@TheBreadmonkey I honestly pictured Harrison Ford 'running' around dragging an oxygen tank when they announced they were making another movie 😅😂
@Federation_Bot
Your Complete Home Maintenance Checklist for Every Season
https://www.mensjournal.com/gear/home-maintenance-checklist?utm_source=flipboard&utm_medium=activitypub
Posted into The Latest From Men's Journal @the-latest-from-men-s-journal-mensjournal
@catsalad @falcennial Six seven just sounds like a London bus number
@purplepadma @catsalad i just want you to know you've broken my streak of avoiding 67 on this website and that I hope the powers that be punish you and catsalad (for facilitating) appropriately for this
We went up into the mountains to find some snow
It's so wild to me still that we can just
Go inna mountains
@Npars01 11% is more than it should be; the claim is provably false.
(Does that make Thatcher a Post-Truth™ Pioneer? 
)
@TheBreadmonkey I loved it! enjoy :)
@nviollette@piaille.fr @purr@firefish.asso-purr.eu.org @cnil@social.numerique.gouv.fr Et c’est pas nouveau. J’ai balancé à la CNIL une autre entreprise qui avait tous ses outils admin à poil sur le net, sans VPN, sans 2FA, sans certificat, sans rien. À poil. Et t’avais accès à des dossiers médicaux, tu pouvais destroy toute l’infra…
@nviollette@piaille.fr @purr@firefish.asso-purr.eu.org @cnil@social.numerique.gouv.fr Ça c’est un bout de ce qui traîne sur le bureau de la CNIL pour une entreprise qui vient de se prendre une mise en demeure de la CNIL en ce début d’année. Bon, tout est toujours dans le même état hein, faudrait pas déconner quand même…
Je viens encore de tester ce soir : le métabase est toujours à poil sur le net. Leur outil d’admin aussi.
Isolation réseau ? Aucun. Sécurité ? Aucune.
Je parie qu’ils n’ont toujours ni anti-bruteforce ni 2FA derrière.
4 media
@nviollette@piaille.fr @purr@firefish.asso-purr.eu.org @cnil@social.numerique.gouv.fr Typiquement encore l’autre jour, on a chopé Darty avec une CRM unique qui contient l’intégralité de ta vie, accessible à n’importe quel employé du magasin, sur des commandes de plus de 10 ans qui n’auraient juste plus dû du tout exister dans une telle base.
On avait même des échanges avec le support vieux de 10 ans quand la durée max de rétention de telles informations étaient de 6 mois… 😑
@nviollette@piaille.fr @purr@firefish.asso-purr.eu.org @cnil@social.numerique.gouv.fr Et oui, tout est en train de craquer. On recense plus d’une 10aine de hack CONNU par mois en France.
Tu peux être plus ou moins certains d’être dans au moins 5 fuites de données différentes, et toute entreprise se fera powned sous quelques années.
2 media
TIL about Boney M #music and it’s fantastic! I listened to them earlier coz went to a disco aerobics class and asked the instructor what magic my ears just sexperienced
ICYMI “ Boney M. is a reggae, funk and disco music group founded in 1974 in West Germany. It achieved popularity during the disco era in the second half of the 1970s.”
Wikipedia
cf. album we heard in class
https://en.wikipedia.org/wiki/Nightflight_to_Venus
Re: TIL about Boney M #music and it’s fantastic!
@crissy@tech.lgbt oh you've definitely heard Rasputin before, no?
@vetehinen i'm not sure i agree with you that there is a clear distinction between material and immaterial objects
@vetehinen i agree that the laws covering them demonstrate a distinction, but the loopholes in said laws which are being hammered away at right now are precisely in the interface of materiality. consider hachette vs IA, where IA made the claim that the act of converting physical text to a digital form circumvents copyright protection (this is in fact clearly fallacious from decades of legal precedent). the way copyright considers physical (and digital) realization of the covered work to be distinct from the labor protected by copyright is to me a strong argument that these are very tightly and necessarily linked
@divVerent @alcinnz i agree with that but had failed to infer your definition of "Signal"
@divVerent @alcinnz meredith whittaker has communicated to me that this work would be cool to see and the eng team has been nothing but helpful to me they are just very clear that they can't expend engineering resources on alternative approaches
https://sunny.garden/
🐈🥗 @catsalad@sunny.garden pending
@hipsterelectron @haskal @132ikl
"I have invented splunk"
"What you've done is fucked up a perfectly good grep. look it's got a distributed storage engine attached now"
@devopscats I heard about that but not the details (nor have I managed to find the video)... I'll have to keep an eye out. (I feel like he would be responsive to reasoned criticism -- but it might also just get lost in the noise.)
@woozle he pulled the original video and did a response, which although reasoned, didn't really address the criticisms, i.e. a lot of it in that case was driven by the inherent cognitive biases that come from being a privileged white male, which being one myself to some degree, I feel more white men need to acknowledge
Tumblr keeps showing me posts by people in poly relationships griping because they feel like they don't get enough respect from their peers.
but a lot of the things they're annoyed by, are things that people say when they're letting you know they're not interested in joining your polycule, stated in a way that's supposed to save face for everyone.
Like, they're not ~rejecting~ you, they're just saying that it's their own personal tragic failings that leave them unable to be poly.
They hate Sen. Kelly because he is everything they are not: a true soldier, brave, honest and determined to defend our Constitution.
Re: What Is The Fediverse?
Actually @stefan@stefanbohacek.online has the right idea.
What if your landing page asked a simple question... "How do you want to learn?"
Audio? Send them a podcast.
Video? Link them to @_elena@mastodon.social's video
Tiktok style? Let's make some short punchy intro vids.
Image? Send them to an infographic. Maybe this is where your site lies @benpate@mastodon.social
Memes? Let's show them the best memes we can make.
Just finished landing Exit Code support. So now if more scanners are made or one of the projects gets more features you can quickly switch to whichever makes the most sense for your use case!
I literally lost a ton of sleep on this volunteer incident response work so I'm going to go touch grass for a bit.
More hacks later tonight, still got some loose ends gnawing at me lol.
https://github.com/datapartyjs/walk-without-rhythm?tab=readme-ov-file#how-to-use
#nodejs #npm #javascript #Sha1Hulud #WalkWithoutRhythm #Sha1HuludScanner #cybersecurity
I spent more time searching for other Sha1-Hulud detection tools and found four more bringing it to 6 scanners (5 in nodejs).
Linked them all from my readme in case those work better for you.
Best way to beat a work like this is to keep scanning and keep an eye out for the attacker to try and evade all of our tools.
By using more than one hopefully we make the attackers job harder to evade all of us.
https://github.com/datapartyjs/walk-without-rhythm?tab=readme-ov-file#similar-tools
#Sha1Hulud #WalkWithoutRhythm #nodejs #npm #github #microsoft
