Show newer
tobychev boosted

It's been ten years, so a short story about the "gotofail" bug.

Someone came to me about a catastrophic vulnerability in Apple's TLS implementation.

I shit you not, they'd overheard someone at a bar drunkenly bragging about how they were going to sell it to a FVEY intelligence agency for six figures.

They didn't know exactly what it was, just some vague details and the key point is that it allowed use of the real certificate.

This was enough for me to find the bug (yay open source), which would go on to be known as "gotofail", and produce a working exploit in less than a day.

The details were anonymously back channelled to Apple, who released a fix.

@matthew_d_green posted on Twitter about it, concerned by the Apple's vague release notes.

I used a burner phone to share the details with him anonymously.

Then everyone forgot about the whole thing because heartbleed.

¯_(ツ)_/¯

@janrosenow
What does "energy supply" mean? Not at all clear how that excludes new coal for example.

@Gurre
Fast Benkö skyller neddragningar på att inflationen är större än den fasta uppräkningen:
"Huvudorsaken är att inflationen urholkar anslagen snabbt vilket gör att kostnaderna ökar snabbare än anslagen räknas upp."

Det hade inte tv-avgiften automatiskt hanterat bättre eftersom dess storlek var fastställd i antal kron av lag (SFS 1984:41 §7). Möjligen hade regeringen i fallet med tv-avgift lättare ändrat dess storlek än de kan skjuta till extra pengar som det är nu, men det är svårt att se att SD alliansen skulle göra något sådant.

sverigesradio.se/artikel/darfo

Palestine, shame 

@Mabande
Undrar om ICJ ser detta val som varandes i linje med deras preliminära beslut i processen om folkmord ?
@pettter

tobychev boosted

– Poängen med humanitärt hjälparbete är att hjälpa civila. Den individ som gör fel ska straffas och organisationens rutiner ska granskas men man ska inte förstöra för hjälparbetarna i stort, säger han i SVT:s Aktuellt.

https://www.svt.se/nyheter/utrikes/toppdiplomaten-om-israels-terrorsiffror-tror-jag-inte-pa-alls #svpol #israel #unrwa

@etchedpixels
You very very rarely have the option to *just* blow up the server though, in practice what you get to choose is blowing up part of a building, which seriously risks killing people.

And even that is under the extremely permissive scenario where you know for certain the exact physical location of the particular server, more realistically you have to completely blow up an *entire building* or even several buildings to have a reasonable chance of taking out the intended server.

In other words, the likelihood of directly killing someone is very high with a physical strike, but simply impossible when you wipe it remotely.This seems like an important distinction to me.

The two options are only comparable when conditions are such that blowing up the server and physically seizing it out of the rack are almost equally challenging.
@GossiTheDog

tobychev boosted

"Where Is Hamas Getting Its Weapons? Increasingly, From Israel.":

archive.is/Bjy5N

tobychev boosted

28/1: "Låg behörighet skapar vinst"

Skolverkets statistik visar att friskolor har lägre lärarbehörighet än kommunala skolor. Obehöriga lärare har lägre lön än behöriga lärare men friskolor kompenseras med grundpeng baserad på kommunens lönekostnader. Detta skapar vinst.

Show thread
tobychev boosted

Privacy-oriented X front-end #Nitter is shutting down following changes to guest accounts

Nitter is dead after Twitter/X stops allowing guest accounts. Nitter was a front-end for Twitter that worked without JavaScript… @alternativeto

RIP.

#twitter #privacy #opensource

alternativeto.net/news/2024/1/

@erikdelareguera
Reinfeldt som fick skäll för att han inte tog hand om sin disk på regeringskansliet gjorde det bättre!

Uffe borde bara skickat länk till go royals fika låt...
@jajo

tobychev boosted
tobychev boosted
tobychev boosted

@Markatt07 Det där med yttrandefrihet är roligt. Genom att berätta att Halla-aho polisanmält två personer som kallat honom för fascist hotar jag yttrandefriheten. Logiken är... inte helt uppenbar.

tobychev boosted

Antar att det här är en donation som kommer sätta upp mig på nån Säpo-lista, men, men.
donate.unrwa.org/

tobychev boosted

- Jag ser att du har din fars drag i ansiktet.

- Ja, han är en usel fiskare.

tobychev boosted

This is such plain, petty, open & obvious retribution for the ICJ daring to hold Netanyahu & his right wing Kahanist coalition to any kind of accountability at all for the nearly 30,000 Palestinians they have killed in #Gaza, the #WestBank, and #Israel itself, in 2023.

"The Biden administration’s announcement comes on the same day that the UN’s top court ordered Israel to prevent genocidal acts Gaza & a U.S. court began hearing a lawsuit accusing Israel of genocide"

mondoweiss.net/2024/01/biden-c

Show thread
tobychev boosted

I was going to google "It's a wonderful life" but google had other ideas.

@Ruth_Mottram
Why? With 20 years of hindsight I can't think of a single example of where a military sub would have been useful for the defence of mainland Denmark.

For surface sea surveillance airborne radar does it better and is more flexible, and you can cover your own underwater region with fixed listening points if submarines is a real concern.

In general I think that military procurement in NATO is pretty lacking in strategy and vision. If Denmark had built an artillery force for all the sub money that would have been an extremely useful switch for Ukraine, but instead it seems you built a new surfaces ships. I guess those are for fighting the Russian navy in the north sea, a capability that doesn't seem so critical considering Ukraine is fighting said navy pretty successfully from land.
@anderspuck

Show older
CleverLibre Social

CleverLibre Social is an inclusive social instance for open discussion, learning, and community.
All cultures welcome.
Hate speech and harassment strictly forbidden.