Mauve 👁💜 @mauve@mastodon.mauve.moe

We are thrilled to welcome Mauve to Causal Islands🏝️! Mauve (they/it) is a decentralized software consultant with a focus on local-first web apps and community mesh networks.

Hey all, if you have a Google Pixel 6/7 or a Samsung phone: Disable VoLTE and Wi-Fi calling until this issue is patched: https://9to5google.com/2023/03/16/google-exynos-modem-vulnerabilities/

tl;dr: Tests conducted by Project Zero confirm that those four vulnerabilities allow an attacker to remotely compromise a phone at the baseband level with no user interaction, and require only that the attacker know the victim’s phone number. With limited additional research and development, we believe that skilled attackers would be able to quickly create an operational exploit to compromise affected devices silently and remotely.

Google's Project Zero usually makes vulnerability reports public after 90 days. This is an exception because it goes directly from internet to baseband-level (tl;dr: the second OS inside your phone that powers the LTE/5G modem) remote code execution. This is morally equivalent to getting code running on your WiFi card.

Here is a list of the most likely affected devices:

Samsung Galaxy phones including those in the S22, M33, M13, M12, A71, A53, A33, A21, A13, A12, and A04 series
Vivo phones including those in the S16, S15, S6, X70, X60, and X30 series
Google Pixel 6 and 6 Pro, Pixel 6a, Pixel 7 and 7 Pro
Any wearables that use the Exynos W920 chipset
Any vehicles that use the Exynos Auto T5123 chipset

Helpfully, the baseband is a binary blob of uninspectable firmware that users can't inspect or prove hasn't been tampered with.

New P2P service (pigeon-to-prison).

I think this article should have an actual photo of one of their little backpacks.

https://www.cbc.ca/news/canada/british-columbia/second-pigeon-caught-with-drug-backpack-inside-bc-prison-1.6779808?cmp=rss

Did you know the Journal of Trial and Error is wanting to publish rejected grant applications? In their words, "We believe that applications often suffer from a highly competitive system rather than a deficient proposal."

If this sounds interesting to you, check out the call for submissions, which also has a link to their blog post on the topic: https://journal.trialanderror.org/pub/callrga/release/1?readingCollection=d235496a

#AcademicChatter

"it works on my machine (fullscreen chrome on m2 macbook pro with gigabit ethernet and traditional mouse+keyboard)"

"Inuit are 85% of Nunavut population, & 70% of us have Inuktut as our mother tongue. Yet all the schools operate in English. Greenland runs an entire government in Inuit language. They’ve had an Inuit language school system since 1979. If they can do it, we can do it. 🧵 👇🏾

#LanguageRevitalization #Inuit #Nunavut #Indigenous

Thread Reader: https://threadreaderapp.com/thread/1635299909158191105.html