interesting but it’s not finished yet. I was actually looking into it recently and didn’t realize the same guy was behind it. I’m going to post a video which where he talks about some other reasons for why he’s working on Betrusted. (Open Source is Insufficient to Solve Trust Problems in Hardware).

He said Edward Snowden came to him with this problem of journalists getting killed and asked him for a solution and the introspection engine is what he came up with. I think “bunnie” fell victim to this bias when assuming this is something journalists would be happy to use if they’re just shown how. https://en.wikipedia.org/wiki/Curse_of_knowledge

1

BlueHat wrote (edited )

Reply to by ____

Is it open source?

- futaba + futallaby + tinyib -

What are those links supposed to be? It seems like only one of them is pointing to a repository, although the other two also mention some kind of code. Am confused.

2

takeheart wrote

Reply to comment by ghast in Twitter thread where Snowden describes how he would use a smartphone if he had to by ghast

I've read the article. A few thoughts.

If trusting airplane mode is like trusting a drunk to judge if they are sober to drive, then a more secure smartphone would be like a driver trained to drive well enough when drunk. If your threat model assumes you might be hit by artillery fire from state military, then the tools you should use must be military grade. Yet right after that the article picks iphone for their introspection, not because any security issues, but because apparently it's the most common tool meeting preferences and tastes of people dodging artillery fire daily. I have to wonder, who really killed those thousands of journalists, did armed hitmen contributed more or less to the bloodbath than apple's office slaves? The whole premise of inspecting iphone to reduce political murders is wrong. Journos themselves should know better than cryptographers about how much you can trust corporate cocksuckers with your safety. "Asking reporters deep in war zones to carry a separate camera, audio recorder, and word processor to avoid surveillance" would be the obvious practical solution, modern devices can be as compact as smartphone and simply better at their intended purpose, yet the article ditches this solution as a matter of fact. Why? Why are they going along with the murderers by trying to convince their victims to carry the death mark? Making it introspectable does not change the nature of death mark.

What follows is the largest part of article with a ton of technical data on killphone, all on the wrong premise. Didn't you say reporters shouldn't be cryptographers? Now you're feeding them like radiologists, hardware engineers, soldering technicians, forensics experts, and more all to make them more (un)comfortable with their death mark? It DOES fairly shows that the device in question is a tracking monstrosity, but only to those verily technically educated.

After hearing whole performance it sounds like this: in act one solo sings "artillery dodgers - keep using iphone", in act two orchestra plays "hackers and corporate cocksuckers, you've got work to do". In the finale it throws a couple jokes "android is worse, buy iphone" and "tor is safe". And only after the bullshit is over you may hear a single cry from the audience if you're lucky. "Don't use smartphone, you don't have to"

1

ghast OP wrote

Reply to comment by takeheart in Twitter thread where Snowden describes how he would use a smartphone if he had to by ghast

Fair enough, could have used a nitter link. https://nitter.net/Snowden/status/1175419013402374145#m

Guess he could be limited hangout but even controlled op needs to give accurate info to have credibility. This article he links for example can be judged on its merits without necessarily having to trust him. https://www.tjoe.org/pub/direct-radio-introspection/release/2

Only thing that stands out as possibly intentional misdirection is some of the software recommendations.

1