Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)SD
Posts
4
Comments
953
Joined
2 yr. ago

  • This article brought to you by the manufacturers of the interceptor missiles.
    If we were actually in a hot war or expecting one very soon, yes we would want to ramp production like the US did during WWII. Right now, the excessive costs of wartime production should not be considered. It's always best to remember Eisenhower's words:

    Every gun that is made, every warship launched, every rocket fired signifies, in the final sense, a theft from those who hunger and are not fed, those who are cold and are not clothed. This world in arms is not spending money alone. It is spending the sweat of its laborers, the genius of its scientists, the hopes of its children. The cost of one modern heavy bomber is this: a modern brick school in more than 30 cities. It is two electric power plants, each serving a town of 60,000 population. It is two fine, fully equipped hospitals. It is some fifty miles of concrete pavement. We pay for a single fighter with a half-million bushels of wheat. We pay for a single destroyer with new homes that could have housed more than 8,000 people. . . . This is not a way of life at all, in any true sense. Under the cloud of threatening war, it is humanity hanging from a cross of iron.

  • The new seasons have been lackluster. I think one of the main issues is that the show did a lot to wrap up the majority of the main character arcs prior to the cancellations. Fry and Leela are the central characters, often trading off the position as the audience stand-in. And there is basically zero room left for character growth. We know how the Fry/Leela love story arc ends, we've seen it. Kif and Amy have also hit the end of their main character arcs. They are married, have kids, and mostly are settled into domestic life. Bender is Bender. A core part of his character is his resistance to growth. So, even when they drop a backstory on him and try to give him growth, it just feels out of place. That only leaves background characters to work with. But, since it takes the focus off the main characters, it makes things feel like a money-grab spin-off.

    All that's left is the sort of 90's sit-com style, "story of the week" where nothing really changes and we all learn whatever moral lesson the writers wanted to foist on us this week in 22-minutes, plus commercial breaks. We all want "more Futurama"; but, I think the problem may be that there isn't "more Futurama". The stories are done, we just keep hanging on because of nostalgia, and the producers keep making it because of money. There are going to be good bits here and there. But, what we are seeing is what we are going to keep getting.

  • Seen this one in my work environment. Confusing as heck the first time. It looks like explorer.exe in the context of the local user starts PowerShell.exe with a command line involving an Invoke-WebRequest piping the download into an Invoke-Expression (usually the shorter iex alias). No .lnk or .js file involved. Just explorer, PowerShell, infected.

  • Ya, in fairness to MS, Windows XP was a good release (post SP1, like most "good" MS releases). But, the fact is that MS is going to push the latest version, regardless of how ready it is for use. MS was hot for folks to switch to Windows ME. And holy fuck was that a terrible OS. MS also did everything short of bribery to get folks to switch to Vista (anyone remember Windows Mojave?). The "upgrade, or else" mantra has always been their way. Not that I blame them too much, it does need to happen. It just sucks when the reason for the new OS is more intrusive ads and user tracking.

  • Many years ago, I attended a Windows XP launch event. The Microsoft presenter had the perfect line to describe how MS views this:
    "Why should you upgrade to Windows XP? Because we're going to stop supporting Windows 98!"

    This was said completely unironically and with the expectation that people would just do what MS wanted them to do. That attitude hasn't changed in the years since. Win 10 is going to be left behind. You will either upgrade or be vulnerable. Also, MS doesn't care about the home users, they care about the businesses and the money to be had. And businesses will upgrade. They will invariably wait to the last minute and then scramble to get it done. But, whether because they actually give a shit about security or they have to comply with security frameworks (SOX, HIPAA, etc.), they will upgrade. Sure, they will insist on GPOs to disable 90% of the Ads and tracking shit, but they will upgrade.

  • I've always been highly introverted. And I struggled with talking to strangers. So, I set myself a goal of getting better at it and started forcing myself to talk with people more. I sucked at it and probably left a lot of people thinking I was some creepy weirdo. But, I got better the more I practiced. I'm still not fantastic at it, but I can generally initiate and maintain a conversation with a random stranger, without coming off too terribly. Like most skills in life, it takes practice and a lot of failure before you can rise to the level of not sucking at it.

  • What is your tolerance for tinkering? One option, which would give you a lot of control and flexibility over the printer would be to build a Voron. It's tough to get more "open source" than a fully open source design. The 2.4 is also a CoreXY design and should cover just about everything you want.

