[-] drspod@lemmy.ml 6 points 23 hours ago* (last edited 23 hours ago)

you might send that email to the client too by mistake and get fired

That's an unfair dismissal lawsuit: https://www.independent.co.uk/news/uk/smith-oxford-b2616638.html

[-] drspod@lemmy.ml 13 points 2 days ago

Otherwise you start getting pushed around by other superpowers

This is more a coincidence of the status quo rather than a consequence of an inherent correlation between economic output and geopolitical power.

[-] drspod@lemmy.ml 3 points 2 days ago

This vuln is not new, it was published 3.5 years ago: https://nvd.nist.gov/vuln/detail/CVE-2020-26558

[-] drspod@lemmy.ml 4 points 2 days ago

Sometimes it gets racist and victim-blaming.

A strange confession to put in a game review.

[-] drspod@lemmy.ml 5 points 2 days ago

It doesn't surprise me that Apple pulled out of the OpenAI investment. They've been trying to polish these new features and finding that they're built on sand.

[-] drspod@lemmy.ml 18 points 3 days ago

they sure aren’t disproving how woke they are

Why do you think that they need to be doing this?

[-] drspod@lemmy.ml 17 points 3 days ago

From what I've read, that person is not officially affiliated with the Godot project. They just moderate an unofficial Discord server that is Godot-related.

[-] drspod@lemmy.ml 6 points 3 days ago

If you read the article, the described attack allows a man-in-the-middle attack on two devices while they are pairing.

This means that someone could intercept and modify your bluetooth mouse or keyboard inputs, resulting in complete compromise of the device they are connected to.

[-] drspod@lemmy.ml 53 points 3 days ago

Pretty sure this was described exactly in Snow Crash (Neal Stephenson, 1992).

[-] drspod@lemmy.ml 5 points 3 days ago

Isn't that exactly what copy protection is supposed to prevent? If you can read data from the cartridge and then put it on some other medium that still works in original hardware then what you've done is copied the game.

[-] drspod@lemmy.ml 10 points 4 days ago

The (50!) games

50! presumably referring to the number of different orderings in which you could play them?

[-] drspod@lemmy.ml 53 points 6 days ago

I'm no "veteran diplomat" but in my experience it is only the people without real power who make threats. When you have power, you don't need to make threats. You just respond to events with whatever proportionate response is necessary and within your capability. You don't need to provide a preview of what those responses will be.

Setting "red lines" looks to me like weakness because it is essentially a plea to the other side not to do those things that you don't want them to do, and it invites them to push up to those red lines, do anything but, and test their boundaries to test your commitment to them.

35
submitted 1 month ago* (last edited 1 month ago) by drspod@lemmy.ml to c/programming@programming.dev

Threat actors are utilizing an attack called "Revival Hijack," where they register new PyPi projects using the names of previously deleted packages to conduct supply chain attacks.

The technique "could be used to hijack 22K existing PyPI packages and subsequently lead to hundreds of thousands of malicious package downloads," the researchers say.

If you ever install python software or libraries using pip install then you need to be aware of this. Since PyPI is allowing re-use of project names when a project is deleted, any python project that isn't being actively maintained could potentially have fallen victim to this issue, if it happened to depend on a package that was later deleted by its author.

This means installing legacy python code is no longer safe. You will need to check every single dependency manually to verify that it is safe.

Hopefully, actively maintained projects will notice if this happens to them, but it still isn't guaranteed. This makes me feel very uneasy installing software from PyPI, and it's not the first time this repository has been used for distributing malicious packages.

It feels completely insane to me that a software repository would allow re-use of names of deleted projects - there is so much that can go wrong with this, and very little reason to justify allowing it.

