Daniel Cid @dcid@noc.social

@bclindner
1995: "The internet sees censorship as damage, and routes around it."

2020: "One shitty company had a bad day, now nothing on the internet works."

Ah, progress.

Interesting stats of WordPress vulnerabilities by WPScan:

https://wpscan.com/statistics

Mind blown, I never realized this coincidence:

You can use the next number in the Fibonacci sequence (1 1 2 3 5 8 13 21 34) to convert from miles to kilometers.

For example, 13 miles is 21 kilometers.

🤯

Intel’s Disruption is Now Complete

https://jamesallworth.medium.com/intels-disruption-is-now-complete-d4fa771f0f2c

@dcid awk is invaluable at times: ps awuxf|grep '/bin/[b\|d]ash'|awk '{print $2}'

More details on this macOS thing...

"Your Computer Isn't Yours" https://sneak.berlin/20201112/your-computer-isnt-yours/

Over the past month I have been shifting from a MacOS to Windows. My main driver has been ideological differences with Apple around closed and open ecosystems. It's taken a bit, but wow.. it's been enjoyable... especially like their seamless #linux integration

"Disruptive innovations transform complicated, expensive products into simpler and more affordable ones."

https://www.youtube.com/watch?v=rpkoCZ4vBSI

Has anyone tested https://github.com/tootsuite/flodgatt ? (Might save on a few clock cycles.)

Do you trust Zoom?

https://arstechnica.com/tech-policy/2020/11/zoom-lied-to-users-about-end-to-end-encryption-for-years-ftc-says/

Zoom lied to users about end-to-end encryption for years, FTC says...

Since at least 2016, Zoom misled users by touting that it offered 'end-to-end, 256-bit encryption' to secure users' communications, when in fact it provided a lower level of security .. Allowing them to decrypt users communication.

RansomEXX Trojan attacks Linux systems | Securelist: https://securelist.com/ransomexx-trojan-attacks-linux-systems/99279/

"Poison Over Troubled Forwarders: A Cache Poisoning Attack Targeting DNS Forwarding Devices"

This paper describes a DNS fragmentation attack against CPE forwarders in residential home routers. These kinds of attacks succeed over UDP. TCP based DNS queries (like with DoT or DoH) are not vulnerable.

Or, even better, having a DNSSEC validating resolver in the own network or on the own machine (if possible):

https://www.usenix.org/system/files/sec20-zheng.pdf

To #Google users: you can lose all your Google accounts if Google decides so. There won't be any trial, and no option for appeal.

That's privately-held fascism in some way.

#degoogle

https://www.businessinsider.com/google-users-locked-out-after-years-2020-10

FBI, DHS, HHS Warn of Imminent, Credible Ransomware Threat Against U.S. Hospitals

https://krebsonsecurity.com/2020/10/fbi-dhs-hhs-warn-of-imminent-credible-ransomware-threat-against-u-s-hospitals/

Of all the places to attack, they have to go after hospitals?

Hope they get caught and properly prosecuted.

WordPress deploys forced security update for dangerous bug in popular plugin | ZDNet: https://www.zdnet.com/article/wordpress-deploys-forced-security-update-for-dangerous-bug-in-popular-plugin/