@Lizzardspawn's banner p

Lizzardspawn


				

				

				
0 followers   follows 0 users  
joined 2022 September 05 14:36:46 UTC

				

User ID: 594

Lizzardspawn


				
				
				

				
0 followers   follows 0 users   joined 2022 September 05 14:36:46 UTC

					

No bio...


					

User ID: 594

And what happens with your brisket when your smoker decides to have firmware update? /s - but it has been known to happen with other classes of devices.

Ok - let me describe you an utopia:

Your devices have well defined api-s, you have some raspberry pi that is used as a server, your phone is connected trough headscale to your home network. You have rock hard security, absolute privacy and solid control. All of the benefits of cloud accounts with zero of the downsides.

I am not against api enabled devices (although I would greatly prefer to have the sensors and open firmware that I could tweak myself), I am against cloud connected ones. Your doorbell, thermostat, heatpump and wifi capable buttplug don't need internet access. They don't need wifi and bt access and cloud account before they can have basic functionality. They need open standards for management and authentication.

The whole model of - device needs internet access, makes nat traversal, needs account that is on cloud that is managed by the manufacturer and could be managed only trough their proprietary app that also needs a cloud account is hostile, stupid and risky. Someone eventually will figure out how to overheat a smart water heater and some poor soul will get scalded.

Being able to monitor and change systems at scale is incredibly valuable, and the risk algebra actually does favor some centralized control from the corporate nexus.

Only if you are serious about security. If you are lax about it what is you have is central asshole waiting to fucked. Without lube.

They will become really amusing for a short time. For the life me I really can't understand why there isn't major effort right now in just disconnecting things and putting vpns and firewalls. It is cheap easy and actually quite effective.

No. Cyber criminals have been brought to trial and convicted. I am saying that due to the way Internet was designed - crime prevention and defense burden is on the victim, because the state has no capacity to prevent the crime.

Assume that we have a world in which death notes are common. France's laws can't protect you. How will you deal with the threat?

The default assumption about meatspace states is that they control a physical space, have the only say what goes in there, control the inputs and outputs. And because to commit a meatspace crime you have to be in physical proximity to the victim - it means you are at least nominally under said state power. And this arrangement works well and is easy to understand. You kill a man in Reno just to watch him die and then you go to Folsom. To commit a crime you have to overcome the state.

What does the death note change - that you could kill a man in Reno from Uganda, but there is no way the crime can be traced to you (or prevented). You totally bypass the state. In that world dying by death note because you showed your face or told someone your real name - will be classified as death by natural causes - aka stupidity.

Hacking is inevitable feature of the internet. To be able to prevent and police crimes you have to be able to control all of the infrastructure. And this is where my argument comes into play - if the state is incapable by definition to secure the cyberspace - then it is up to the sysadmins - because they have total control over what goes in their networks.

To a large extent we've gotten beyond that and in my opinion there's no reason the same thing shouldn't happen in cyberspace.

Because for that to happen you need to disable out of country communications, encryption, running unsigned software and to have state firewalls that will inspect every packet.

Everything you do is subject to the laws of the place your body occupies.

Yes. And defrosting French freezers is not a crime in North Korea. This is how North Koreans say hello to each other.

I don't mind being a fuckwit.

"The Net interprets censorship as damage and routes around it" while less true than in the 90s is still true enough today. Same as with malicious activities. Internet (okay apranet) was designed as military communication network capable of transmitting information even while severely degraded. That lead to a network that was anarchistic in its core. Just copy pasting meat space concepts and territories doesn't change its nature. Internet allows someone in Kenya to fuck you up in your country, in your home, in your bedroom for the lulz and destroy your life. This is why security is your responsibility - because the state as an entity that is entrusted and capable of providing protection is just not strong enough or not existing even in some contexts.

The only true internet crime is having bad opsec.

Yeah, the stores should have better IT security, but who would have thought anyone would be destructive for the sake of mindless vandalism to do something like this?

Anyone frequenting IRC in the late 90s?

Do you have any proof that the hackers were in jurisdiction in which spoiling French food is a crime?

