Serial accountability dodgers
could anyone who knows what an internet is validate my thinking around the threat model of the EFF sovereign keys debacle? i can see two ways an MITM might occur:
- directly modifying DNS resolution for a domain to reroute to your evil IP
- super evil and more complex stuff to reroute the correct IP address to your evil server, if you control the user's ISP or router or something
in both cases, you would serve from your evil server, and you would provide your evil certificate, which (i think) you could certainly construct to pass inspection. so eff's little database moves trust from the server itself to [mysterious EFF-controlled table]
like, i think it's a terribly executed idea, because you should be able to just retrieve the certificate from anywhere separately from visiting the site. but is that the right threat model?
@hipsterelectron
Depends not only what access they're using to mitm stuff but also how precise about who they mitm they want to be...
- sidling up beside the real server inside its hosting company who's been persuaded to route to you instead on that IP while you passthru to the real server behind. (Iirc one German maneuver against a Russian xmpp server hosted in Germany worked that way.
- DNS shenanigans with bonus "oops we almost missed it, reset the connection to EvilIP" on hacked consumer router right next to NaiveTarget. Glaringly obvious; somehow still largely effective.
- "DNS poisoning" of all customers at the ISP level. Doesn't care if a few use third parties... enough won't for profit.
Just made the most terrific food. This evening we travelled to Argentina! Ay ay ayyyy! I'll be honest I don't know where Argentina is or what they say. It feels Spanishy somehow. Do the Spanish say ay? Or is that sailors? I forget. Anyway..... We had some terrific potato salad leftover from last night and I made up another deconstructed salad salad (everyone except for me likes different bits so I have to put 'a salad' out in about 10 bowls - but it looks pretty and people seem to like it), wanged some old chips in the air fryer, put out some cold corn OT cobs, but what I was really after was making some kind of chimichurri sauce. A kind of salsa verde. No idea why. I haven't been taking my vitamins this week so maybe my body was trying to communicate with me. So I picked up some Juicy Marbles steaks on special - not totally sold on them yet tbh - but fam..... I made THE most terrific sauce and it just pulled everything together and it was really excellent.
Large bunch parsley. Small bunch coriander. Large spoon capers. Half a lemon. 3 cloves garlic. Bunch of salt and lots of pepper. Bit of sugar. Glug of white wine vinegar. Very big glug olive oil. Possibly some other stuff? Ah yes very small bunch of mint and some dried oregano. Also some chilli flakes. Chopped up and left to meld. Seriously good. SERIOUSLY good. I will make this again. Reckon it'd work well as a crowd pleaser. Although the JM steaks are a bit too expensive to feed en masse. Wonder if I could do some kind of Beyond meatballs in sauce or something. I am literally just typing my thoughts now. BYE!
@TheBreadmonkey Chimichurri is grand as a marinade. Also good on fried tofu with veg (peppers, onions, zucchini) with rice.
Despite all my beans, I'm still just some cats in some jeans.
@catsalad From days of long ago, from uncharted regions of the universe, comes a legend. The legend of Voltron, Defender of the Universe!
Carlos Solís
liked this activity
I should probably charge my headphones.
I hate that that is a phrase that makes any kind of sense.
Headphones should be wired.
(If you're curious, I've moved on from John Mayall and I'm now listening to Mick Taylor era Rolling Stones.)
I should probably charge my headphones.
quinta - Stefano Quintarelli
boosted
@a40yostudent
per me le questioni sono come minimo due: scelgo io se farmi riprendere (ma devo sapere che la ripresa è in corso...) e deve andarmi bene l'uso che farai della ripresa.
con i pervert glasses il led si copre facilmente e meta sappiamo che abusa qualsiasi dato raccolga.
discorso diverso sarebbero degli occhiali pensati come ausilio per disabili, oggetti di scena in uno spettacolo partecipato, impieghi che prevedano vincoli e regole.
@quinta
Ecstatic to find my Hot Type upfront on the history table at the wonderful @labyrinth_books of Princeton. Hey nearby friends, if you're tempted to buy it, that'd be a great place to pick up an autographed copy (and get them to reorder😎... always be sellin').
alcinnz
boosted
Want to learn firmware reverse engineering on an IoT device? I'll be giving a free, women-only workshop with BlackHoodie at Hexacon in Paris on October 15. #reverseengineering
Low Emission Zone Led To Better Lung Size, Function Among London Children https://news.slashdot.org/story/26/08/22/0537243/low-emission-zone-led-to-better-lung-size-function-among-london-children?utm_source=rss1.0mainlinkanon
alcinnz
boosted
could anyone who knows what an internet is validate my thinking around the threat model of the EFF sovereign keys debacle? i can see two ways an MITM might occur:
- directly modifying DNS resolution for a domain to reroute to your evil IP
- super evil and more complex stuff to reroute the correct IP address to your evil server, if you control the user's ISP or router or something
in both cases, you would serve from your evil server, and you would provide your evil certificate, which (i think) you could certainly construct to pass inspection. so eff's little database moves trust from the server itself to [mysterious EFF-controlled table]
like, i think it's a terribly executed idea, because you should be able to just retrieve the certificate from anywhere separately from visiting the site. but is that the right threat model?
Nelfaneor 🇪🇺 🇧🇪
boosted
Mythos and traditions are not only old stories, they are ways groups organise meaning, values and collective action. So if we want to build better social systems, we should consciously grow our own #mythos, stories, values and rituals. Shared culture gives people a sense of purpose and helps bind a movement together. #OMN #commons #openweb
LORD OF THE PIGEONS
boosted
hear me out, an open top double-decker bus with a robotic arm wielding a sword.
@FritzAdalis Can you sing me the tune for "Days of Our Lives" then?
@catsalad
No way I'm going back to prison for that.
Believe it or not, I've been doing that *while* writing that far too long thread about the music I was listening to as I did it.
Today has been a great day for dicking around on nothing of significance.
(If you're curious, I've moved on from John Mayall and I'm now listening to Mick Taylor era Rolling Stones.)
fedicat
boosted
I'm pleased to announce that for a limited time, Mona Beta is available on the Apple TestFlight.
Installation requirement at this moment: a device running iOS 27 or iPadOS 27.
I look forward to your feature requests and bug reports.
https://testflight.apple.com/join/Uaug5UXc