368
submitted 1 month ago by drspod@lemmy.ml to c/196@lemmy.blahaj.zone
23
submitted 6 months ago by drspod@lemmy.ml to c/chess@lemmy.ml

Description: "Featured is a playthrough of a blitz chess game between Rodrigo Vasquez and Vladimir Kramnik from an Early Titled Tuesday event which was held on October 17th, 2023. Kramnik recently admitted, via a YouTube comment on this topic of fair play surrounding him, that he played several tournaments under someone else’s chess.com account. This act violates chess.com’s Fair Play Policy. Kramnik played under Denis Khismatullin’s account, “Krakozia”. I share reasons why this is a violation of fair play policy, how a player can be negatively impacted because of it, and provide Kramnik’s YouTube comments where he attempts to explain it all."

294
submitted 1 year ago by drspod@lemmy.ml to c/privacy@lemmy.ml

cross-posted from: https://lemmy.ml/post/4912712

Most people know at this point that when searching for a popular software package to download, you should be very careful to avoid clicking on any of the search ads that appear, as this has become an extremely common vector for distributing malware to unsuspecting users.

If you thought that you could identify these malicious ads by checking the URL below the ad to see if it directs to the legitimate site, think again! Malware advertisers have found a way to use Google's Ad platform to fake the URL shown with the ad to make it appear like a legitimate ad for the product when in fact, clicking the ad will redirect to an attacker controlled site serving malware.

Don't click on search ads or, even better, use an ad-blocker so that you never see them in the first place!

193
submitted 1 year ago by drspod@lemmy.ml to c/technology@lemmy.ml

Most people know at this point that when searching for a popular software package to download, you should be very careful to avoid clicking on any of the search ads that appear, as this has become an extremely common vector for distributing malware to unsuspecting users.

If you thought that you could identify these malicious ads by checking the URL below the ad to see if it directs to the legitimate site, think again! Malware advertisers have found a way to use Google's Ad platform to fake the URL shown with the ad to make it appear like a legitimate ad for the product when in fact, clicking the ad will redirect to an attacker controlled site serving malware.

Don't click on search ads or, even better, use an ad-blocker so that you never see them in the first place!

332
submitted 1 year ago by drspod@lemmy.ml to c/linux@lemmy.ml

A reported Free Download Manager supply chain attack redirected Linux users to a malicious Debian package repository that installed information-stealing malware.

The malware used in this campaign establishes a reverse shell to a C2 server and installs a Bash stealer that collects user data and account credentials.

Kaspersky discovered the potential supply chain compromise case while investigating suspicious domains, finding that the campaign has been underway for over three years.

1
submitted 1 year ago* (last edited 1 year ago) by drspod@lemmy.ml to c/lemmy_support@lemmy.ml

[SOLVED]: The issue was caused by having "Show read posts" unticked in Settings. This will hide your own posts from you!

I recently made a post^[1]^ to this community about a bug that I experienced and reported.

The post does not appear in the New feed for /c/lemmy_support nor does it appear in my user profile under Posts ^[2]^.

However the post does have 3 replies (from users on multiple different instances) which means that other users can see it across the fediverse, so it's not a federation issue. (Also, my account and the community are both hosted on the same instance - lemmy.ml).

I was not subscribed to /c/lemmy_support at the time I made that post, but I am subscribed now to see if that affects my visibility of this post.

Is this a bug, or am I misunderstanding how lemmy works?

Interestingly, if I view my profile while logged out, it does show the posts that I made, but when logged in it shows zero posts in my profile.

[1] https://lemmy.ml/post/1394597

[2]

4
submitted 1 year ago by drspod@lemmy.ml to c/lemmy_support@lemmy.ml

See the images attached to the linked bug report. Where it usually says my username in the top-right, another user's name appeared. This happened twice in the last two days.

I submitted the bug to the lemmy-ui project, but I'm not certain if this is a lemmy-ui problem, or a problem with the specific infrastructure setup of lemmy.ml, or even a backend issue.

Any advice on whether I should post this bug report to somewhere else for greater visibility would be welcome. This could be indicative of a fairly serious security issue (or it could be a completely cosmetic bug).

view more: next ›

drspod

joined 2 years ago