kravietz 🦇 @kravietz@social.privacytools.io
- OpenPGP
- 6F7B6BB9A9B632555E1A03C132AF1F39C4EE03F2
- Website
- https://krvtz.net
- Matrix
- @kravietz:krvtz.net
Polish expat into UK. Information security engineer. Caver & cave rescuer (thus the bat). NHS volunteer & blood donor.
Joined May 2019
kravietz 🦇
boosted
For more conveniency, my page "Google abuse of dominant position: some facts about the Google Android operating system and personal data collection." has been moved to a GitHub repo.
Everyone is free to contribute and to share this page!
https://github.com/leag1234/some-facts-about-the-Google-Android-operating-system-and-personal-data-collection
I certainly couldn't miss the "Brazil rejects Sputnik V" shitstorm, but then did an usual reality check that made me wonder: why is vaccination rate in Russia still below 10%?
Did anyone here, or your relatives, actually get invitation for vaccination, or how does that work in real life?
kravietz 🦇
boosted
Time for another biased poll.
Do you know what CC and BCC stand for in eMail without having to look it up?
I would appreciate it if you boosted this toot. :-)
kravietz 🦇
boosted
"Cryptocurrency is one of the worst inventions of the 21st century. [...] It has failed to be a useful currency, invented a new class of internet abuse, further enriched the rich, wasted staggering amounts of electricity, hastened climate change, ruined hundreds of otherwise promising projects, provided a climate for hundreds of scams to flourish, created shortages and price hikes for consumer hardware, and injected perverse incentives into technology everywhere. Fuck cryptocurrency."
kravietz 🦇
boosted
#linux #security
RotaJakiro: A long live secret backdoor with 0 VT detection
Overview On March 25, 2021, 360 NETLAB's BotMon system flagged a suspiciousELF file (MD5=64f6cfe44ba08b0babdd3904233c4857) with 0 VT detection, the sample communicates with 4 domains on TCP 443 (HTTPS), but the traffic is not of TLS/SSL. A close look at the sample revealed it to be a backdoor targeting Linux X64 systems, a family that has been around for at least 3 years.
kravietz 🦇
boosted
RIP, Daniel Kaminski. You saved the DNS system instead of exploiting it.
"When a reporter asked Mr. Kaminsky why he did not exploit the DNS flaw to become immensely wealthy, he said that doing so would have been morally wrong, and that he did not want his mother to have to visit him in prison."
https://www.nytimes.com/2021/04/27/technology/daniel-kaminsky-dead.html
Armbian on #pine64 Sopine is screwed up again by an obscure change to DTB - before it broke Ethernet, this time it prevents mounting the root device (!) so basically after reboot your modules are dead.
https://forum.armbian.com/topic/17333-unable-to-boot-focal-or-buster-images-on-sopine-clusterboard/
Armbian maintainers raise a valid question of lack of support (=hardware donation) from the maintainers, which results in insufficient testing.
kravietz 🦇
boosted
@gael @kravietz CIVIL did not "save journalism":
https://www.coindesk.com/media-startup-civil-shuts-down-team-absorbed-into-decentralized-id-efforts-at-consensys
ClimateCoin did not stop climate change:
https://www.newsbtc.com/press-releases/climatecoin/
NFTs are not actually helping artists sell digital art:
https://www.theatlantic.com/ideas/archive/2021/04/nfts-werent-supposed-end-like/618488/
Seriously, cryptocurrency techbros need to just stop. Best thing they can do to fight climate change is to switch to speculating on tulips, instead of BTC and ETH. At least tulips don't emit carbon dioxide.
Investigative Committee of Russia apparently taking paint samples from a graffiti in support of Navalny (the text says "hero of our time", title of a popular book by Lermontov)
Linux Foundation has been quietly developing a project that might solve the supply chain attacks that are now on the rise - basically, a cryptographic transparency log of signed artifacts such as libraries, packages etc. It's in early phase but looks very promising #security
kravietz 🦇
boosted
kravietz 🦇
boosted
"Installation: we recommend that you use Docker."
what I'm supposed to see: "hey, it's a simple one-liner! Such clean install, much wow."
what I actually see: "we couldn't figure out how to install this thing on anything but our own machine, but hey, here is a well-compressed image of our entire disk, use this instead so that we can stop trying"
Food delivery drivers in Indonesia using cracked versions of gig work apps that allow them to see how much they'll be paid before accepting a delivery, spoof their GPS info in crowded areas, etc
Yet another less why installation by "download and run a bash script" isn't a very good idea
Dan Kaminsky died 😔 I have, as probably many people in infosec, learnt tons from his research.
https://www.nytimes.com/2021/04/27/technology/daniel-kaminsky-dead.html
Wow - Grzegorz Rzeczkowski dla rosyjskiego The Insider o katastrofie Smoleńskiej. The Insider zrobił się sławny ujawniając rolę rosyjskich służb w zestrzeleniu MH17 i szeregu innych głośnych zamachów (m.in. w Czechach, Bułgarii, UK itd) 🇵🇱
kravietz 🦇
boosted
Children of Chernobyl cleanup crew don’t have excess mutations - Enlarge / Trees grow near a former hospital in a town abandoned due to the Cherno... - https://arstechnica.com/?p=1759928 #nuclearaccident #chernobyl #radiation #science #biology
Chomsky has a long tradition of whitewashing human right abuse - in 1977 he did just the same thing for Khmer Rouge
https://en.wikipedia.org/wiki/Cambodian_genocide_denial#Chomsky_and_Herman
- OpenPGP
- 6F7B6BB9A9B632555E1A03C132AF1F39C4EE03F2
- Website
- https://krvtz.net
- Matrix
- @kravietz:krvtz.net
Polish expat into UK. Information security engineer. Caver & cave rescuer (thus the bat). NHS volunteer & blood donor.
Joined May 2019
kravietz 🦇's choices:
