Remote

mkj

@mkj@social.mkj.earth

mastodon 4.5.19

Hello; I'm Michael. Live in the Swedish countryside, work as a programmer. Own dogs, love the outdoors. Linux on desktop since circa 2000; Debian since Lenny. Interested in security/infosec and privacy. Licensed radio amateur. Write too little, read too much.

Personal account, not affiliated with anyone else or any organization. Thoughts, opinions, etc are my own.

Please excuse me for shaving characters off posts to stay under 500. For longer texts check out my blog, where I post occasionally.

680 Followers

883 Following

50 Posts

Joined November 25, 2023

Web site:

https://michael.kjorling.se/

Blog:

https://michael.kjorling.se/blog

TZ:

Europe/Stockholm

IM:

Email (see web site), Signal

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@madeindex@mastodon.social I very rarely hear anything like "let the state and corporations continue leading us down the path to authoritarianism" from people who don't take an active pro-privacy stance. What I *do* hear rather a lot though is an argument about convenience, "it's what I have always used", "they already have all my data anyway", "it's impossible to not use ", and so on. And from some cohorts, " isn't perfect so it should never be used". @r_alb@mastodon.social #privacy

7

3

1

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

Qobuz also apparently is among the streaming services that pay out most for streaming. And yes, they let you purchase full-quality (in many cases even studio quality) DRM-free, standard-format downloads of a very large portion of their catalog. Qobuz and Bandcamp kind of play in different niches though. Qobuz is great for mainstream music, but poor for indie music. For Bandcamp it's the other way around. Either way, never rest before download finishes. @gavin57@toot.wales @Hierarchy@mastodon.social @0xabad1dea@infosec.exchange @baldur@toot.cafe

4

3

2

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

I think at this point the best option is to have one (or several) places where you buy music, such that you end up with non-DRM'd audio files; and one or a few Things that you use to organise and playback those audio files. Separation of concerns. Just because I bought some music from Bandcamp doesn't mean I should be reliant on Bandcamp for further access. If anything, one big reason why I bought it on Bandcamp was to *avoid* being reliant on any third party for later use. @glyph@mastodon.social @0xabad1dea@infosec.exchange

3

0

1

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@cyberseckyle@infosec.exchange It's @jerry@infosec.exchange. That's all the answer you need. 😉

3

1

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Facebook AI-generating answers based on peoples' public Facebook posts? And people thought that Google indiscriminately pulling stuff from Reddit for their AI was bad.

2

0

1

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@EatingHawaiianP1zza@meow.social Seems to me it won't be very long before furries and computer nerds (to the extent that those two categories don't already overlap) are among the only ones who will know how to navigate the Internet (a superset of the World Wide Web), as opposed to the corporate-controlled app landscape. Trans people are of course welcome, too! And first impression that old dude sounds okay too. 🙂

1

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@frankps@mastodon.babb.no If the Commodore Callback is not for real, then you're not alone in being fooled. 🙂

1

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@kestral@masto.hackers.town Coincience. Nothing but pure coincidence. The cup of tea did *not* suddenly construct an infinite improbability drive so that it could teleport the biscuit to the Andromeda galaxy.

1

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@albaillustration@socel.net There's an animated The Animals of Farthing Wood series (EBU production I believe) from around 1990, which at least has been available with English audio on DVD (I'm not sure if it's still available); and there's the series of books by Colin Dann that the animated series is (in places rather loosely, in places very closely) based on and which include quite a lot more, including the events leading up to where the animated series starts. I think you might enjoy either! @eltonfc@bertha.social

1

1

0

0

mkj @mkj@social.mkj.earth

· 4mo ago

Replying to

I always thought that was a release channel or something, so saying you use Arch btw is a bit like saying you're on Debian testing or FreeBSD current or whatever. /s 😉 @ricardo@mastodon.bsd.cafe @oxy@social.bsdlab.au

1

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@0xabad1dea@infosec.exchange It got your attention, at least! 🙂

0

1

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@troodon@mastodon.art Did you have a chance to do that? I'm not seeing any such post yet. @klepsydra@wandering.shop

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

boost CW: beverage warning!

