Please tell your friends about federated social media site that speaks several fediverse protocols thus serving as a hub uniting them, hubzilla.eskimo.com, also check out friendica.eskimo.com, federated
macroblogging social media site, mastodon.eskimo.com a federated microblogging site, and yacy.eskimo.com an uncensored federated search engine. All Free!
"breed your horses to run faster and faster and faster until one of them gives birth to a locomotive" — @pluralistic on #LLMs on random wet liberal podcast
Oh God, What Now?: Why Tech Sucks – Cory Doctorow on Enshittification and how to fix it Starting from: 00:13:43
In October 2024, something appeared on Tubi that made 2 million people stop scrolling. For over 40 years, this footage stayed hidden in studio vaults. The ne...
Python has become one of the most popular programming languages out there, particularly for beginners and those new to the hacker/maker world. Unfortunately, while it’s easy to get something…
So what? They're admitting the truth after DECADES of lying to parents and contaminating people with their TOXIC MESS!
The CDC is a vaccine company, that's how they get all their money. If you want to 'give them grace' and forgive and forget - you do you BAE.
I don't, though. I'd like to see some lasting consequences. You know - much like the parents of vaccine injured children have to deal with for a LIFETIME!
I have eaten the plums that were on the patio and which you were probably saving for breakfast Forgive me they were delicious so sweet and so cold RE: bsky.app/profile/did:plc:l6arn…
Come listen to another cozy Elder Scrolls reading~ This time, we have a series of interviews with the head of the Emperor's guards, recounting experiences from her storied life.
This is another book that feels like it has much more story than lore, though for those of you with a keen ear and mind, you will probably be able to spot some key lines that have in them more lore than it may first appear. It's odd to think that, out of the relatively few stories in which a Bosmer features as a main character, I've done two back to back
Speaking of Bosmer, I envisaged Lady Allena Benoch as a mature, experienced woman and tried to express that in her voice. Hopefully, you like how she came out
------------
A big thank you to my ko-fi and patreon members for helping me make sure my cats and I can continue to have food and other essentials. If you'd like to help as well as get access to audio-only versions, please consider becoming a member~ [[Ko-fi]](ko-fi.com/octaviaconamore) [[Patreon]](patreon.com/c/octaviaconamore)
I also do live readings a few times a week over on Twitch (alongside Youtube) if that's more your thing [[Twitch Profile]](twitch.tv/octaviaconamore)
Join me for bedtime reading streams here and at twitch:[Twitch] https://www.twitch.tv/octaviaconamoreFollow me on social media for updates and posts:[Masto/F...
Attached: 1 audio
:boosts_ok: Alright, story recorded, audio edited, kofi/patreon members-only versions exported, video edited and exported, thumbnail made and exported :blob_sweat:
They're already up for kofi/patreon members if you'd like to get …
So I have a funny story related to this. Well, not so much funny, as the future refused to change moment.
When I was younger and I was actually trying to make a difference, I worked with some talented individuals. Back when google's advanced searching still worked, wasn't ass, and was actually reasonable about captcha-gating people, I learned how to query google for indexed FTP servers with anonymous access enabled.
this was sometime in about 2015-ish I think? give or take. But yeah, anonymous FTP with its ass hanging out on the open internet was (still is) fairly common.
Now, we weren't finding this data for ill, but to inform organizations about their exposures.
Out of the places in which we found problems, not one of them responded -- for good or ill.
that's even with screenshots of their ass hanging out on google, and back then, when both firefox, and chrome had embedded FTP clients, pictures of the anonymous FTP login, and file listings.
There were two crowning achievements from that time. One was cyberark and Symantec Endpoint Protection installation details being served up over anonymous FTP for an alcohol distributor in the midwest. Just fuckin' sittin' there.
We reached out to them on three occasions, weeks apart trying to get them to fix their misconfiguration. Mysteriously, 8 weeks later, the FTP server was gone.
the other achievement was a random FTP server on a hosting provider based out of california (..aren't they all). We found randon ASP code, and bits of encrypted data stored in no particular organization or format.
the ASP code consisted of super basic webshells, and other malicious shit. So of course, we hit their abuse contact data, aaand crickets. No response.
I downloaded a random zip file and decompressed. Turned out, not all of the contents were encrypted.
In this zip file was sensitive network information about the Kuwaiti National Oil Company (several references to KNOC). There was a powerpoint slide deck defining details of a Microsoft Defender deployment, There was a complete active directory map, the works.
This was bad. Now, mind you, this was not an FTP server in the KNOC IP address space, this was a random hosting/colo server.
So naturally upon finding this information, I seeked to be rid of it and any involvement with it as soon as I possibly could.
so I reached to to friends, and friends of friends to find contacts in the intelligence community, a CERT of some sort, something, anything.
I had a friend with FBI contacts. They relayed the information. I heard nothing else about it. Except the FTP server was taken down, and that was it.
