Klaus Frank

@tagesschau@ard.social Wenn 1000 Juristen einer Meinung sind, weißt du, dass etwas Falsch läuft. Normalerweise hast du bei 2 Juristen schon 3 Meinungen...

@GossiTheDog@cyberplace.social Don't allow registrations or restrict it to after invites from existing users only. The scrapers are quite annoying, what kinda helps (in general, not sure about mastodon specifically) is putting dummy links there that the CSS hides and that scrapers will hit. Then once they connect to that endpoint block them as early in nftables as possible. I've a rule that when you connect to specific ports (or violate other conditions) just blackholes the traffic. And excessive caching.

Hey @ordnung@chaos.social we need to increase the character limit. Can't even hit reply-all and write "take me off of this list" as one typically does 🙃 https://cultofshiv.wtf/@SleepyCatten/117285847168930207

@divVerent@social.vivaldi.net also as soon as you've payment data you're basically doing the same as mandating ID for each account. All of the AI companies will like that as they've just to wait for a data leak to add all of the data to their stalking profiles...

@divVerent@social.vivaldi.net then they're using stolen accounts. That won't work...

chatgpt can't generate #NixOS configuration. When it should put stuff into overrides it just throws them into systemPackages instead. But when you then follow up and mention override it does it perfectly...

@cR0w@infosec.exchange @kajer@infosec.exchange @catsalad@infosec.exchange Just filed a bug report with #Apple about the 2nd picture being rendered incorrectly. My suggestion was to limit HDR contents maximum brightness in mixed-content mode, aka. where it is shown next to SDR content and not in exclusive fullscreen mode to the same white as the text is. Let's see what they're going to do about it. (I also added a link to the above post as an example, so please don't delete it so they can use it to validate themselves)

@kajer@infosec.exchange Oh so that's how they did it. (Something like this must be working on Mastodon too btw, was quite surprised when it happened a few days ago)

@EUCommission@ec.social-network.europa.eu Congrats for the transfer speeds. Already seen a handful of Americans say that they moved over to using Euro to send each other money instead of crypto coins or cash app. Wasn't expecting that but still pleasant to see. (However the 10 seconds thing doesn't always work, sometimes it's more like 5-10 minutes though. Hope that improves now) [Not so much a fan of the "Verification of Payee", in practice it is more of an annoyance than an actual help...]

@josephcox@infosec.exchange well it makes sense with them trying to make AI better at social engineering and blending in. They're literally outsourcing labeling the dataset to know everything that fails...

@ordnung@chaos.social Noooo, I don't want to block @SleepyCatten@cultofshiv.wtf .

@kajer@infosec.exchange @bakachu@infosec.exchange @cR0w@infosec.exchange @logaldeveloper@infosec.exchange @catsalad@infosec.exchange Fun fact all of the options except for "Default (Undefined)" resolve this issue (even the HDR10 one does) but also screw up the colours. All I want is to reduce the brightness. Why does HDR bypass the brightness slider? Whoever thought that was a good idea should be forced to look into a bright cold white led light at least once a day until the end of time...

@logaldeveloper@infosec.exchange @cR0w@infosec.exchange @kajer@infosec.exchange @catsalad@infosec.exchange The best you have is changing the display preset to "Apple Display (600 nits)", but it also screws up colours in - well - everything else. And it'll still be brighter than the rest. But I already filed the feedback item for Apple about this being a bug. As I said above I don't think HDR displayed in Mixed content mode should ever be that bright...

@EUCommission@ec.social-network.europa.eu You should also regulate that flagging "non-AI" content incorrectly as AI is illegal too. Otherwise everything regardless of it being AI or not will be flagged as AI "just in case" to avoid legal liability. After all at this point we know the game of the us tech giants...

@ariadne@social.treehouse.systems Ah must be an entomologist when they call their bugs features...

@microsoft@lea.pet You really need to stop with this parody account. You make Microslop look bad. If you continue this way someone could think that they made software or something.

@w00p@infosec.exchange @EUCommission@ec.social-network.europa.eu *insert always has been meme here*

Note to self: Just don't touch #ipsec. It's shit all way round and always breaks. Just use something else. Why? Every time I want an encrypted tunnel between two public IPs I think like "oh yea, using IPSec here would be easy and straight forward". And then it never fucking works reliably. And if it does work it stops to work the next time you try to apply the exact same config. And it fails with shit like this... What have I done wrong?!? Why work sometimes?? #networking #strongswan #ipv6

@drwhax@infosec.exchange

I think outright not running an LLM over your codebase to find critical security vulnerabilities because of your moral stance will keep us more insecure

You're missing the point. Even strong "AI critics" have already been seen to use these tools for these scans themselves. Just like other static code analysis tools and so on.

The main point and what people despise the most is when randoms use it and file bug reports they don't understand causing high workload validating their crap.

@catsalad@infosec.exchange @david_chisnall@infosec.exchange wait your CEO uses a password? I know at least one company where IT had to change the password policy to allow empty passwords because of the CEO...

@jamie@zomglol.wtf Just stick to the rule that anything technology that isn't produced by an autistic gay furry is not even worth getting.

@ReignOfRaining@transfem.social lol and you only have to move two letters.

Speaking of it, what's the name for the kind of attack on #encryption where the leaked metadata of the cipher text allows you to identify and find the plain text copy of the encrypted files elsewhere? #cryptography

@Lilith@chaos.social "von Deutschland aus gesperrt"? Bist du dir da sicher? Also ich könnte mich da jetzt gerade ganz ohne VPN einfach so anmelden. Ab welchem schritt würde man diese angebliche Sperre denn bemerken?

