• 1 Post
  • 56 Comments
Joined 5 months ago
cake
Cake day: January 24th, 2024

help-circle





  • If you make users sign in too much, they will just make their passwords short and easy to remember, even 24hrs is too much and people bitch about it all the time, especially since we have password managers enforced, meaning every time they need to Auth they need to Auth into their system, Auth into their password manager, copy the password, auth into their phone, look at the 2FA code and type that in.

    Doing this every day just to open email is understandably fucking enraging even to me as a security “”“engineer”“”/analyst/${bullshitblueteamemailreaderjob}

    Press it harder and they will use simple passwords that will inevitably be passed through to something external (e.g. cockpit which even I can bruteforce) or reused somewhere at some point, and then someone just has to get lucky once and run whatever run0 sudo su <reverse shell bs here> to bypass all protections.












  • No I wouldn’t think that about the UK. Tories shifted massively rightwards over the past decade and they are really losing most voters to Reform - a hard right party, so they are simply not hard-right enough for most voters, meanwhile Labour has shifted massively right to occupy the space Cameron-style neocons were in before.

    The right win in the long run because if labour wins, the dynamic will be of that between Cameron-esque conservatives under Starmer Labour and hard-right conservatives under Reform/UKIP/whatever Farage party as the two major parties. This is the final form of the overton window shift, on which the UK and US led the world on in 2016.

    If anything the lib Dems - if you take their manifesto at face value - are far more progressive than Labour at this point and don’t adopt the “managed decline” style of governance.

    This is where the UK FPTP system might actually work well, Reform could get as many as 17% of votes, ahead of Tory 15% and become the 2nd largest party, and yet end up with like one parliament seat because they dont end up with a majority in any one county this time around.

    The only hope then is that Starmer is just secretly a really good guy who won’t say so because the tory media would eviscerate him on culture war shit, that he survives the power struggle of a labour seat supermajority and kicks out the likes of Duffield and Streeting.


  • Oooh I had an Intel Atom Vaio Netbook as my first ever computer I actually owned, given to me as a gift by parents for school. I asked for a gaming laptop, so I was real bamboozled by it.

    Somehow though I managed to grief my friends’ Minecraft server with /set 0 and enderdragon spawn spam while talking to them on Skype, but it was painful, opening a web page took literal minutes sometimes and my internet wasn’t the fastest back then but it wasn’t too bad either like 5-10mbps easily. But it wasn’t the worst.

    That honor goes to an MSI gaming laptop. It was actually really powerful, quad core, 16GB RAM, 8GB VRAM, MSATA SSD and a 1TB HDD that is still alive and in a JBOD setup with mergerfs in my server today serving me shows to watch thru Jellyfin.

    In 2014 it was nothing to scoff at, the 880m ran GTA V on almost the highest settings at 1080p and it had tons of storage.

    But as a computer it was just fucking terrible, the screen is the dimmest, most TN LCD blue filter shit you’ve ever seen, it was all I had so I watched things on it, and it just always made me depressed that I was watching beautiful films and shows and playing games through this awful blue filter that had no warmth, everything looked like some movie dementia flashback.

    USB port melted itself and made some random parts of the case have an electric surprise for you sometimes, keys popped off if you breathed on em but not like you would want those keycaps to stay on because they were disgusting, speakers sucked in dust and vibrated it inside, making all audio feel like earrape at any volume, headphones jack flew out, touchpad was off to the side because of the dumbass numpad, ethernet port fried entire cables, DVD drive wouldn’t read disks, dumbass UEFI firmware locked down to shit, took forever to disable secureboot and the setting would get lost randomly.

    About 3 years later, the AC port fried itself and would work like a pair of dodgy earbuds and I had to sit there rotating it like I was finding a radio signal in class, battery was long gone by then so it would shut off at random, which made android app dev I was doing at the time on it somehow even worse of an experience.

    Still have many fond memories of my times with it but man did I not miss it at the time.

    I replaced it with a 2010 ThinkPad X201 I got for 50 bucks and loved it, I proudly used and abused it and showed it to everyone like it was my first dress with pockets until I eventually blacked out on xanax and procedurally took the entire thing apart and flashed ??? onto the firmware chip and couldn’t put it back together ever again.


  • Thanks for the explainer, but that’s not what I meant.

    For example: If I, an ISP in Beijing went to BEIJING CERTIFICATE AUTHORITY Co., Ltd. which is on the list, and had my cert issued by them for foobar.com that listed them as the root trust, wouldn’t that work? Because the service operating there currently is illegal and I need to take it down, i don’t see how or why they could refuse. If they can’t do this for ISPs, then certainly law enforcement should be able to force them to comply, I would assume.

    If I then went to abuse that cert and spread malware on my fake cloned site, then what are the affected users going to do, call the cops and tell them the illegal seedbox is down?

    This is the only way I can see governments being able to display blocked website notices, takedown notices and other MITM insertions demonstrably happening in all sorts of countries without triggering a “back to safety” warning in most browsers.

    This has to be possible, because otherwise the observable results don’t make any sense.

    I’m not necessarily saying they did the attack this way instead of just simply spreading malicious torrents which is far easier, but I don’t see why they wouldn’t be able to do this.


  • Yeah you’re not writing the books, you got billionaire think-tanks doing it for you, and so far your statistics don’t actually prove the point you’re trying to make.

    We never measured loneliness in the past 100 yrs in trans and bisexual communities, so we have nothing to compare to, and your single study knows not to make claims about “these days” that you are making here, for all we know it’s exactly like i said - its been worse and now its better, even if it’s still bad.

    Likewise general loneliness studies take into account the increased awareness and openness around mental health and pin it as one of the potential causes as well as the declining purchasing power (a requirement to socialize) and lack of funding for local governments to prop up infrastructure for public spaces as well as a lack of public transport and suburbanization all long before they even touch social media, which is only ever mentioned by MSMs as a scare tactic to clickbait readers, and there’s still the fact that a 100 years ago the exact same arguments about loneliness were being made and likewise blamed on progress and technology like the printing press by reactionaries and yes, there was a moral panic about books getting everyone to stop socializing and only read instead.

    So it’s actually you who personalizes everything, and instead of defending your arguments with logic you Appeal to (somewhat doubtful) authority which doesn’t even back up your point, you draw your own conclusions and project them onto the data - a classic misuse of statistics

    have a confirmation bias

    Yes I do, but so do you, and so far you’ve yet to present anything actually remotely convincing. I don’t have a stake in this personally, I don’t use social media and idc about it, it was a mistake to have it, I just like the internet because I can buy drugs with crypto without the fuzz and glowie opportunists itching for kids to beat up

    and you like the little tech bubble you live in

    Do pray tell what is this “tech bubble”? Are you going to resort to calling me a techbro now just because I know things you don’t? You do know where you are right?

    Also “bubbles” aren’t real, that whole craze about how we were all in echo chambers on the internet was completely manufactured and thoroughly debunked - it’s actually the opposite

    At this point though if you fall prey to algos that’s on you imo. Just don’t use algorithmic platforms with a profit incentive ez pz we have foss fediverse clients and instances for a reason. Same as complaining about streaming costs, just pirate that shit.

    I left Tumblr because I couldn’t patch out the ads with Vanced and I don’t tolerate advertising in any way shape or form, thankfully on the internet it can be disabled with Sponsorblock, DeArrow, privacy badger, unlock etc., unlike IRL where the psychic damage is unstoppable.

    so it must not be a problem overall if it doesn’t affect you personally.

    Plenty of things don’t affect me personally, the genocide in Gaza, homelessness (though I was close to it), lack of entry level jobs for graduates, COVID, layoffs, medical bills etc. but I believe they are all problems, the mismanagement and exploitation of society by the capitalist class and imperial ambitions make my blood boil.

    I strive to cultivate that hate, to anhiliate the state as my civic duty, but I just like to maintain some basic intellectual honesty while I do so, and not fallback to noble savage and greenwashing fallacies of the anprim ecofash reactionary crowd who just are vaguely upset by aesthetics of modernity.