Show newer

Why use a URL shortener when you can use a phishy URL extender?

phishyurl.com/

Keep your security people alert and awake, generate phishing-looking redirecting links

#infosec

Maybe I should turn my weird arch linux setup into a preconfigured install for folks. :P

“GlassWorm isn't just another supply chain attack. It's using stealth techniques we've never seen before - invisible Unicode characters that make malicious code literally disappear from code editors. Combine that with blockchain-based C2 infra that can't be taken down, Google Calendar as a backup command server, and a full remote access trojan that turns every infected dev into a criminal proxy node.”

#technology #attack #security #cybersecurity #malware #vscode

koi.ai/blog/glassworm-first-se

Instead of making the best service possible for the lowest cost possible conpanies are making the shittiest product they can get away with while locking users into eternal subscription fees.

@Polychrome I think companies are addicted to extorting customers for access to their products rather than making tools that work well.

The recent AWS outage exposed just how many devices need always-on internet access keep track of scheduled events and it really weirds me out because nearly all of these devices have an on-board clock and scheduling events offline on-device has been a solved problem since like the 70's.

Automatic cat feeders that fail to trigger at the appointed time, smart mattresses with scheduled warm/cold functions that failed to change state, and many other 'smart home' related devices.

What's the point of requiring a remote server to ping a device over the internet at the appointed time when your product already comes with a built-in calendar function as part of its basic hardware and software design?

@lutindiscret Yeah, exactly what I was thinking after my initial search :P

mastodon.mauve.moe/@mauve/1154

The other part is we don't have any chat apps or concepts of "groups" in Agregore so a new app would need to be made for that

@lutindiscret Yeah I've bookmarked the webxdc dev server to look into for later. Probs not a huge surface to tackle and since it's TS there's likely libraries I can reuse. github.com/webxdc/webxdc-dev

@lutindiscret Loading the contents out of the app and wiring it up to the chat interface is a decent chunk of code to support. It'd take less time to reuse something instead of needing to read the spec and file formats from scratch and implement a runner from scratch.

@lutindiscret If there's an electron thingie out there to run webxdc it'd be pretty easy to incorporate.

@ellyxir I'm guessing it's more about liability and checking a box so it's harder to sue rather than safety :P

@akhileshthite Ah kinda like jackboxgames.com/ ?

I think something where you save the outputs to a hyperdrive would be a compelling use of the p2p stuff. e.g. something like gartic phone: garticphone.com/

@ellyxir So far it was pretty straightforward for me since I don't use all that many shell commands. What I'd be really curious to see is whether they can make grep or sed nicer to use :P

every app update now feels like getting mugged in a slightly different alley

@hakluke damn maybe I should try this. My monitor cable is also kinda old and freyed a bit

@brandon yeah like an automated thing explainer. I guess if you're going up to 1024 words you might as well just use an existing model and enforce the grammar restrictions on it 😅

@3timeslazy Good insight, ty.

I find I don't really need all the data manipulation stuff and my raw bash config has been serving me well. Likely I won't boot into it but I might use it for exploring APIs/data more.

Monthly fire alarm tests are psychological warfare 🫨

Show older
Mauvestodon

Escape ship from centralized social media run by Mauve.