I think you are missing my point. To commit crime you have to have law, the DNA of the internet was always lawlessness and anarchy. It started as a warzone. The fact that meatspace has claimed control and thinks its rules apply - doesn't change the nature of the place. Hackers are not criminals - internet was created to be unrulable - well it was created to be undisruptable, but the two kinda go together. So the burden is on the defender, by default. In the real world you have the whole monopoly of violence thing that says rape is not ok. Internet was designed so that monopoly of violence is impossible. Well the governments figured this one clever trick that if they can put chokepoints and match your digital to physical identity they could break your kneecaps. But still.

The most guilty party in any situation is always the actual guilty party.

Yes. The sysadmin. IT security with minimal exceptions[1] always had serious component of victim blaming in the 90s.

The difference with the rest of your scenarios is that in IT there was never trust which could be betrayed. Everyone knew from the beginning that everyone is out to get you. There was never presumption of safety on the internet.

So a better analogy is who is to blame when a soldier dies on the battlefield - the enemy shooter or the soldier that didn't take cover?

[1] Technically illiterate activists in the third world and the likes.

I think it is that it is because we are living in the time of quagmires and stalemates. Everything devolves into quagmire eventually. When something genuinely new happens - there is flurry of new comments and new perspectives - from which usually the quality contributions come.

Israel - Gaza - stalemate and quagmire - there is no reason to see the conflict differently than in 2024, because nothing new has happened. Same with Ukraine, Iran, housing, cost disease, cost of living, the inevitable march of AI that will doom us all or immigration. On the culture side - netflix will continue to cast black men as vikings, cossaks and queen elizabeth, western game female game characters will be ugly, writing in everything will be shit, but the parasites are not killing the host fast enough - so the decay will continue. Surveillance state is here to stay as are stabbings by immigrants in Europe.

They only really interesting culture war events lately was Clancy trial and the pushback against the cornell rape story - and i would say both generated quality content.

The culture war is one of attrition now - and read - All Quiet on the Western Front about how eventually participants in one feel.

It is mix of purified beeswax and mineral oil 1:3 by weight. Still pretty cheap to do at home and a batch lasts forever. But the wax is mucho important.

The issue probably is the cloud accounts, not that they had real ip addresses. Even my mild contempt towards french IT prowess doesn't assume a world in which they will leave them out in the open or allow them NAT traversal. Having the right to install your own server to manage your own devices should be basic ownership. But this is often impossible. Which is really infuriating with the security cameras that needs cloud account in china. Yaay.

https://uk.finance.yahoo.com/news/french-supermarket-chains-cyberattack-forced-115141288.html

Major French supermarket chains on Monday said they were hit by a cyberattack that caused their refrigerators to shoot up in temperature in hundreds of stores, forcing spoiled food to be thrown away and raising concerns about food security.

"Food security requires more attention at all levels," said the EU's food and agriculture commissioner Christophe Hansen on X, condemning the attack and saying such "exploitation of food" was now a "reality".

At least 300 shops of Intermarche or its Netto brand were targeted, along with over 100 Cooperative U outlets, and several E. Leclerc stores, the retailers told AFP in separate statements.

BFM TV said hackers "managed to remotely trigger the forced defrosting of the refrigeration systems in numerous stores".

Those branches that were affected will have to "throw away all of the products" that are fresh and frozen, Intermarche told AFP.

Specialist French retail sector news website jebosseengrandedistribution.fr said other retail giants Carrefour Market and Monoprix were affected but the companies have yet to confirm this.

E. Leclerc confirmed to AFP "that a cyberattack affected one of its refrigeration equipment suppliers," resulting in "repercussions on the operation of refrigeration systems in several stores".

A source close to the issue said refrigeration control systems from Danish manufacturer Danfoss were targeted.

Danfoss told AFP in a statement that most of the affected equipment was "legacy" products which "no longer receive software or security updates".

It said its AK-SM800 and AK-SC355 fridge regulator systems were notably affected, with a version of the former using "outdated firmware". It added that it had long advised supermarkets to update from those models. Danfoss gave no figures of how many systems were affected.

A person close to French Prime Minister Sebastien Lecornu said France's cyber security agency had already identified "a vulnerability in software supplied by a Danish company and has contacted the vendor".

"Targeting equipment essential to the preservation of fresh products and to the food supply of the French people is extremely serious and is unprecedented. It is unacceptable," he wrote on X.

He added that the company's teams were "fully mobilised" to restore the situation as quickly as possible.

"An investigation will be necessary to shed full light on this attack," he added.

