r000t @r000t@infosec.exchange

The fediverse would be much harder to compromise in such a way.

a benefit of decentralization.

Anyone who sends bitcoin to that address posted by the hacked Jeff Bezos account deserves to lose their bitcoins.

HEY EVERYBODY!

dunk on twitter!

Imagine doing this and then thinking you're the good guys.
https://twitter.com/AlecStapp/status/1276604449616564224

RT @AlecStapp@twitter.com

Are we going to talk about the fact that official reports from the European Parliament are openly (and approvingly) talking about implementing their own version of the Great Firewall of China?

🐦🔗: https://twitter.com/AlecStapp/status/1276604449616564224

A lengthy and very detailed blog post by Matthew Green on why #Signal PINs are problematic: https://blog.cryptographyengineering.com/2020/07/10/a-few-thoughts-about-signals-secure-value-recovery/

Linux 5.7 adds support for Apple fast charging. It enables iOS devices to pull up to 2.5 amps.

How exactly are they doing that without blowing up cheap motherboards?

It would have been funny if it weren't true!
The proposal to re-evaluate "years of experience" in "skill level" is interesting.
#recruitment #experience

Something is going on with email lately. Huge uptick in attempts to crack some very specific accounts on my mail server.

The accounts in question can't actually be hacked: they are one-off aliases created per-service, but like, some kinda troubling ones. Like "adobe@", which is an email only Adobe would know exists. They're not trying adobe@every-domain-on-the-server, just adobe@one-specific-domain, and a few other aliases at different domains, like one was an alias made for The Lady so that she could run an Instagram account for the dog for like a month before losing interest, and it's been completely unused for about two years.

To be clear, this isn't spam directly, probably they're trying to get into the account to *send* spam, but to stem the tide of individual hosts getting blocked, I killed off all traffic from a handful of subnets and it's still coming in.

Here's a graph of unique hosts that tried to brute-force on a given day. About 30 happened while I was writing this post, so that graph shows 957 today but it's 990 now. As you can see, it's usually close enough to zero that it doesn't matter, then consistently around 100 this week, 325 yesterday, and it'll hit 1k today at this rate. Keep in mind, all the hosts that tried this yesterday are blocked, so it's 1k *new* IPs trying to do this, so there's some kind of moderately large botnet.

(FSE is the usual subject of graphs here, but this doesn't affect FSE.)
hax_my_email.gif
whohaxmyemail.gif

I dislike working with garbage collected languages bc what if the garbage collector decides to come for me next

I forced an AI to read the x86 reference manual alongside 1000 programs to produce a program on its own. This is the result.

$ ./a.out
Segmentation fault (core dumped)