Friday, September 30, 2022

What could possibly go wrong?

from here and here (image source)

This gentleman is demonstrating something far more elaborate than footguns, but it is essentially the same premise, and also the same premise as disabling your antivirus when installing new software. 

If you want it to be easy malware authors to trick users into lowering their defenses, just normalize the practice of disabling the antivirus when installing software. Once it becomes normal the malware authors can ask users to do the same thing.

At least it's well labeled

found on Izismile

If you see a bright red plane in the sky with the word "SURVEILLANCE" on it, it would probably be a good time to stop doing shady shit.

Thursday, September 29, 2022

The cipher can't be trusted right now

from here and here

It seems that life is imitating art a weird sort of way. Matrix, an ecosystem of open source chat and collaboration clients, has vulnerabilities that subvert the protection of it's end to end encryption, but unlike the movie there's a fix that allows you to trust the cipher again if you hurry up and apply the patch.

Build Your Own Porch Pirate Package Protector


Watch on YouTube

Now you too can defeat porch pirates with magic. Not Harry Potter magic, mind you, more like David Copperfield. Practical stage magic.

Wednesday, September 28, 2022

The future will be out of date

from here and here

The Internet of Things is going to be unmanageable if we keep building it out of general purpose computers.  If we must have smart devices, we should use special purpose computers with fixed, first order functionality. Not only would updates not be necessary, they wouldn't be possible.

One of the main reasons we use general purpose computers is because their generality allows us to use the same computer for pretty much any application, so we can benefit from an economy of scale by mass producing lots of them knowing we'll find a use for them. I think it might be possible to get similar benefits from special purpose computers used to build a set of fundamental controls - there are only a relatively small number of ways we control the devices around us (ex. toggle switches, dials, etc) and since each of those fundamental control types would be common across a number of different devices, a smaller economy of scale could still be achieved with special purpose computers that drive such controls but with the benefit of lower maintenance than can be achieved with general purpose computers.

You'd never be able to build a toaster that sings to you that way, but why would you want to?

Too bad it only works on the young

found on eBaum's World

Maybe I'm wrong, but I'm pretty sure the older generation knows how to drive stick.  

Tuesday, September 27, 2022

Taking your privacy seriously

from here and here

That's not the problem they want to solve. It's cheaper and easier to change the company's appearance than it is to change the company's business model.

I'm An Advanced Persistent Threat shirt


Product Page

I can't help but think that this is not something an APT would actually wear (to paraphrase Ser Davos Seaworth, if you're a famous APT you're not doing it right), but just as there are shirts that say hacker on them that get worn by people who aren't hackers, so too with the advanced persistent threats.

Monday, September 26, 2022

Heavy duty trucks call for heavy duty locks

from here and here (image source)

This is the first time I've seen such a clean installation of a Master lock on a vehicle. It must be brand new. It's also the first time I've seen a hidden shackle lock used. Normally it's just an ordinary padlock (or in some cases just a sliding lock). Whoever opted for this really went all out.

Too bad the vehicle still has glass windows.

Protecting your privacy helps protect everyone's privacy

found on Reddit

It seems like if the runner had followed social norms and kept that behaviour confined to private spaces, then that surveillance wouldn't have been added. But not only can you harm everyone's privacy by squandering your own, you can also help protect everyone's privacy by fighting for your own. Every encroachment on privacy that isn't challenged is a further erosion of everyone's privacy.