Some time later, Cylance published a report on operation Cleaver, some clown shoe ass operation that had been attributed to somewhere in the middle east. When I say clown shoes, I mean fucking clownshoes. Their toolsets and tradecraft were abysmal, but still, they managed to get shells, so were they really that abysmal? Yes. Absolutely.
Anyway, some of the IOCs for the report included IP addresses in the address space of said hosting provider involved in this clusterfuck-tastrophy. I helpfully mentioned "Hey, you missed this IP in your IOCs. DONT WORRY. HAVE A NICE DAY."
Not too long after that, I had a very brief Tenure at Cisco in the TALOS threat research group.
I thought I'd be writing rules, but they had me doing the most random shit. Most of the time we were kinda left on our own to do whatever, so long as it was a benefit to Cisco. so naturally, I glued together some bash, xargs, and a super fast FTP client and just began scanning the web for FTP servers.
Nobody batted an eye. I discovered something interesting. Many ISPs have their own internet speed test infrastructure for showing users how they aren't being fucked by the lack of ISP competition with arbitrary territorial boundaries and fiefdoms.
Turns out, for a number of these tests, the files downloaded as a part of these tests are plain ol anonymous FTP.
Only some of them had anonymous write access as well.
of course because ransomware was the focus at the time, nobody gave a shit, so bringing this up to anyone when I talked about it was very quickly ignored.
to my surprise, they were as abused as they could have been. I found a few that had cryptocurrency miners hosted on them, but that was really it, when it could have been easy to abuse non-attributable payload hosting for a multitude of bad shit.
something many people don't realize about security sensitive work is that in many cases the corporate response is non-existent... and when there is a response it's usually so awful you actually kind of wish they didn't say anything sometimes, all the while people are left at risk in any number of ways
people expect some serious straight laced response to security issues by a company, but the reality is that half the time nobody even responds, and the other half the time the company is incompetent and clueless while you desperately explain to 50 departments repeatedly that they need to fix serious problems
Ever wanted a Christmas jumper with vulvas and a big ol' clitoris pun on it? Your time has come! We've been beavering away on a special Vagina Museum Christmas jumper just for you. Perfectly suitable for office parties, midnight carol services and Christmas lunches. vaginamuseumshop.co.uk/product…
we now need to talk about the yeezy stuff then add “well, now he’s super antisemitic and you probably shouldn’t wear these anymore, but we gotta tell what was going on before that happened”
I am an adult. I’m short, yes, but this is ridiculous. The hood on this truck is higher than my shoulder. It forms in 90° angle with the ground. hideous! There’s no way they could see me in the crosswalk.
They were double parked. Even with the engine off it felt unsafe to walk in front of this thing. I would be so embarrassed to drive a car like this if I were not … plowing snow?
Okay I've lived in like, rural small town / mini cities for most of my life so I've seen monstrosities like that a lot, but what is that thing doing IN THE CITY???
I keep saying it: Ban them. Outright ban. Fronts of cars/trucks/buses/lorries... need to be regulated to be designed with pedestrian safety as 99% of the priorities. Including how big the direct lines of sight are, and to do away with the kill zones where drivers can't see.
Just a couple of months ago an old lady in her 80s was killed next to where I work because she walked over a crosswalk by a roundabout in front of a truck. The truck driver couldn't see her (presumably) and just started driving when the roundabout was clear. It's bad enough that trucks have this issue. At least trucks have a purpose. These cars have none. They should be banned on the road everywhere.
I remember when I was a kid, they were starting to bring in snub-nosed schoolbuses because of how dangerous it was that drivers couldn’t see children walking in front of the old long-nosed models. Now basically *all* buses are like that—but yet somehow, 40 years on, we’ve normalized these monstrosities.
The box could at most push out a pile and get stuck in it. The fake jewellery would be crushed in the process. Too fat to move. The Trum is ridiculous and dangerous to others.
Heading to Albertsons AND Smith's this morning to go grocery shopping around 6am.
Stupid me forgot to go grocery shopping over the weekend and I have a feeling today and tomorrow are going to be insane with all the Thanksgiving shopping.
I just need staples and supplies.
So going to head out here in about 15 minutes to hopefully beat the crowds.
Félicitations @flouffyscrounch, c'est vous qui remportez la loterie des bisous aujourd'hui. Vous avez été tiré au sort parmi 124 abonnés. Vous avez remporté 1 bisou. Voici votre lot: 😘.
Vous aviez 0.81% de chances d'être tiré au sort. Vous êtes classé 120ème sur 119 au classement général avec un total de 1 bisou(s).
“Τραγουδάμε δίχως Φόβο”, μια ελληνική απόδοση του “Canción sin Miedo” της Vivir Quintana από θηλυκότητες της Ανοιχτής Ορχήστρας. Το “Canción sin Miedo” της ...
