Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)N

NaibofTabr

@ NaibofTabr @infosec.pub

Posts
2
Comments
1209
Joined
3 yr. ago

  • Freenet - Services Without Servers

    Jump

  • What is the point of designing technology for people to use that does not account for common "people problem"s?

    I think it's important for people to understand just how large of an issue CSAM is on the internet. This recent article has some numbers: https://www.comparitech.com/blog/vpn-privacy/child-abuse-online-statistics/

    Basically every platform that allows users to upload arbitrary content has this issue. It doesn't even require presumed anonymity, people share this stuff on Facebook. I think Darknet Diaries Episode 93: KIK also helps show just how prevalent it is.

    You can't just handwave CSAM as a pretext. Every file-sharing platform that allows anonymity is rife with it. To operate an anonymous file sharing system is to enable child exploitation.

  • Removed Deleted Locked

    Permanently Deleted

    Jump

  • Virginia Department of Labor and Industry: https://doli.virginia.gov/

    You probably want the Payment of Wage section: https://doli.virginia.gov/programs/labor-law/payment-of-wage/

    Virginia Office of the Attorney General: https://www.oag.state.va.us/

    Plumbers & Steamfitters Union based in Norfolk, VA:

    https://www.ualocal110.org/about-company/

    Probably not super helpful if you weren't already a member, but if you get past this period you should consider joining.

    There are always private employment lawyers. Here's an example: https://www.berrylegal.com/practice-areas/private-and-public-sector-employment/virginia-employment-law/

    Usually they'll do a consultation for free. If they think you have a case they may take it on speculation.

  • Sally the Robot Was Coming to a New York School. Then the Plug Was Pulled.

    Jump

  • Yeah no, I get the distinct impression that this is investor bait. The demo models are just plausible enough to draw some funding ("this one's just the prototype! next version will be better with your money! swearsies!"). It's not intended to be useful, it's intended to get VC buy-in. I think it's vaporware.

  • Sally the Robot Was Coming to a New York School. Then the Plug Was Pulled.

    Jump

  • I mean, my first complaint would be that this is essentially a surveillance platform, basically Flock in a human-shaped shell. Also it's likely that it works essentially like Waymo, where there is remote human oversight to handle situations that are beyond the capabilities of the automation. That means that beyond just video, audio, and whatever else being sent to some corporate servers, there's potentially a human in another country watching through those eyes in real-time. Even if those remote employees are well-intentioned and trustworthy, how secure is the access to that? How much effort is there to prevent someone else from breaking into the stream?

    My second complaint is just that this appears less advanced than Disney animatronics from the 80s. I haven't seen any evidence that these things can walk, they all appear to be standing still. It's basically a bigger Tickle-Me Elmo, with a webcam.

  • Removed Deleted Locked

    Permanently Deleted

    Jump

  • Workers comp screwed me as expected. They owe me 1.5 years of pay on top of medical and ride reinbursements. Over $100,000 USD.

    Have you talked to your state Attorney General office? Labor Commissioner / Labor Enforcement office? private employment attorney?

    What about union support?

  • Sally the Robot Was Coming to a New York School. Then the Plug Was Pulled.

    Jump

  • What exactly was a classroom supposed to do with an anamatronic mannequin anyway? What practical benefit was this thing supposed to have in an education setting?

    yikes

    People invest money in this? I should start a robotics company...

  • Gameplay mechanics were also a lot better with more replayability.

    Jump

  • Use your imagination!

  • Senator Calls for Mamdani to Be Arrested and Sent to Guantanamo

    Jump

  • Hmm...

    Sweden is a highly developed country ranked fifth in the Human Development Index. It is a constitutional monarchy and a parliamentary democracy,

    https://en.wikipedia.org/wiki/Sweden

    Sweden has achieved a high standard of living under a mixed system of high-tech capitalism and extensive welfare benefits.

    https://en.wikipedia.org/wiki/Economy_of_Sweden

    As a unitary state with a constitutional monarchy, Norway divides state power between the parliament, the cabinet, and the judiciary, as determined by the 1814 constitution.

    The Norwegian economy is an example of a mixed economy; a prosperous capitalist welfare state, it features a combination of free market activity and large state ownership in certain key sectors, influenced by both liberal governments from the late 19th century and later by social democratic governments in the postwar era.

    https://en.wikipedia.org/wiki/Norway

  • Be purrsistent

    Jump

  • Alms... alms... alms for the poor!