@TimWardCam@c.im @EUCommission@ec.social-network.europa.eu The only thing the verificator of payee causes is that all of my bank accounts are either listed as "Klaus Frank" in my statements or throw a validation error each time I transfer money from one account into another. Also if you're dealing with companies having some holding named there instead of whom you're actually doing business with is also annoying as you completely loose track of what you paid for when looking at your statements...

@TimWardCam@c.im @EUCommission@ec.social-network.europa.eu Oh or when basically everything on your statement is just the name of some random payment processor instead of the actual company. It's definitely a win when the statement reads "Riverty" this and "Digital River" that instead of the actual recipient. Sure... If I wanted to know that I'd just google the IBAN...

@TimWardCam@c.im @EUCommission@ec.social-network.europa.eu It's not like you've any other field you can put that information in. As adding anything to the Reference number line will cause the payment to bounce as automated systems cannot associate it with the bill or account properly anymore (2nd case). And for the first one you've to remember IBANs to know which account is for what purpose (this one is Visa, this one is for the account at the broker, that one is for...) Tl;Dr: Having to remember IBANs and lookup tables....

@DKo45549@nrw.social @tagesschau@ard.social Ließ den Text, unter gewissen Voraussetzungen scheinbar ja. Geht wohl primär darum so Dinge wie die Emissionen auf dem Transportweg mit einzuberechnen und dadurch wird es für die nicht Europäischen Anbieter schwerer.

@samueljohnson@mstdn.social @EUCommission@ec.social-network.europa.eu Well yea, we did that, but I still don't recall anyone giving a shit about a stupid vacuum. We probably just cared so little that we missed it entirely then...

@EUCommission@ec.social-network.europa.eu Literally nobody I know cared about that. Who ran to you crying about this? Some vendors?

@iro_miya@mk.absturztau.be lol the main issue with Anarchy is that it only works with smart people. The moment you've a lot of morons - just think of all of the idiots back then in the covid pandemic peak times - it falls apart quite quickly...

@iro_miya@mk.absturztau.be I don't think that's the case. I tried to talk to a bunch of these idiots. A lot of them were just quite frankly stupid and unwilling to learn but wanted to feel smart so they adopted every conspiracy theory they found...

@cmconseils@mastodon.social So 6 fingers on one hand. (If you don't know how that would work you also don't know how to count to 12 with only 5 fingers either :p)

@JenMsft@mastodon.social Well that one was the last one that didn't suck out of the box. All versions after needed extensive trimming to be usable...

Note to self: Run "sync" before "systemctl reboot"... Something just got killed and I have no idea what. Just hope it wasn't anything LVM cache and/or BTRFS related even though nothing else that accessed the volume was (supposed to be) running anymore. #LVM #Btrfs #systemd #linux

@mica@mk.absturztau.be @siina@social.criminallycute.fi ngl, if syncthing struggles then nextcloud won't be much better. Except they improved by a lot over the past few years. Syncthing basically was always the tool that handled lots of data the best of the two.

RE: https://infosec.exchange/@masek/116956669196896039 /cc @bsi@social.bund.de

@QasimRashid@mastodon.social The only issue is that men are also less likely to admit that they'd been sexually assaulted by a women. Cause literally nobody would believe them or even if they do they'll typically respond with stuff like "you should be grateful that at least someone is interested in you"...

@bsi@social.bund.de Stimmt, den Kriminellen fallen immer wieder neue Tricks ein. Aktuelles Beispiel die Hackinggruppe namens "LG" ist auf die Idee gekommen einfach Monitore zu verkaufen, die automatisch und ungefragt im Hintergrund Spyware installieren. Auch bei schon vor mehreren Jahren gekauften Geräten. https://chaos.social/@agowa338/116950689926290645

@samueljohnson@mstdn.social @EUCommission@ec.social-network.europa.eu It's surprising but I'm not in the UK and this wasn't really a topic here in Germany. And AfD mainly focuses on migration issues when shitting on the EU. Esp. The lack of unified rules and "all coming to us here in Germany while the EU forbids us to get rid of them." and similar shit.

@EUCommission@ec.social-network.europa.eu Yea exactly, that's why everyone switched to the little red book a while ago. /s

@cR0w@infosec.exchange dn42

#Infosec hashtag#Fifa edition 🤣 Why have authentication if you can just not? This isn't even a hack. It's just trust me bro security. https://bobdahacker.com/blog/fifa-hack

@jla@typo.social @bsi@social.bund.de Das was du da in Klammern schreibst ist exakt was in dem Screenshot in meinem Verlinkten Post (auf Englisch) steht. Und btw, in den USA musste denen auch keiner Zustimmen und es ist dort wohl aktuell auch fraglich ob es überhaupt legal ist. Vermutlich haben die damit aber so viel Geld verdient, dass es denen schon reicht, wenn weniger Klagen...

@Kuniti_shino@pounced-on.me Oh, so that's why some people claim gold plated cables are better. Hmm

@ello@void.ello.tech And then the "nixos-rebuild switch" fails because you ran "nix-channel --update" in between and some package in STABLE failed to build. But could just be my luck.

@jla@typo.social @bsi@social.bund.de

EU-GDPR-Strafen sind aber ziemlich empfindlich. Eine einzelne Klage reicht da schon.

Stimmt, aber bis dahin haben alle Manager ihre Boni schon.

@ra6bit@infosec.exchange well technically there are two. Safari also exists...

@bsi@social.bund.de Nein, weil das Planen des Urlaubs ja bereits Teil davon ist. Die Vorfreude, sich die Orte anzusehen und rauszusuchen, sich videos dazu anzusehen. Die zwischenstopps zu planen etc. KI dafür zu verwenden ist also irgendwie sinnlos...