Mauve 👁💜 @mauve@mastodon.mauve.moe

Hey all, if you have a Google Pixel 6/7 or a Samsung phone: Disable VoLTE and Wi-Fi calling until this issue is patched: https://9to5google.com/2023/03/16/google-exynos-modem-vulnerabilities/

tl;dr: Tests conducted by Project Zero confirm that those four vulnerabilities allow an attacker to remotely compromise a phone at the baseband level with no user interaction, and require only that the attacker know the victim’s phone number. With limited additional research and development, we believe that skilled attackers would be able to quickly create an operational exploit to compromise affected devices silently and remotely.

Google's Project Zero usually makes vulnerability reports public after 90 days. This is an exception because it goes directly from internet to baseband-level (tl;dr: the second OS inside your phone that powers the LTE/5G modem) remote code execution. This is morally equivalent to getting code running on your WiFi card.

Here is a list of the most likely affected devices:

Samsung Galaxy phones including those in the S22, M33, M13, M12, A71, A53, A33, A21, A13, A12, and A04 series
Vivo phones including those in the S16, S15, S6, X70, X60, and X30 series
Google Pixel 6 and 6 Pro, Pixel 6a, Pixel 7 and 7 Pro
Any wearables that use the Exynos W920 chipset
Any vehicles that use the Exynos Auto T5123 chipset

Helpfully, the baseband is a binary blob of uninspectable firmware that users can't inspect or prove hasn't been tampered with.

New P2P service (pigeon-to-prison).

I think this article should have an actual photo of one of their little backpacks.

https://www.cbc.ca/news/canada/british-columbia/second-pigeon-caught-with-drug-backpack-inside-bc-prison-1.6779808?cmp=rss

Did you know the Journal of Trial and Error is wanting to publish rejected grant applications? In their words, "We believe that applications often suffer from a highly competitive system rather than a deficient proposal."

If this sounds interesting to you, check out the call for submissions, which also has a link to their blog post on the topic: https://journal.trialanderror.org/pub/callrga/release/1?readingCollection=d235496a

#AcademicChatter

"it works on my machine (fullscreen chrome on m2 macbook pro with gigabit ethernet and traditional mouse+keyboard)"

"Inuit are 85% of Nunavut population, & 70% of us have Inuktut as our mother tongue. Yet all the schools operate in English. Greenland runs an entire government in Inuit language. They’ve had an Inuit language school system since 1979. If they can do it, we can do it. 🧵 👇🏾

#LanguageRevitalization #Inuit #Nunavut #Indigenous

Thread Reader: https://threadreaderapp.com/thread/1635299909158191105.html

I've been talking with an academic researcher who is interested in speaking with people who have shut down their fediverse servers, for any reason.

I know it's a touchy subject so I didn't want to just refer her directly to people, but if you are seeing this message and you're interested, please DM me and I will give you her email. I did a 1-hour interview with her on more general topics and really enjoyed the experience.

(Boosts appreciated!)

Lack of sleep linked to car accidents among teens and poorer achievement: When schools started after 8:30 a.m., attendance, standardized test scores, and academic performance in math, English, science, and social studies increased, while tardiness declined. One school that shifted start times from 7:35 a.m. to 8:55 a.m. saw a 70% decline in the number of local car accidents among drivers ages 16 to 18.

https://popresearchcenters.org/research-highlights/more-sleep-could-improve-many-u-s-teenagers-mental-health/

It is truly impressive how bad google search has gotten at just finding basic information and I do not understand why almost no one is noticing or talking about this.

I do not want Slack to provide a probabilistic summary of what I said. I don't want notion to guess what I'm going to say. I want to choose my words with clarity and precision in mind, and if people want me to take the time to read what they've written I would hope that they've taken the time to choose their words too

And I really want to take my words out of training data sets