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@Firlefanz@writing.exchange I for one default to blocking people who do that. I might make an exception and take a less harsh action but one isn't something to be counted on. And once an account is on my blocklist, well, it usually stays there...

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@WorfEmail@mas.to I recommend speaking with Geordi about this.

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to on adhd.irenes.space

Or for that matter the list of who someone blocks. If someone were to DM me demanding that I block (or for that matter unblock) someone, I probably would block the person doing that. Who I block is no one else's business. At least Mastodon allows hiding follows and followers. @ireneista@adhd.irenes.space @JessTheUnstill@infosec.exchange

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@WeirdWriter@caneandable.social Using disposable email addresses is pretty much an absolute requirement these days. DO NOT, I repeat, DO NOT EVER give out your main email address. ALWAYS give out *single-purpose* disposable addresses and keep a list of which were used for what. People will look at you weirdly for giving them an alias or otherwise disposable email address, but just tell them that's the one they're getting. Have a few unused ones written down somewhere easily reachable for that random need. #email

0

0

1

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

Your answer was flagged by our automated security systems. To ensure that the traffic is not subject to interception or manipulation, we need to perform secondary verification of your identity. What's your mother's maiden name? @2something@transfem.social

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

RE: https://fosstodon.org/@AkaSci/116872704717933207 And when Swedish media reported on this, one word they used for them was... Wait for it... SPACEBALLS. No, seriously! "Rymdbollar" in Swedish. #SpaceDebris

Quoting

@AkaSci@fosstodon.org

Here's a pic of another similar object washed ashore at Forrest Beach, 250 km south of Cairnes. The Australian Space Agency states that they have identified the likely source, but do not name it. The object is a pressure vessel from a rocket body that recently re-entered the atmosphere from orbit. Strange how they these spherical objects survived the violent reentry into the atmosphere without much damage. Posted on X by @ausspaceagency@bird.makeup #Space #SpaceDebris 5/n

Open quoted post

AkaSci 🛰️: "Here's a pic of another similar object washed ash…" - Fosstodon

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@airikr@mst-gts.airikr.me Ja alltså, hälften av svaren i den tråden... jisses.

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

#ScribesAndMakers 14 June Most people [oppose] gatekeeping, but (aside from [keeping out] AI garbage), [should there be] any form of "quality control" [for] self-published work? I have read at least one trad-published recent book by an established author which was, for lack of a better word, crap. Well past just "I didn't like the story". I have read quite a few indie authors' books which have been great. "Quality control" or gatekeeping is clearly not the answer. #WritingCommunity

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@ret@furry.engineer On a phone, that would probably be a reasonable guess. But how many well-off 19 year olds would use a phone that runs a Microsoft OS, which would give Microsoft insight into push notifications for accounts on third-party services?

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@0xabad1dea@infosec.exchange It's official. The Mastodon Newfie has definitively escaped containment.

0

0

1

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

...Traveling Deliveryperson? 😆 @0xabad1dea@infosec.exchange

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@jorijn@toot.community If you haven't in a while, consider giving the official app a try and see what if anything you're missing in it. Even if you aren't happy with something about it, that might help you make a better choice between the available third-party apps.

0

2

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@coffe@social.piewpiew.se "Om Microsoft skulle försvinna så sitter alla lika mycket i skiten ändå." Inget exakt citat någonstans ifrån men jösses amalia känslan. Samma sak med Google och ett fåtal till. Meta/Facebook/Instagram bör väl höra till den kategorin de också. Typ, gör dig beroende av de största så är det inget problem eftersom alla andra också är beroende av de största... men att använda enkelt utbytbara tjänster från mindre aktörer, då tar man en sjuhelsikes risk och så kan vi verkligen inte ha det.

