CameronDev @ CameronDev @programming.dev

Posts

4

Comments

1,183

Joined

2 yr. ago

Consider me whooshed then. Didn't see the first parts

Doesn't really work without the setup

Spaces

Sway-wm used to be spawnable as a child window, not sure if that is still possible.

I think you should also be able to get multiple ctrl-alt-fX graphical sessions.

I'll come back and update this comment when I get to my PC and give this a try.

Edit: seem Max-P's comment.

Sure, sure, but did he have cat in his system?!? Checkmate atheists!1!

How hard was it hit, i kinda hoped that it would have to be a really hard hit to knock the tail off?

Getting the chassis would be hard, usually that's not a "part". But you could by a second hand/wrecked car and refurbish it with parts. It will be expensive and not easy, but possible.

That's just what CMG claimed to have.

But to be useful for an advertising network, it kinda needs to be installable on everything. And if it failed to suppress the mic LED on a single device, it would be very easily noticed?

Family Link. You can whitelist apps, get screen time stats, and if your kid needs an app, when they try install it it will ask your approval.

https://play.google.com/store/apps/details?id=com.google.android.apps.kids.familylink

Bit of a pain getting the accounts setup, but otherwise works very well for preventing my grandma filling her tablet with junk.

I think its better to keep your gateway basic, and run extra services on a separate raspi or similar. Let your router/gateway focus on routing packets.

Openwrt can run Adguard, and as long as your gateway can run docker, you can probably get pihole working.

I'm not sure there is a "mentality of ephemeral code" in open source projects. The source is literally available on github or similar, and anyone can mirror it as they like.

If it is popular enough, then the project is probably backed up in the github artic vault as well.

If its an open source project, the answer is to rebuild from the tagged source.

Eg: https://github.com/fastapi/fastapi/tree/0.112.4

With the right repo setup, you can pip install git+https://github.com/fastapi/fastapi.git@0.112.4 (example only, not sure it works), so pypi doesn't need to keep all previous wheels, its just easier for it to do so.

https://m.youtube.com/watch?v=7xUYbI64QHI

Sure, except we are defenceless to the rampant dropbears. /s

Australia is a funny example for gun control. Yanks seem to think we have no guns at all, but the reality is that as long as you are mentally sound and store your guns safely, they aren't that hard to get.

Any idiot and chatgpt could knock up an overt always listening app in an afternoon. I have no doubt shady apps already can do this. Its not hard or expensive. (Backend storage and audio processing costs are a different kettle of fish, and I think those make this fairly prohibitive as well, but that's a funding problem, not a technical problem.)

But as soon as they make the claim that it doesn't trigger the microphone LED on iOS and Android, across all devices, then that's a "technically hard" problem. That's multiple zero days across multiple devices. Its just not feasable for an ad tech firm. They would never be able to recoup that investment.

I'm happy to be proven wrong, but so far all the researchers in the world have found nothing.

So I'm attributing near 0% chance that anyone outside of nation states have the later tech (device agnostic covert audio recording).

The capabilities TLAs have costs hundreds of millions of dollars to develop, and once caught, are worthless. TLAs are extremely careful with their toys to avoid them being caught.

This Adtech company is claiming to have something at that level, which they are deploying everywhere. If it existed, it would have been found the day after they announced it, the security researcher industry would be all over it. They are very intelligent people who do understand those devices inside and out, if it existed they would find it. Remember, these are the same researchers who frequently out actual TLA tools.

You can't prove a negative, so it definitely is a probability thing, but I put the probability at basically 0 that they have what they claim.

https://arstechnica.com/gadgets/2023/12/no-a-marketing-firm-isnt-tapping-your-device-to-hear-private-conversations/

The capability they were claiming to have would make a three letter agency very excited. If they truely had the ability to listen to your microphone, transparently without notifying the user, they could sell that tech to every regime that wants to snoop on people, for millions of dollars.
Instead they claim to be using it for Ad-tech, where if it existed, would make it trivial to discover and flag as malware.

Apple and Google would also be very keen to find and squash whatever loophole let's them record without showing the notification.

Its just an extraordinary claim, which if true would have been exposed/validated by security researchers long ago.

Not disputing the three letter agencies, but there is zero evidence that that ad company ever had the tech or ability. They were/are just full of shit.

You really don't want tests to prevent voting. They will be used entirely for voter supression.