Dan / is on Nostr

He/him.

Lapsed craftsperson
No spoons, only knives
Too-earnest chronic illness fuckup

Header image is a church sign that reads:
THOSE PREVENTING HISTORY
FROM BEING TAUGHT
INTEND TO REPEAT IT

Profile image by @heyheymomo.
A smiling amorphous cartoon blob gleefully riding a bicycle.
It has swept back handlebars and the back tire is kicking up a modest cloud of dust.

:donor:

Last Notes

2024-05-25 18:41:58

- reply

👍 Cunningham's Law 👍
> Cunningham's Law states "the best way to get the right answer on the internet is not to ask a question; it's to post the wrong answer."
> The concept is named after Ward Cunningham, the inventor of wiki software. According to Steven McGeady,[1] the law's author, Wikipedia may be the most well-known demonstration of this law.[2]
> Cunningham's Law can be considered the Internet equivalent of the French saying "prêcher le faux pour savoir le vrai" ("preach the falsehood to know the truth"). Sherlock Holmes has been known to use the principle at times (for example, in The Sign of the Four.[3]) In "Duty Calls" ("Someone is wrong on the Internet"), xkcd references a similar concept.[4] The Chinese idiom 拋磚引玉 "tossing a brick to attract jade" expresses a similar concept.
https://meta.wikimedia.org/wiki/Cunningham%27s_Law

2024-05-25 18:16:57

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/503/083/652/216/923/original/a02ca917001f9624.jpg

2024-05-21 19:08:16

- reply

that's the thing that really terrifies me. not that it will eventually become impossible to disable, but the fact that it being baked in to the OS means an attacker or abuser can just re-enable it. probably with a single PS command.
it's making a keylogger and half the functionality of a RAT with full history into a LOLbin. and it won't be flagged or disabled by any security tools.
the *productivity measurement* tools MS has already been marketing for years were bad enough, how long until recall becomes a part of the legal hold workflow? how long until your boss watches every single thing you do because let's be honest, plenty of shitty bosses are just petty cops deep down. what about the creepy sysadmin with a crush on someone, who then harvests their email password with recall? how much damage could someone do with those credentials?
the possibility for abuse is so intensely, wildly outsized with any actual utility that anyone can imagine, you would have to be completely out of touch with even basic human decency to think this is a good idea.

2024-05-16 22:09:09

- reply

Foucault's boomerang keeps flying right back. there's a reason so many "counter-insurgency" technologies and communications/information security bypasses and tools are developed in Israel.
The world's largest open-air prison gives you all the testing and development opportunities to create the most advanced malware and espionage technology, then sell it to the most repressive regimes in the world.
there are dozens or hundreds of Cellebrites and the rootkit and ad-injector makers (CrossRider) that went on to buy up hundreds of VPNs (Kape), the ones in the Pandora Papers (Sagi), and myriad other examples.
Let alone the military and classified exchange of weapons and tactics.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/453/022/928/805/816/original/b92bd33e7ae8bc1c.jpg

2024-05-16 19:13:21

- reply

this is one of the underappreciated things in the conversation, yeah! look at most packaging, plastic, waxed cardboard, etc. It's almost all 250ml / 500ml / 1L and other "round" metric numbers. Even spirits and wine bottles have been 750ml/1.75L for a very long time.
we're already there. nothing would really change for almost all consumables.

2024-05-16 00:42:16

- reply

like every technology deployed by the police or military, it will create more collateral damage, not address any of the root causes, further abuse the public purse, and enrich people with entrenched power. while also not being effective at its stated purpose.
firing one of these off in the dense urban environment might *only* permanently destroy an expensive EV and all the electronic devices in the area. i'm more concerned about it shutting down medical devices like a pacemaker or insulin pump or implantable.
and the fact that they will inevitably be turned on protests to stop live streams and destroy cameras and phones.

2024-05-16 00:10:45

- reply

and of course some defense contractor is already poised to sell them unknown and untested weapons for their new war.
https://cleantechnica.com/2024/05/15/uk-police-may-get-portable-emp-device-to-shut-down-e-bikes-scooters/

2024-04-25 03:47:39

remember how Naomi fucking told us this a YEAR AGO and no one wanted to believe it until the government knocked on her door and she can't post anymore?
https://www.technologyreview.com/2024/04/24/1091740/chinese-keyboard-app-security-encryption/

2024-04-16 00:48:00

- reply

[@SwiftOnSecurity](https://infosec.exchange/@SwiftOnSecurity)
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/278/130/796/211/829/original/a4c7c8e09981491d.png

2024-04-12 18:04:36

- reply

brb, running a counterespionage op

2024-03-31 02:24:16

- reply

[@tinker](https://infosec.exchange/@tinker)
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/187/917/998/986/790/original/ee9747f02aa0899e.mp4