Get the 100% FREE Guide that reveals a little-known IRS Loophole that can Help Protect your IRA, 401k & Retirement savings Tax & Penalty FREE Learn how to help protect your life savings from the poten
#VDM Hier, j'ai mis pour 51 euros d'huile dans la ouature parce qu'elle faisait 1 bruit de ferraille et que le niveau était trop bas. Ce matin je fais à peine 70 km : re-bruit de ferraille et dans 1 rond-point, le témoin d'huile qui s'allume brièvement avec 1 bip et le moteur qui fait "TACATACATAC-GREUUUU". Là chuis garé près du lieu de ma réunion du jour. A 70 km de chez moi, donc. Alors sondage !
Vas-y et ce soir tu mets de l'huile et tu rentres (14%, 5 votes)
MALHEUREUX surtout pas : appelle l'assistance ! (77%, 27 votes)
Achète 1 tente : survivaliste or nothing (2%, 1 vote)
Au cas où la réponse A, je cherche où se trouve la station-service la plus proche. 15 minutes à pied, ça va. Ah mais c'est la même enseigne que celle à côté de chez moi qui vend le litre d'huile à 30 euros 😭
oh mais quel enfer ! 😭 En plus, même pour les gens qui rentrent à l'aise dans la chaise cet accoudoir n'a aucun sens, tu te retrouves à poser ton avant bras que la tranche de l'accoudoir 😬.
la règle numéro 1 en voiture, c'est que si le voyant "danger imminent veuillez immobiliser le véhicule immédiatement" est allumé et que tu ne sais pas quoi faire, tu appelles un pro. Veille surtout à ce que le voyant "trop tard" ne s'allume pas.
@missbullitt Figure-toi que je viens d'apprendre qu'un parent d'élève a bossé 20 ans en magasin de vélo et s'apprête à monter son auto entreprise avec intervention à domicile. Il m'a dit que pour changer le pneu arrière, "tu me donnes 5 à 10 balles, c'est suffisant 😄🤚"
@Cinquante_et_1 s'il ne l'a jamais fait sur le longtail decath, tu pourras lui donner quelques euros de plus 😉 Pour info je prends 15€ pour une crevaison et 15€ de supplément pour les roues moteur et ton vélo fait partie de ceux qui sont particulièrement chiants à réparer
J'ai décidé de sauter le pas et d'installer #linuxmint sur mon PC. En dual boot au départ parce que j'ai un peu les chocottes de faire une connerie. Wish me luck
MS seem extremely chill about this one from reading their CVE summary 🤔 I’d be curious to see if anything else surfaces or if that’s it msrc.microsoft.com/update-guid…
@willb I get the sense with a lot of these issues in the last few years (Bing bang, actor tokens, that jupyter notebook thing in 2022, etc) are just the cost of doing business to them.
It feels like there's roughly 1-2 significant "platform wide" per year becomes publicly known and somehow that's just accepted as normal.
@willb theres 8 cloud CVEs like this by MS in the past week, it’s just BAU for them. Kudos to them for transparency though, the other providers aren’t telling you and pretend they’re magically secure
@GossiTheDog @willb agree the transparency is very nice. Particularly now it's becoming popular to actually publish CVEs for cloud vulnerabilities..... Progress 🙌
As Cory Doctorow's #Enshittification book tour approaches its conclusion, there are a couple more online channels where it would be great to see Cory present the book tailored to the channel audience. Particularly, #GamersNexus (despite its name and origins) has developed into a serious investigative journalist organization, taking on the likes of Nvidia and Bloomberg and winning. See, for example, their excellent documentary on "The Nvidia AI GPU Black Market" [1], their follow-on video about Bloomberg's vexatious DMCA takedown [2], and their second follow-on about that takedown backfiring [3].
GN (with whom I have no affiliation) currently has 2.53 million subscribers, and their videos have exceptionally high ratios of views per subscriber and likes per view. Their new spin-off channel, GamersNexus Consumer Advocacy, has a more model (and presumably largely overlapping) 182K subscribers, and covers mostly the topics political leaders, regulators, and enforcement bodies have been contacting GN about since the GPU smuggling documentary. (See, for example, their video [4] about the stock and finance sloshing around in the companies forming the AI bubble.)
If you can get Steve and the team at GN to host you, Cory, @pluralistic, you'd reach a large audience of likely buyers who are also likely to act meaningfully to further to political objectives advocated in the book.
HELP US FIGHT SUPPRESSION OF INFORMATION: https://store.gamersnexus.net/black-market-gpu-backersBloomberg LP filed a copyright strike against GamersNexus on ...
"On vit une époque formidable. Jordan Bardella serait la personnalité politique préférée des Français, Rachida Dati vide les poubelles à Paris, Sarkozy publie un livre sur son incarcération, le président des Amis de Jules Durand au Havre est un militant trotskyste, le plan Trump sur l’Ukraine a été dicté par … L’article Le Libertaire du mois est apparu en premier sur Le Libertaire."
imagine having to hear shit like "study confirms giving diabetic children insulin reduces their death rates by 100%" as if that hasn't been known for like a hunred years. that's what being trans is like
Werbung für Microsoft-Produkte ist in Windows Stück für Stück immer präsenter geworden. Es gibt verschiedene Möglichkeiten, damit umzugehen.
boosts help me survive 
kaia
in reply to igwigg • • •