RT @xdavidhu@Twitter.com
--
I found a vulnerability that allowed me to unlock any @Google@Twitter.com Pixel phone without knowing the passcode. This may be my most impactful bug so far.
Google fixed the issue in the November 5, 2022 security patch. Update your devices!
https://bugs.xdavidhu.me/google/2022/11/10/accidental-70k-google-pixel-lock-screen-bypass/
https://twitter.com/xdavidhu/status/1590626467414958080?s=20&t=kkfS55vSKJtA1_jx9fnpZg
In light of another exchange meltdown, "Not your keys, Not your coins" is again relevant.
Self-custody is hard to do. So for 48 hrs only, my "Path to Self Custody" workshop is 75% off (with code selfcustody4me) to help people take ownership of their keys
https://aantonop.com/workshops/path-to-self-custody-security-bundle/
@freemo Thinking about this; -"Those who would give up essential Liberty to purchase a little temporary Safety, deserve neither Liberty nor Safety and will lose both." [Benjamin Franklin]
@bojkotiMalbona Yes, they probably filter the Tor exit nodes for CAPTCHA on the clearnet site, because a lot of abuse come from those IP addresses.
@bojkotiMalbona Are you using the onion URL?
https://mail.protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/
@loke If success is measured in things eventually learned from mistakes, then it's a win! ;) Thinking about it in retrospect, those days are probably the best. Especially days when my mistakes ended up in reverse engineering software to the point of understanding almost all of it.
@loke It's hard without some kind of drawing of your network, but after reading the the info/comments I linked, it seems like it can be solved by the way it is configured, by not bridging the parent interface of the vlans, and someone wrote that it matters if you give the vlans an IP address or not. Also this:
"NOTE: To route packets between the bridges (VLANs), make sure to assign IP addresses to the bridges as described in the previous section, not their member interfaces such as em0.10."
@loke To clarify, the way I understood it, you bridge point A and B, from this point on only B will respond to ARP, not A.
@loke The bridge is designed to grab all traffic including ARP it seems reading the comments in this bug report:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=240106https://genneko.github.io/playing-with-bsd/networking/freebsd-vlan/#do-not-bridge-the-parent-interface-of-the-vlans
Also found some interesting general info here: https://genneko.github.io/playing-with-bsd/networking/freebsd-vlan/#do-not-bridge-the-parent-interface-of-the-vlans
Yes indeed, always 2 sides to a story.
Iran’s anti-morality police protests: a different view from the ground - The Grayzone https://thegrayzone.com/2022/10/09/irans-protests-view-ground/
@loke I keep asking myself if it was worth all the lockdowns and other measures the past couple of years.
@loke (To clarify; I was not impressed, even milder than a flu.)
@loke Welcome to the "so this is it?" gang.
"Various Linux Kernel WLAN security issues (RCE/DOS) found" https://lwn.net/ml/oss-security/20221013101046.GB20615@suse.de/
@th In other words using getopt() would be considered bad?
@freemo @freeschool I agree completely about this, apathy hits hard when you are at the bottom and it's a struggle just to get food on the table.
@freemo @freeschool I think one of the problems is that poor people sometimes feel shame, so they try to keep appearances up, but they have nothing to be ashamed of, once that shame turns into to anger you have a revolution coming. Only the people who get rich by making other people poor should feel shame in my opinion, but for some reason they don't, almost as if you have the "key to success" right there.
@freemo @freeschool When half the population barely gets by to make ends meet, and can't afford more than a USD$ 400 emergency on average, that's bad over all quality.
-"When the going gets weird, the weird turn pro..."