The DMZ

A serious place where infosec is discussed PS we don't do hard...
yst 12:14
this is the ultimate file server... only one python script, supports http/https/ftp/ftps/webdav/ssdp/mdns, chroot, resumable downloads AND uploads, deduplication, timed shares, password protected shares... it's a lot of features
Fri 13:35
if you want to implement something by hand, take a look on erasure codes. There are libraries already done that you can use, and they work well
Fri 13:23
degrading performance isn't the worst outcome, hindering the security is... a slow security program works slowly, a broken security program is useless
Fri 11:05
Tahoe-LAFS may solve your issues without adding another layer
Fri 11:04
I believe adding more layers to a working system usually degrades the system...
Thu 15:22
@Cero or you could use Tahoe-LAFS
Thu 15:12
@Cero for protection against offline dumps, full disk encryption already solves your problem.
Jul 10 15:27
and bitchat secure chat wasn't built with security in mind? shocking!
Jul 10 15:26
so McDonalds hire portal login were 123456/123456?
Jun 26 02:39
@Rivesticles not much... someone stops by, nobody is here (and @nobody isn't here) and they leave
Jun 24 11:50
"Plastic waste is such a headache..."
Scientists: "hold my beer!"

https://www.theguardian.com/science/2025/jun/23/scientists-use-e-coli-bacteria-to-turn-plastic-waste-into-paracetamol-painkiller
Jun 24 05:17
and remember the device
Jun 24 05:17
next one I will connect to adb on every single computer I own as soon as it reaches my hands
Jun 24 05:16
a (way more than) few blind clicks later, I managed to hit the "Remember this device" on the adb authorization dialog and now I can use the phone with scrcpy while plugged on the computer... and in one week I got a new phone.
Jun 24 05:15
scrcpy --otg plus xte "mousemove" saved the day. After hours blindly clicking bruteforcing the screen I managed to hit the Accept on adb and could get scrcpy to show the screen on my PC, so I changed the pattern to a PIN (way way way easier to unlock it now with a keyboard on the USB OTG)...
Jun 24 05:13
My phone fell face down, broke both the screen and touch. I had enabled USB debugging but haven't saved ADB keys from any of my current computers. I had a similar device handy and spent the day trying to find ways to unlock it and enable adb so I could use scrcpy to use the phone while the replacement is on the way.
Jun 19 12:27
they have 20-ish products in the portfolio...
Jun 19 12:27
Positivo... it's a Brazilian company that was an education company and began assembling computers 20 years ago, and now rebrands generic Chinese gadgets, translate the manuals and that's it
Jun 18 17:37
I would love to have the stream on vlc, but I am not in the mood for firing up wireshark and decoding the stream...
Jun 18 17:36
got a wifi camera for free, there's no rtsp access and the only way to get the video feed is using a smart app...
Jun 7 21:41
dmz still is a pinned tab on my browser, but most of the time the only change I see is the "The last message was posted a long, long time ago." footer...
Jun 6 16:33
and one is from 3 years, 11 months ago...
Jun 6 16:31
and it's not half... of the 47 posts now, 31 is the bot, 5 spammers, 5 closed, and it leaves only 6 legit posts.
Jun 6 16:24
@JeffFerland what have I missed?
Jun 6 16:23
@CaffeineAddiction sec.se is pretty dead... bot is pushing back things from a decade ago
Jun 4 17:13
social networks are the root, trunk and leaves of all mental health evil
Jun 4 17:12
and even if something have a dedicated app, I use the mobile site and not the app, except the banking apps, gmail and youtube
Jun 4 17:12
I don't have any social network, maybe reddit could be considered one... or SE... but none of them are on my phones
Jun 4 15:11
Interesting reading on how Meta and Yandex used native apps on Android to track browsers even on incognito mode:
https://localmess.github.io
May 30 14:56
makes sense and does not makes sense at the same time
May 30 14:36
one of the ideas to fight AI is to license its contents to AI companies... "AI is killing us, so let's give them our unique content so the few users left won't need us anymore even quicker"
May 30 14:35
I saw on slashdot some ideas they were trying to implement...
May 29 23:59
I hope they anti-bot and anti-gaming algorithms are top notch...
May 29 23:58
StackExchange will start paying experts to answer questions...
May 11 00:13
no schroeder, I don't know anyone...
May 8 15:46
so if your favorite exploit was patched in 2005, don't throw it away, it may still be useful... and that's why EthernalBlue will keep working for a long, long time...
May 8 15:44
$Id: TODO,v 1.135 1998/03/22 14:02:06 zeev Exp $
May 8 15:44
... and then the client says it's still running PHP 3.0.5 in a server...
I got PHP 3.0.5 source code to see when it was released, and the TODO have this header:
May 3 22:31
answer is undefined...
Apr 29 22:53
https://security.stackexchange.com/questions/281189/my-phone-has-been-hacked

> We are not tech support. – schroeder ♦
Apr 28 17:07
yep, the internet is filled with bots
Apr 28 17:07
anonymous researchers, no contact information, nobody on Zurich university have nothing to comment about... more than a thousand comments over months.
Apr 28 17:06
AI "experiment" unleash on reddit to change people's opinions: 404media.co/…
Apr 28 12:42
and coal generators emanate a lot of radiation because coal have thorium, uranium and other radioisotopes that get transferred to the atmosphere with the smoke that was already bad enough
Apr 28 12:41
the waste that produces a lot of radiation decays pretty fast (that's why is emitting a lot of radiation), and the waste that will produce radiation for thousands of years produce little radiation (that's why will last a while)
Apr 28 12:40
and about that amount of nuclear waste, I saw somewhere that all the nuclear waste ever produced by humanity would fit a Walmart parking lot
Apr 28 12:39
somehow building critical infrastructure on the shoreline that is affected by earthquakes and tsunamis is a bad idea
Apr 28 12:38
@JourneymanGeek Microsoft have better security practices than them, but imagine MS using that data to train their AI...