avidamoeba

joined 1 year ago
[โ€“] [email protected] 9 points 1 month ago

Every time I hear SimpleX I think of herpes. Perhaps shows that whoever came up with that name had never had or looked up cold sores.๐Ÿ˜‚

[โ€“] [email protected] 0 points 1 month ago (3 children)

How's that ruining its reputation?

[โ€“] [email protected] 5 points 1 month ago* (last edited 1 month ago)

That pesky phone number requirement saves the day again.

[โ€“] [email protected] 16 points 1 month ago (1 children)

He can turn a significant chunk of this value into actual dollars, even without selling the stock. This line of reasoning that execs' worth is not what it seems to be because it's based on share value is constantly used to discount their wealth and argue against acting on wealth inequality.

[โ€“] [email protected] 3 points 1 month ago

That's an interesting one. I know it depends on configuration, but in the run-of-the-mill case, does connecting through VPN stop local services to listen on local IPs? I know our corpo VPN kills local LAN access but I'm curious what the default for OpenVPN/Wireguard might be.

[โ€“] [email protected] 2 points 1 month ago* (last edited 1 month ago)

The OS interfaces provided to apps (generally POSIX) have no idea what HTTP is. They're much lower level than that. If an OS is to control what protocols are used by apps, it has to offer some functionality that does HTTP for the apps and apps have to use it. Unfortunately the only way to force that would be to disable the general OS interfaces so that apps can't just use existing libraries that use those. If you did that your OS would become useless in other ways that rely on the basic interfaces.

The other way the OS could do anything about it is to inspect network traffic going over its network interfaces. That would be a significantly different can of worms and it's not free in terms of processing power and therefore battery. Then you'd have the screams of privacy people that Android or iOS is looking at all network traffic.

So all in all, the OS isn't very well suited to police application level protocols like HTTP. At least not on devices whose primary purpose isn't network traffic related.

[โ€“] [email protected] 23 points 1 month ago

And they package drives correctly.

[โ€“] [email protected] 8 points 1 month ago* (last edited 1 month ago) (4 children)

I don't know if SPD ships to where you are but a manufacturer recertified 16TB from them goes for ~$160. I have 7 drives from them so far, 5 in continuous use since spring, no issues so far.

[โ€“] [email protected] 7 points 1 month ago* (last edited 1 month ago) (1 children)

Oh nice. Just gotta dress em up like Unifi or Aruba then stick em up on the ceiling.

[โ€“] [email protected] 7 points 1 month ago (2 children)

Apps don't use the system browser to connect to REST endpoints. Neither do they use the OS. Apps typically use a statically linked library. There are use cases for HTTP-only connections so it's unlikely that those libraries would mess with forcing or even warning its users that they've used HTTP instead of HTTPS. Point is Google and Apple can do little in this regard. Unless they scan apps' source code which could be possible to some extent but still difficult because URLs are often written in pieces.

[โ€“] [email protected] 72 points 1 month ago* (last edited 1 month ago) (9 children)

Yup. You can grab any unencrypted data passed between the user's browser and a server literally out of thin air when they're connected to an open access point. You sit happily at the Starbucks with your laptop, sniffing them WiFi packets and grabbing things off of them.

Oh and you have no idea what the myriad of apps you're using are connecting to and whether that endpoint is encrypted. Do not underestimate the ability of firms to produce software at the absolute lowest cost with corners and walls missing.

If I was someone who was to make money off of scamming people, one thing I'd have tried to do is to rig portable sniffers at public locations with large foot traffic and open WiFi like train stations, airports, etc. Throw em around then filter for interesting stuff. Oh here's some personal info. Oh there's a session token for some app. Let me see what else I can get from that app for that person.

[โ€“] [email protected] 2 points 1 month ago

I was pretty surprised to learn that Interac e-transfer or equivalent isn't commonplace everywhere.

view more: โ€น prev next โ€บ