@nazokiyoubinbou @Viss Exactly

[davep@infosec.exchange]

@nazokiyoubinbou @Viss Exactly

[sassdawe@infosec.exchange]

@davep @nazokiyoubinbou @Viss I mean, it's not that I hold my opinion too strongly but you might find it hard to change my mind when you try to convince me that things I have experienced and scared me were never true.

That said, the other week I ran into someone who was able to explain why I was wrong about something for over 10 years and I was super grateful for it 🤗

[viss@mastodon.social]

@sassdawe @davep @nazokiyoubinbou be wary of the people who refuse to accept new data, or who refuse to change their positions when new data arrives that SHOULD force their position to change

[anotherkpresser@mastodon.art]

@Viss maybe adult life isn't for you

[tppetkov@infosec.exchange]

@Viss One of the "funny" parts in the article is "resource-constrained DC in Virginia". Like, there is no space for more racks, power consumption is almost 100% or there is no money resource for new hardware?:)

[khoji@ieji.de]

@Viss @MarvClowder
Damn. I’m already hosting a couple of my git projects myself via ssh. Now I need to move all the others over too.

[alex02@ieji.de]

@Viss oh yeah. this stuff is wild when it comes to the layers of how we get an image on screen.

[kunev@blewsky.social]

@alex02@ieji.de @Viss@mastodon.social this whole thing is definitely problematic. And I'd guess on older phones that are slow under normal circumstances anyway (which a lot of android phones in the wild tend to be) things getting a bit slower might not actually cause any suspicion in the user.

But it also says "no special permissions" and then talks about drawing over the target app. Drawing over other apps requires its own permission and it's fairly rarely required I think.

[jackgangi@masto.hackers.town]

@Viss Doritos are pretty sharp. Not Captain Crunch sharp but still dangerous

[feliscatusdomesticus@social.vivaldi.net]

@Viss

back in the good old days before A.I. ruined things..

[the_turtle@mastodon.sdf.org]

@Viss at a high enough velocity, a Dorito can kill you.

[fcbsd@hachyderm.io]

@Viss and don't get a 3D printed turtle from this lot: https://arxiv.org/abs/1707.07397

[reverseics@infosec.exchange]

@Viss does hackerone verify id of users? it should blacklist known slop producers…

[viss@mastodon.social]

@reverseics it looks like people are just gaming their user creation system, blatantly, and anybody with a set of eyes, based on that username alone could see that post was gonna be bullshit

[elfin@mstdn.social]

@Viss @reverseics Shit maintainers do not need.

[reverseics@infosec.exchange]

@Viss yeah given the username i figure no verification…crappy.

[cjust@infosec.exchange]

@Viss Looks like they changed their username from "b4sh0ne" after being called out for their AI slop shenanigans.

[paul_ipv6@infosec.exchange]

@Viss

flock is definitely going above and beyond in "we really want to enable evil". the city of Evanston IL ordered them to take down cameras but discovered they'd ignored the order and had to plastic bag flock's cameras.

[kajer@infosec.exchange]

@Viss

Think about it this way... I go to great lengths to NOT keep a history of my activities on my phone. No Activity history, no search history... I consider myself to be pretty "off-grid" when it comes to keeping records.

Now... If this was me:

Shut the fuck up, don't open the door.

B: I would not have the available "evidence" to prove I was not in an area at a time. I would need to rely on my own home cams to show I never left, or my destination cameras to show that I was in their store at a day/time. And most commercial orgs don't like giving you (a civilian) footage w/o a warrant. (They'll bend over for cops all day however)

So, my lack of "evidence" is now not enough to refute the cops "fabricated" "evidence"?

Shit is fucked yo.

[viss@mastodon.social]

@kajer dont answer the door, wait for them to bring suit, let their suit die due to lack of sufficient evidence, countersue for 20 million, make it huge and public, include ring and flock in the suit. if you get a payout, never work again, and ideally it'll act as a deterrent for other bullshits of the same flavor