0

2

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

RE: https://dmv.community/@jcrabapple/116873103458200655 Separate question: Why in the world would logging in to Snapchat, Apple and Facebook accounts share and result in storing (associated with that activity) of some Microsoft-internal global device identifier? #privacy

Quoting

@jcrabapple@dmv.community

🔒 A 19-year-old cybercriminal was caught despite using a VPN across multiple countries - because Windows has a tracking number built into every install that a VPN can't hide. Peter Stokes, arrested in Finland in April and extradited to the US last week, is tied to Scattered Spider, the hacking group behind the 2023 MGM and Caesars casino breaches. The group is linked to 100+ intrusions and over $100 million in extortion. The FBI didn't crack his VPN. Microsoft handed over his Global Device ID (GDID), a unique identifier baked into every Windows installation at setup. It doesn't change when you update, switch networks, or use a VPN. The only way to reset it is a full OS reinstall. Investigators matched Stokes's GDID across IP addresses in Estonia, New York, and Thailand, correlating with login times on his Snapchat, Apple, and Facebook accounts. The same device that breached a luxury jewelry retailer and demanded $8 million in ransom also logged into Snapchat and a video game from his real network. So while VPNs mask your IP address, they were never designed to hide device-level identifiers embedded in your operating system. The tracking can live one layer deeper than the one most people defend. Read more: https://www.itnews.com.au/news/microsoft-device-telemetry-key-to-unmasking-alleged-scattered-spider-hacker-627148 https://www.databreachtoday.com/scattered-spider-suspect-extradited-from-finland-to-us-a-32140 #cybersecurity #privacy #windows

Open quoted post

jcrabapple: "🔒 A 19-year-old cybercriminal was caught despite …" - DMV.Community

0

3

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@RoganDawes@infosec.exchange Or use strong passwords and a restricted set of accounts allowed to log in over SSH.

If your root password is password123!, then sure, having SSH publicly accessible and with password-only authentication is a bad idea. But if the only account that can log in over SSH is an unprivileged one with a password like gIrD9T4t.639IV1TJLNUN2ruVt6Igc0iUE3nKdt7l6eGl10trJ2lhhiVJTeiGr9? How would that be significantly worse than key pair authentication?

@eltonfc@bertha.social

0

2

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

boost CW: beverage warning, X, Grok, USpol

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@jdskog@mastodon.nu Finns inte så himla många rimliga ord kvar man kan sätta ihop av bokstäverna dock. 🙂 @LeoR1010@mastodonsweden.se

0

0

0

0

mkj @mkj@social.mkj.earth

· 4mo ago

Since @media aural and @media speech are deprecated in CSS since at least Media Queries level 4:

What is the current preferred way to detect (preferably in CSS) when a user is using text-to-speech output so that document elements that have no relevance or can't be rendered aurally can be hidden/skipped?

I've looked through the MQ4 media features list and don't see anything relevant; but surely I can't be the only one who wants to do this?

#CSS #WebDev #accessibility #AskFedi #DuckDuckFedi

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@aurisc4@floss.social "New"? Not at all. I've seen it in wide use for at a guess a few years, maybe more, and this is relevant dating back to 2016: https://web.archive.org/web/20250622061208/https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/

web.archive.org

Detecting the use of "curl | bash" server side | Application Security

Another reason not to pipe from curl to bash. Detecting curl | bash serverside.

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@kestral@masto.hackers.town That's... one I don't think I've ever heard of before!

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@RoganDawes@infosec.exchange Well, sure, but that seems somewhat of a stretch from a blanket statement "SSH with password auth is a bad idea". (And yes you said it in this thread, but I've seen similar suggestions to turn off SSH password authentication in a lot of places, typically without any real justification, so please don't take this as that I am singling you out.) If you can't control the strength of the passwords, then yes, it can be a concern. But if you can and do, it's just another secret. @eltonfc@bertha.social

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

#ScribesAndMakers 6/14 Most people are opposed to gatekeeping, but (aside from the obvious need to keep out AI garbage), do you think there should be any form of "quality control" [for] self-published work? I have read at least one trad-published recent book by an established author which was, for lack of a better word, crap. Well past just "I didn't like the story". I have read quite a few indie authors' books which have been great. "Quality control" or gatekeeping is clearly not the answer.

