brombek

joined 4 years ago
sorted by: new top controversial old
German state moving 30,000 PCs to Linux and LibreOffice - The Document Foundation Blog in c/[email protected]
[–] [email protected] 14 points 7 months ago (4 children)

MS will erect another campus and things will go back to "normal". Hopefully this will last at this time...

Good documentary about MS hold over German government: https://www.youtube.com/watch?v=duaYLW7LQvg

0
Worldwide Server-side Cache Poisoning on All Akamai Edge Nodes ($50K+ Bounty Earned) (medium.com)
submitted 2 years ago* (last edited 2 years ago) by [email protected] to c/[email protected]
0 comments fedilink
 

So one could have replace a JS file with one fetched from attacker controlled server for any site behind Akamai like LastPass or PayPal. That JS could have exfiltrated all the secrets from these sites on the client side (post decryption) or replace account numbers with their own on behalf of the user.

1
Climate emergency: Is nuclear power a part of the solution? (yewtu.be)
 

YT: https://www.youtube.com/watch?v=E1TV1Y5f7Mg

0
Norton 360 Now Comes With a Cryptominer – Krebs on Security (krebsonsecurity.com)
 

“Norton is pretty much amplifying energy consumption worldwide, costing their customers more in electricity use than the customer makes on the mining, yet allowing Norton to make a ton of profit,” tweeted security researcher Chris Vickery. “It’s disgusting, gross, and brand-suicide.”

Revealed: leak uncovers global abuse of Israel's NSO Group spyware tool Pegasus [The Guardian] in c/[email protected]
[–] [email protected] 0 points 3 years ago (1 children)

Any form of surveillance used by any government will be used primarily for political reasons, against non-criminals. There is no such thing as Good Spyware.

Snapdragon chip flaws put 1 billion Android phones at risk of data theft [Ars Technica] in c/[email protected]
[–] [email protected] 0 points 4 years ago (1 children)

"3 billion" devices with multiple vulnerabilities that sound like RCE via things like video playback with "fixing them requires a long chain of communication between many vendors, manufacturers and resellers" sounds like a total disaster to me. Many (most?) Android phones in use will never see an update!