Mauve 👁💜 @mauve@mastodon.mauve.moe

serious question, why do people use #substack or medium instead of just making their own blog? I assumed for monetization, but some ppl who certainly know how to make their own just write free blogs over there and idk what the deal is with that

Excellent demonstration of why a few ultra-rich people owning everything is inevitable unless we redistribute wealth.

And it has everything to do with math and nothing to do with how clever they are.

https://pudding.cool/2022/12/yard-sale/

Twitter cancelled our API access which broke the ability to login to Shodan via Twitter (SSO) . Email us at support@shodan.io if you're currently logging in via Twitter and would like to migrate to a regular Shodan account instead of using SSO.

ActivityPub can support portable identities, using the infrastructure and protocol that we already have: https://shadowfacts.net/2023/activitypub-portable-identity/

The crux of the issue with current software like Mastodon is that people and posts are identified by where they’re hosted, not who they belong to. It’s as if the URL for my blog post was https://5.161.136.163/2023/activitypub-portable-identity/. It moves the post from being controlled by me, the owner of shadowfacts.net, to my hosting provider who controls that IP address. But the web doesn’t work like that, and nor does ActivityPub have to.

Dang... all the old methods of hacking work. And they keep working...

One day I'll be 1337... today, I'll just be brute forcing telnet services like I'm the Mirai botnet...

Can't stop, won't stop.

#hacking #infosec

"you _would'nt_ download an AI !" ...

well ... that's what we can find on bittorrent nowadays ...

#llm #AI #AIIsGoingGreat

in my (seemingly eternal) quest to learn how to read qr codes by eye, i figured it was time to just sit down with a qr code and decode it with only a pen and paper (and the qr code specification and an ascii table because i don't have that memorized yet)

anyway, i got a drink from mcdonald's that had a relatively small version 2M code on it (which is about as small of a qr code that can still fit a reasonable amount of data in it) and i did all the work to unmask the data and extract the various blocks of modules to figure out the message itself. the message is just a bitly link that directs you to download their app from your respective app store but that's not really relevant

when copying down the original code, i chose to draw the locator features and the version information in a different color than the masked data. this made it easier in the unmasking step to not accidentally waste time trying to unmask static features of the code

only the first 5 bits of the version information encode data (the rest is error correction) and of that the main thing you need to worry about is the 3 bits for the mask pattern but once you have that it's straightforward to unmask the data. the mask patterns are defined as like modular arithmetic statements but since they all rely on "mod 2"s and "mod 3"s i like to just imagine them as a 6x6 pattern that tiles over the data sections of the code. if you look closely you can see the orange tick marks around the outside of the codes that i drew to keep track of where the mask patterns tiled

the two main conveniences that made this a lot easier are the fact that qr codes have their entire data section at the start and all of the error correction comes later and also the fact that this is a small enough code that the error correction is done in one single block. in larger qr codes, the data is split into even groups of 8-bit codewords (up to around 80 groups) and the data is interleaved between all of those groups

anyway, like i said, the eventual goal is to be able to do all of the work that filled up a whole sheet of paper in my head but i am a long way from that future and this is literally one of the first steps