The "Bluetooth Headphone Jacking" talk at #39c3 was awesome, too. They reversed a popular SOC that powers Bluetooth earbuds and headphones.

They found that (even without being paired to the headphone), they could dump flash and RAM from the device. Then they dumped a bunch of info from the device - e.g. the #Bluetooth address and "master" encryption keys used for the communication with paired devices (e.g. a #phone).

Then they impersonated the headphone from their laptop and connected to the phone (pretending to be the headphone).
The headphone (or the laptop impersonating the phone) has permissions to do some things on the phone, e.g. accept calls, increase/decrease volume, etc.

Then they started recovering access a #WhatsApp account via some account recovery mechanisms. That required some one-time security key which would normally be delivered via SMS, but that could be delivered via phone call as a fallback option, too. Since the phone thought it was connected to the Bluetooth headphone, phone call audio would go to the laptop via Bluetooth.

As the cherry on top, they escalated into the victim's #Amazon account.

Scary shit. #YouCannotBeParanoidEnough #security

The "Bluetooth Headphone Jacking" talk at #39c3 was awesome, too. They reversed a popular SOC that powers Bluetooth earbuds and headphones.

They found that (even without being paired to the headphone), they could dump flash and RAM from the device. Then they dumped a bunch of info from the device - e.g. the #Bluetooth address and "master" encryption keys used for the communication with paired devices (e.g. a #phone).

Then they impersonated the headphone from their laptop and connected to the phone (pretending to be the headphone).
The headphone (or the laptop impersonating the phone) has permissions to do some things on the phone, e.g. accept calls, increase/decrease volume, etc.

Then they started recovering access a #WhatsApp account via some account recovery mechanisms. That required some one-time security key which would normally be delivered via SMS, but that could be delivered via phone call as a fallback option, too. Since the phone thought it was connected to the Bluetooth headphone, phone call audio would go to the laptop via Bluetooth.

As the cherry on top, they escalated into the victim's #Amazon account.

Scary shit. #YouCannotBeParanoidEnough #security

@pallenberg
Ich haabe schon mehrrere #DIT #DUT hinter mir, schon vor ein paar Jahren habe ich nichts mehr bei #Amazon bestellt und bin auch immer fündig geworden, wie zb diese mit Alt Deutschen Namen. Dann auch #Suchmaschinen ändern. Von #X rüber auf #Mastodon. Dann meiner Mutter #Signal bei bringen. Mein Rechner auf #Linux umzuinstalieren, was eigendlich gas einfach war. Und mein nächstes DUT ist mein Handy.
Gerade auch den beitrag bei #C39c3 gesehen von @marcuwekling , einfach Klasse.

This shopping season basically clenched it - Amazon sucks.

It used to be useful for finding certain things. Then it seemed to abuse vendors more and more, so I began to use it more as a search engine to discover vendors which I would then contact directly on their own websites, and purchase there. At this point, the "Temu effect" has kicked in on Amazon and most of the vendors are Chinese knock-offs and rip-offs of other products - and the search results are limited to the same crap over and over. Enshittification indeed.

At this point I only keep Amazon because a few vendors whose consumable products I like are *only* available via Amazon - in fact the vendor website links to their Amazon store instead of their own warehouse - so I still make use of it. But that's it. Ugh as in ugly.

#consumerism #amazon #enshittification

This shopping season basically clenched it - Amazon sucks.

It used to be useful for finding certain things. Then it seemed to abuse vendors more and more, so I began to use it more as a search engine to discover vendors which I would then contact directly on their own websites, and purchase there. At this point, the "Temu effect" has kicked in on Amazon and most of the vendors are Chinese knock-offs and rip-offs of other products - and the search results are limited to the same crap over and over. Enshittification indeed.

At this point I only keep Amazon because a few vendors whose consumable products I like are *only* available via Amazon - in fact the vendor website links to their Amazon store instead of their own warehouse - so I still make use of it. But that's it. Ugh as in ugly.