  • Self Hosting- Security recommendations

    Jump

  • Your first concern should be your boundary firewall. You should have all ports closed except the ones that you are definitely using for external services. You should know which ports you have open and why, and what traffic, how much and how often you expect to see on those ports (8080 will have regular Internet use traffic, but your reverse proxy port should only have traffic when you're away from home and actively using it), and you should monitor that traffic at the firewall every so often, and especially when you make changes to your network. Closed ports should be configured to drop packets rather than respond that the port is closed (stealth mode). On a home network, preventing unwanted incoming connections will protect you from the majority of malicious activity. It's the most effective single thing you can focus on.

    The next thing would be to separate untrusted devices onto dedicated VLANs. This would be for IoT devices, gaming consoles, "smart" appliances, anything that connects to the Internet whose software you don't have control over. They get isolated on a VLAN that only connects to the Internet and doesn't allow local connections to devices on other VLANs, so the rest of your network doesn't exist as far as they're concerned. This should cut down on things like "smart" appliances taking inventory of your home network and reporting it back to the manufacturer's servers.

    If you do these two things, and you've got your reverse proxy configured properly so that other people can't break into it, you should minimize unwanted connections to your network and your server/containers should be fine with default internal firewall policies. The only reason you would need to do more is if you expect a direct/intentional attack by a motivated hacker, but in that case there's not much you can do unless you're an expert.

    If you want to go further, try implementing the community version of runZero:

    https://www.runzero.com/platform/community-edition/

    https://help.runzero.com/docs/self-hosting/

    https://www.cisa.gov/resources-tools/services/runzero-community-edition

    This is a network visibility tool that will discover and identify devices. To get a really complete look, you would run it from inside your network and deal with anything that you don't think should be accessible, then run it again from outside your network to see what a potential attacker would see.

  • Anyone know what this is?

    Jump

  • Good catch. Someone is trying to use your site as a proxy for malicious software. You should report the repository.

  • ICE to Pay Thomson Reuters $125M to Find Voter Fraud

    Jump

  • How is that under ICE's purview?

  • [Mimi] Commentary. [217]

    Jump

  • SK Hynix CEO: Current memory semiconductor prices are "abnormally high"

    Jump

  • Yup.

    What's that line? "Luck is when preparation meets opportunity"?

  • CO2 overload in blood suggests toxic atmosphere within 50 years

    Jump

  • Here's to hoping the culmination of all human knowledge can devise a system of carbon capture that exceeds the efficiency of nature, i.e. trees, on an incredibly accelerated timeline.

    Even if the mass compilation of mostly scraped comments from social media networks could somehow produce useful guidance on addressing climate change, those systems are owned and operated by people who are making money from the way things are. Even if the stochastic text spewer did, for the sake of argument, actually give them the correct answer (which is to stop burning fossil fuels) they would ignore it and ask for a different answer.

  • SK Hynix CEO: Current memory semiconductor prices are "abnormally high"

    Jump

  • The best time to build a chip fab is 10 years ago. The second best time is right now.

  • CO2 overload in blood suggests toxic atmosphere within 50 years

    Jump

  • At the risk of trivializing this... who knew Spaceballs was prophetic?

    How the fuck do we get out of this trap we've built for ourselves?

  • Modern Gaming - Deathbulge

    Jump
    1. Jazzpunk https://store.steampowered.com/app/250260/Jazzpunk_Directors_Cut/ - Everyone should play Jazzpunk. Watch the trailer, and read no other reviews, just play it.
    2. Far: Lone Sails https://store.steampowered.com/app/609320/FAR_Lone_Sails/ - a gorgeous art piece, a good story that develops through the gameplay, worth your time.
    3. Void War https://store.steampowered.com/app/2853590/Void_War/ - Void War is FTL crossed with Warhammer 40k, but it's not just a reskin. If you ever wanted more FTL gameplay, Void War is it.
    4. The Red Strings Club https://store.steampowered.com/app/589780/The_Red_Strings_Club/ - a great story with beautifully written characters, everything that digital storytelling should be.
    5. Songs of Syx https://store.steampowered.com/app/1162750/Songs_of_Syx/ - this has been eating my brain recently. If you enjoy colony builders like Rimworld or Dwarf Fortress, Songs of Syx is potentially dangerous in that where did the last eight hours go kind of way. It's still got some rough spots, but the developer is actively working on it.

    *Bonus - Fatum Betula https://store.steampowered.com/app/1281270/Fatum_Betula/ - a strange experience, like nothing else that I know of. I also recommend going into this one blind, just watch the developer's trailer.

  • What actionable steps can you take to build community?

    Jump

  • and further there will be other consequences for social non-conformity with say beliefs, activities, etc.

    Yes, although I think conformity has more to with maintaining an existing community and/or influencing its behavior than it does growing a new community. It is certainly almost a required feature of religious groups.

    Problems come when a community starts to be exclusionary/elitist, and starts drawing lines between "us" and "them". I'm not really sure how you avoid that stage, it seems to happen with most groups once they grow to a certain size.