Intermarche condemned the food waste and financial losses resulting from the attack, without providing figures.

BFM TV said temperatures were "altered remotely, resulting in the destruction of stocks of fresh and frozen products".

The incident comes against the background of growing concern over the potential havoc that can be caused in Europe in all sectors by malicious actors carrying out cyberattacks.

By likely affecting hundreds of units simultaneously, the attack demonstrated "a certain level of sophistication," he added.

This is a poetry of stupid and the hackers are the least guilty party here. Lets start with the obvious. Why freezers needs to be visible, why do they need to be remotely managed, why is not this done on dedicated internal network, why do they need firmware updates. How did we get to the point where a device that should be pid controller, compressor and alarm can be hacked.

To make you feel better - all of your nice EVs are also permanently connected and I doubt that there is air gap between the infotainment and the firmware of the battery pack. Someday someone will be able to accelerate or set on fire EV remotely. And probably soon.

Let's start with something juicy

https://www.bbc.com/news/articles/cvp8glg97393o

US immigration agents searched the home of Minnesota Representative Ilhan Omar on Monday morning as part of a "criminal investigation".

Homeland Security Investigations (HSI) agents "executed a judicially authorized search warrant" for the home in the Washington, DC, area, a US justice department spokesperson told the BBC.

The search "is part of an ongoing federal criminal investigation," the spokesperson said, but no further details were given. ... The justice department has a longstanding policy of refraining from most enforcement action that is "likely to raise an issue or the perception" it was being brought for the purpose of affecting any election or disadvantage a candidate.

Couple of starting points - it won't help Trump, chances of uncovering smoking guns that with tank Dems in the eventual records are slim to none. Zero chance she will be stripped of citizenship or her alleged brother deported (cue Alabama joke here). It is not escalation - the escalation was the Trump trial, but as retaliation is quite weak. If democrats obtain trifecta - I wonder what type of further escalation they will figure out.

Personally I find her the most dislikable among the squad, so I won't say I am sad.

i think there were some castles in WWII - like one case where Wehrmacht allied with pows against SS, but since many of the castles in Germany were relatively modern it is hard to tell.

Or use a crossbow.

That is up to him, not to Pete.

Absolutely not. Because it was pure raw uncut bullshit justification to begin with. So if they can tie it to privacy, then privacy of execution is much easier to tie to the right to privacy.

We are literally living in George Carlin sketch.

This is stupid. I don't think that public executions are a bad thing per se. But if you want to instate that federal executions should be public - there should be somewhat of a process, not by fiat, and not make it exceptional occasion.

Also not a chance in hell this will happen - if SCOTUS thought that right to privacy gives you right to abortion, if sure as hell gives you literal right to privacy for your execution. I do support the condemned to be able to waiver it and make it as public or private as they desire.

Someone designed it, someone implemented it as a series of instructions.

Unlike the backpropagated transformers that just emerged from nothingness.

A good analogy - LLMs are viruses level stuff on the consciousness evolution step. They can't form homeostatic processes. We are far away from the moon is a harsh mistress.

I think the right believes women need strong limitations on sexual rights and cultural traditions preventing let’s call it sluttiness or their love will end up being temporary.

The right believed mostly what the old time feminists believed - that a woman in charge of her sexuality also bears responsibility for her actions and outcomes. Most of the edgelordiness online is just backlash to the change of no means no to yes means yes to yes means no four years later after the fact.

And do you know what is the most red pilling event of them all - to see a woman you hold dear return for 18th time in her abusive relationship "because I love him" after she was beaten up regularly. The pure red hot rage that you can't save someone from their own stupidity.

What is the difference compared to playing sims throwing your sim in the pool and removing the ladder?

The arctic road is opening and russia and usa in alliance control all of it. Russia has no desire or capacity for European hegemony. The relationship between Europe and USA is irrelevant to USA because - well we are useless. Even united we can't become a threat to USA power any more - nor military nor economically - 20 years of Brussels rule made sure of that. We have huge problems with immigration and future immigration. Europe is decaying. Even totalitarian military junta won't fix our problems.

The Sino Soviet split was the deathblow of the cold war, now USA have to do it in the other direction.

And let’s be clear we are at war with Russia.

Repeating lets be clear many times doesn't make the following statement any truer. Not every minor geopolitical adversity is war.