#consumerism #amazon #enshittification

Nehmt euch für das neue Jahr vor #amazon #prime zu kündigen. #Disney auch. Vernetzt euch, helft euch gegenseitig #linux aufzusetzen und #microsoft aus den Wohnungen zu verbannen. Beschafft euch #US Medien/Filme aus alternativen Quellen und tauscht. Trinkt keine Zuckerpampe von Coca Cola. Nutzt #KI nur da wo ihr sie Tracker- und Kostenfrei nutzen könnt und macht das zum Verlustmodell. Zerstört den #US Aussenhandel wo ihr könnt, das ist für alle positiv, auch für #US Bürger.

Nehmt euch für das neue Jahr vor #amazon #prime zu kündigen. #Disney auch. Vernetzt euch, helft euch gegenseitig #linux aufzusetzen und #microsoft aus den Wohnungen zu verbannen. Beschafft euch #US Medien/Filme aus alternativen Quellen und tauscht. Trinkt keine Zuckerpampe von Coca Cola. Nutzt #KI nur da wo ihr sie Tracker- und Kostenfrei nutzen könnt und macht das zum Verlustmodell. Zerstört den #US Aussenhandel wo ihr könnt, das ist für alle positiv, auch für #US Bürger.

@Em0nM4stodon

😊This reminded me of this old meme I made💙. Just replace #repuglicans with #billionaires

Our only chance is to #Resist & #fight
The best way to fight is to take what they care about most -💲

That means we DON'T give our $ to fascists & appeasers #boycott #amazon #bezos #skuM #meta #zuckerberg & the rest

Da war #AWS schon wieder down in der letzten Nacht und mit ihr verabschiedeten sich u.a. #Fortnite und #RocketLeague

Nur #Amazon erklaerte, dass es bei denen ueberhaupt keine Probleme gab!

Ob es denen inzwischen peinlich ist, dass sie in diesem Jahr bereits mehrfach die Graetsche gemacht haben? Ich habe da vor ein paar Wochen mal was aufgeschrieben 👇

https://www.metacheles.de/wenn-die-cloud-hustet-kriegt-das-internet-fieber/

If you're an #Author, who, like my wife, is searching for an #Amazon alternative to #SelfPublish your work, here's what she's found:

https://draft2digital.com/
Is a self-publishing platform that let's you choose which marketplaces you sell to. Soon this will include bookshop.org, which is my personal favorite.

https://ficstack.com/
Organizes #SubStack posts to aid in author discovery. I think you can set up monetization options on your associated substack.

#Draft2Digitial
#Bookstodon

Regarding #CBS suppression of the CECOT story on 60 Minutes, I've determined I'm done with future subscriptions to any of the US corporate media streamers. There are other ways to get media. They can well and truly go fuck themselves.

Also, somehow we all survived without #Amazon, I deleted that account months ago. Bezos can also fuck himself.

Free yourself from these #fascist fuckers. All of them. #Boycott companies that do #fascism.

#Google #Microsoft #Apple #Meta #Democracy #Resist

Don’t be fooled by #Amazon’s claims that #Ring video doorbells give you freedom and security: https://u.fsf.org/49w #Bulletin #FSF

https://www.democracynow.org/2025/11/25/chico_mendes

#DemocracyNow

#ChicoMendes #Amazon

Don’t be fooled by #Amazon’s claims that #Ring video doorbells give you freedom and security: https://u.fsf.org/49w #Bulletin #FSF

Amazon will let you drop DRM on their e-books, and just download epubs!? According to @alternativeto. I trust them, but I just can't wrap my head around this. How, why, what!?

https://alternativeto.net/news/2025/12/amazon-to-offer-drm-free-epub-and-pdf-downloads-for-kindle-titles-starting-in-january-2026/

Have you said anything about this yet, @pluralistic?

#amazon #kindle #drm