The DMZ

scrcpy --otg plus xte "mousemove" saved the day. After hours blindly clicking bruteforcing the screen I managed to hit the Accept on adb and could get scrcpy to show the screen on my PC, so I changed the pattern to a PIN (way way way easier to unlock it now with a keyboard on the USB OTG)...

social networks are the root, trunk and leaves of all mental health evil

As you said, many of the individuals certainly are lovely (like our current CMs) but the company as a whole really needs to undergo some self-improvement.

@MechMK1 that's emblematic of another problem tho. People want the SE knowledge and experience but not the culture that makes it possible

@security_paranoid but also why that's no excuse.

I make some scripts, run once, forget about them, and pick myself writing the same script months later to do the same... now when I have an idea, I grep my scripts folder to see if the command I intend to use is already there

@security_paranoid I have a theory that you need at least half a dozen regulars and no more than about 20 for a good, lively chatroom

Gotta admit, kinda miss the Festive Hat season here

I’m not part of charcoal and yet i report whenever i can

Then periodically we, to use the technical term "nuke the ****" out of their accounts.

@uhoh 127.0.0.1

I was bored, so I asked ChatGPT what "The best way to evade cyber surveillance" is, and this is what it answered:

eh, the distinction between "police" and "gangs" is pretty loose tbh, and in the same regard the distinction between "government" and "organized crime" is just that one is organized.

"Yes, please give me undefined of something. Give me [object Object] of something" Statements dreamed up by the utterly deranged.

@CaffeineAddiction the problem with grad student + llm is that the grad student don't know enough to realize the llm doesn't know enough...

RIP user163495 aka MechMK1

I saw a TV commercial a few years ago where an ISP was talking about how great their modem/routers were and how they provided secure WiFi coverage for your entire home. They played up the security by showing them replacing a family's "insecure" devices, including a grandfather clock. The sales lady told the family, "It's not digital so we can't secure it, so it has to go."

@FireQuacker attackers don't always follows the regulations...

New vuln (DoS) discovered on RFC 1149 and RFC 6214: those protocols are sensitive to solar flares.

trojansource.codes

hello i am an error page


i ate your request

you can say RTFM means read the friendly manual if anyone accuses you from being offensive

Congrats on 10k

@MechMK1 gist.github.com/tinkertim/29e194ba4a9996551d019915c4ff449d

@nobody foaas.com/field/Mech/nobody/The%20book%20of%20Nod:73.5

sha256algorithm.com

If you're reading this, you've been in a coma for almost 20 years now. We're trying a new technique. We don't know where this message will end up in your dream, but we hope it works. Please wake up, we miss you.

security.stackexchange.com/questions/252015/… this was a very entertaining experience ....

However, the entire system is only as secure as its weakest link. So if I have both a Yubikey and, say, SMS enabled I am only as secure as SMS - adding the Yubikey provides no additional security unless SMS is disabled first, which it won't, because of the common requirement to have some other method of 2FA enabled alongside Yubikeys.

And here I always thought fintech referred to Finish tech companies... Kept wondering why everybody was so interested in the tech scene over there...

Fun fact: typing thisisunsafe in Chrome when faced with a "no user recouse" TLS error lets you gt through

"Hackers develop time machine to go back in time and stop themselves"

My best solutions come in dreams or in the shower.

Rep for privileges has always been a little goofy. I'd rather it be tied to other things. Like get edit privileges after 200 accepted edits, get CV privileges after 200 helpful flags, etc

Also, protip: Just add // DO NOT EDIT THIS FILE at the beginning of a file and it essentially becomes read only

@nobody No. I may hold the most diamonds, but I think the folks on Arts and Crafts have better decorative skills

I am god.

Very good guide for hardening Linux (explaining the pitfalls as well): madaidans-insecurities.github.io/guides/linux-hardening.html

@LucasKauffman In the name of Shannon, Turing and Shamir, go forth and become a crypto god. Or die trying.

I feel it's a bit of a demon core scenario. The closer we get, the worse the outcome for everyone around.

The whole idea of "protestware" is so fucking retarded. Imagine you were a russian developer right now, okay? You've become a persona non grata in a ton of communities for no reason, because tons of people equate "being russian" with "being pro-war". Your economy is in shambles, all your saved money has become worthless overnight and some american guy just decides it'd be funny to delete all your files because "We have to protest!"

I've been able to connect with and get help from the most senior and famous people in the industry by using the above formula. All my requests take less than 5 minutes to supply and the impact of them supplying is clear.

"I'm X, I need help with Y, can you provide Z?" a LOT of senior people are willing to help if you make is short and clear.

Neat rowhammer fuzzer that breaks 100% of DDR4 DRAM modules: comsec.ethz.ch/research/dram/blacksmith