0

0

1

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@coffe@social.piewpiew.se Jag håller med.

0

0

0

0

mkj @mkj@social.mkj.earth

· 4mo ago

Replying to on mastodon.social

@patrick_h_lauke@mastodon.social Fair point, I suppose. Not the answer I was hoping for to be honest but at least it's an answer. Thank you!

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

Agakrav? @jdskog@mastodon.nu @LeoR1010@mastodonsweden.se

0

2

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

Rikspolischef Petra Lund i SvD Debatt: "I dag kan polisen i många fall upptäcka, kartlägga och dokumentera den här typen av brottslighet." https://www.svd.se/a/9p6dLl/rikspolischefen-de-kriminella-ska-inte-ges-en-frizon-pa-natet Ja men då så! Då har vi ju hyfsat tydligt svart på vitt att vi i utgångsläget inte behöver mer övervakning av vanligt folks förehavanden, utan helt enkelt bättre möjligheter för polisen att beivra brott man redan "upptäcker, kartlägger och dokumenterar". @karlemilnikka@social.nikkasystems.com

Rikspolischefen: De kriminella ska inte ges en frizon på nätet

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Earth will be at aphelion in about five and a half hours (at 17:31 UTC). That's when we start going downhill, back again toward the Sun. Just like when you are at the top of a rollercoaster ride. Enjoy the ride! #aphelion

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@ginoputrino@mastodon.social I think your 2) ability to self-host should rather be something like "can be used independent of any specific other party". If you have that, then the ability to self-host often naturally follows. (It may be complex, but it ought to be possible.) Without it, even with the ability to self-host, you are still beholden to the whims of someone else. Absolutely 100% agree on interoperability and data portability. Without that, pretty much everything does fall apart! @glyph@mastodon.social

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@yomimono@wandering.shop Pawtograph? Slobtograph? @0xabad1dea@infosec.exchange

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@jorijn@toot.community 👍

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@fooflington@infosec.exchange The world wild web.

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@aesthr@wandering.shop One can certainly argue about the value to any particular user of the changes, so "meaningful" is a bit of a personal judgment call, but… https://en.wikipedia.org/wiki/Features_new_to_Windows_8 https://en.wikipedia.org/wiki/Features_new_to_Windows_10 https://en.wikipedia.org/wiki/Features_new_to_Windows_11

en.wikipedia.org

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

bad, llm

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

A Fedi post, linking to a Fedi post, which contains a tumblr screenshot, of a Fedi post. Are we coming full circle?

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@jonas@furries.club True wisdom.

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@karlemilnikka@social.nikkasystems.com For how long, though? What happens once the company is no longer around? If they were willing and able to block installation on a new computer two weeks ago, and have backtracked today, then what guarantees are there that this new promise will still be valid tomorrow? Lack of ongoing support, updates, support for later OS versions, etc., is one thing; the vendor deciding to (and being in a position to) block new installations is a completely different matter.

0

0

0

0

mkj @mkj@social.mkj.earth

· 3mo ago

Replying to

@_elena@mastodon.social SDXC "only" goes up to 2 TB, but SDUC (standardized since 2018) has a specified maximum capacity of 128 TB. https://en.wikipedia.org/wiki/SD_card#Capacity_standards There was a Western Digital / SanDisk 4 TB SDUC card expected to be released in 2025; I haven't checked how that turned out. https://web.archive.org/web/20240911012946/https://www.westerndigital.com/company/newsroom/press-releases/2024/2024-04-11-western-digital-showcases-new-super-speeds-and-massive-capacities-at-nab-2024 I suspect that certainly by the time we approach the upper bound of that capacity range, we'll be bumping up against physical limits. @davidho@mastodon.world

en.wikipedia.org

0

0

0

0