  • I'd argue that the main reason you see more anime is the target audience.

    Western animation is usually aimed at young children. For as much as I may have loved Disney's Gummi Bears as a young child (decades later and I can still hear the theme song on my head), it's now pretty painful to watch. Some shows have aged pretty well and some newer shows aren't quite so bad. But, the target audience still seems to be younger children for much of it. There are exceptions, and several of those are pretty well known. For example, The Simpsons and Futurama are both popular animated shows, and both are not aimed at children.

    Anime, by contrast is often aimed at teenagers. This means that it's part of the audience's formative years. People form bonds with the shows and carry some of those bonds into adulthood. And while the writing often falls into cringe inducing melodrama, there's enough of it that is passable fun, usually simple hero stories. The shows can be like a comfy blanket that doesn't insult the audience's intelligence too much.

    I'd also note that anime's appeal goes back further than the 2000's. My own introduction was Robotech, back in the 80's. While it was a bastardized version of Macross, with some pretty awful writing (not that Macross's writing is going to win awards any time soon) and a couple other shows, it was certainly a step above what most western studios were putting on for Saturday Morning cartoons. And that created a lifelong soft spot for anime. Heck, my desktop background is currently a Veritech Fighter. I still love the idea of Robotech, even if I only watch it in my memory through very heavily rose tinted glasses. And I imagine I'm not alone. The show may be different, but I suspect a lot of folks graduated from Disney and Hanna-Barbera cartoons to some type of anime as they got older and that anime was stuck with them.

  • The Company believes the unauthorized actor exfiltrated certain encrypted internal ADT data associated with employee user accounts during the intrusion. Based on its investigation to date, the Company does not believe customers’ personal information has been exfiltrated, or that customers’ security systems have been compromised. ADT’s containment measures have resulted in some disruptions to the Company’s information systems, and the Company’s investigation is at an early stage and ongoing.

    This reads a lot like a domain controller got popped. Considering that this is the second breach in a short time, and the previous one got access to customer data, I wouldn't be surprised to find out that it's either the same attacker or this breach was an access broker who sold credentials to the previous attacker.

    That's just my guess, and I doubt we will ever get a sufficiently detailed write-up to know. But, it seems like a likely way for the attacks to go down.

  • Probably worth noting that, if you are using an employer owned system to watch said porn, they likely have software on the endpoint which will let them see what porn you are watching, regardless of HTTPS/VPN/Tor. Depending on how much your employer cares about such things, that may or may not come back to bite you. I've worked at places where we regularly reported on users watching porn on work computers, and I've worked at places where we only reported on users getting malware while browsing porn at work. But, never assume your activity isn't being monitored on employer owned systems.

  • Aren’t they inherently less secure than a TOTP code?

    They can be, depending on the types of threats you expect to face. If physical theft is an expected threat, then a hardware token runs the risk of being stolen and abused. For example, your attackers might just buy off cops to rob you and take your stuff. Having the physical device locked with a PIN/Passcode can mitigate this threat somewhat. But, that just becomes another password the attackers need to figure out.

    On the other side of the coin, TOTP applications have started offering Cloud Backup options for accounts. What this demonstrates is that it's possible to move those accounts between devices remotely. A hacked device means those codes may be exfiltrated to an attackers device and you will be none the wiser. Good security hygiene and device hardening can help mitigate these issues. But, it also means you need to a lot of trust in a lot of third parties. Also, you need to be unimportant enough for an attacker to not burn a 0-day on.

    Ultimately, security is all about trade-offs. If you worry about physical security and don't expect to face a threat which might compromise your phone, then a TOTP app might be a better option. If you are more worried about a hacked device being used to leak credentials, then a physical token may be a better choice. Each way you go has some ability to mitigate the risks. PIN for a physical token and device hardening for TOTP. But, neither is a silver bullet.

    And, if your threat model includes someone willing and able to engage in rubber hose cryptanalysis, then you're probably fucked anyway.

    I’ve heard that in the US, the 5th amendment protects you from being forced to divulge a password, but they can physically place your finger on the finger print scanner.

    Ya, it's a weird space that you cannot be legally forced to divulge a password, except in cases where the content of the drive is a "foregone conclusion" (as defined by the US Supreme Court). But, they can absolutely collect biometric markers (including forcing a fingerprint scan).