Limonene

joined 2 years ago
MODERATOR OF
[–] Limonene 2 points 10 hours ago (1 children)

I wonder if part of the magic is being hand-written. Would it not work as well if it was typed? Does it matter what color ink or what type of paper you use? Or am I totally on the wrong track, and this person just prefers writing over typing?

Either way, I find it incredibly tragic. Seems like their car was involuntarily towed, which is already a bad situation, and this is going to make things worse. At best, it will cause delays.

[–] Limonene 4 points 13 hours ago

I tried signing up just now. I was not able to create an account due to Recaptcha. If you are able to fill out Google Recaptchas, it looks pretty easy to make an account.

[–] Limonene 28 points 1 day ago (1 children)

Feudposting? What does that word mean?

[–] Limonene 37 points 1 day ago (1 children)

This doesn't look like they hijacked the apps to spy on users' location. It looks to me like these apps were already illegitimately collecting location data and passing it to Gravy Analytics where it was sold to the highest bidder. If I'm interpreting this article correctly, the hackers only hijacked Gravy Analytics so they could get the location data without paying. The location data was already in the malicious hands of Gravy Analytics.

But it seems rather nebulous. Many of the app developers' quoted responses in the article seem to be blatant lies, which the article disproves. Many of the app developers deny handing over location data, but do run ads. If those ads execute arbitrary javascript, then IP geolocation is easy. I don't know how cookies/tracking would work for in-app ads, though.

[–] Limonene 6 points 2 days ago* (last edited 2 days ago) (1 children)

The Logitech F310 (wired) and F710 (wireless) are ok. The F710 has a big 2xAA battery compartment which is uncomfortable for some.

Save your receipt, because Logitech's warranty is better than their construction. I destroyed my first F710's control pad on my second play of Crosscode, but they sent me a new one.

Do not use either one to operate a manned submarine.

[–] Limonene 75 points 3 days ago (2 children)

C when I cast a char * * to a char * * const: ok

C when I cast a char * * to a char * const *: ok

C when I cast a char * * to a char const * *: WTF

C when I cast a char * * to a char const * const *: ok

[–] Limonene 7 points 5 days ago* (last edited 5 days ago)

The key has to be stored somewhere to be able to use it. This is full disk encryption, so every single sector that is read or written (except some boot and kernel stuff, presumably) needs to go through that encryption key. You could maybe store it in a cryptographic coprocessor that uses SRAM for the key and key schedule, but those are very uncommon now that AES-NI is popular. And I don't think AES-NI has any special registers that could help here.

[–] Limonene 4 points 5 days ago (1 children)

I assume they think the Windows login password will keep them safe. I don't know. But many corporate computers (several I've been forced to use) do use Bitlocker without a password.

[–] Limonene 4 points 5 days ago (1 children)

Yes, assuming it's durably sealed and tamper-proof. If you have enough physical access, though, you can remove the DRAM and put it in another machine to scrape it. This adds time, but it has been done before. One experiment dipped the DRAM in liquid nitrogen for an hour, and found 0.13% decay.

[–] Limonene 1 points 5 days ago

Those are pretty nice specs. I would buy one right now if I didn't have a Deck already, and if it didn't come with a Windows tax.

[–] Limonene 22 points 5 days ago (9 children)

A "cold boot" attack. These have been around for a while.

The degredation is not a huge barrier. Spraying inverted canned air can cool the DRAM enough to preserve it for a little while, even long enough to switch it to a new motherboard. Whenever the motherboard is powered, the DRAM is being refreshed, so won't degrade. A few bits lost is no fatal flaw, since most cold boot attack algorithms search for long key schedules, not just the key.

Bitlocker is extra vulberable because it stores the key in the TPM and requires no password to boot. An attacker can extract the key even if the computer is off when they get it.

[–] Limonene 6 points 5 days ago

I love that these have borders around the buttons. I wish more interfaces would do that. It used to be standard.

 

cross-posted from: https://feddit.org/post/2595239

Major Russian banks have called on the central bank to take action to counter a yuan liquidity deficit, which has led to the rouble tumbling to its lowest level since April against the Chinese currency and driven yuan swap rates into triple digits.

The rouble fell by almost 5% against the yuan on Sept. 4 on the Moscow Stock Exchange (MOEX) after the finance ministry's plans for forex interventions implied that the central bank's daily yuan sales would plunge in the coming month to the equivalent of $200 million.

The central bank had been selling $7.3 billion worth of yuan per day during the past month. The plunge coincided with oil giant Rosneft's 15 billion yuan bond placement, which also sapped liquidity from the market.

"We cannot lend in yuan because we have nothing to cover our foreign currency positions with," said Sberbank CEO German Gref, stressing that the central bank needed to participate more actively in the market. The yuan has become the most traded foreign currency on MOEX after Western sanctions halted exchange trade in dollars and euros, with many banks developing yuan-denominated products for their clients. Yuan liquidity is mainly provided by the central bank through daily sales and one-day yuan swaps, as well as through currency sales by exporting companies.

Chinese banks in Russia, meanwhile, are avoiding currency trading for fear of secondary Western sanctions.

 

All the communities on lemmy.lukeog.com are mirrors of Reddit boards. lemmy.lukeog.com does not accept posts from Lemmy users -- only its bot may post and comment, and its posts and comments are just mirrors of Reddit posts and comments.

This doesn't seem like a useful way to use Lemmy. It's more like just a mirror of Reddit, in which case archive.is or web.archive.org would be more useful, in my opinion.

Better not to waste bandwidth and resources on this, in my opinion.

 

2024 is the Year of Linux on the Desktop, at least for my boyfriend. He's running Windows 7 right now, so I'll be switching him to Ubuntu in a few days. Ubuntu was chosen because Proton is officially supported in Ubuntu.

 

Every time I visit that site it always says the same thing. I'm not on a VPN, I'm on a residential Internet connection, connecting directly from my own home.

 

This is a screenshot of https://twitter.com/ . As you can see, you can't even view the home page any more without signing in -- it instantly redirects to a page to sign in. It's the same for viewing tweets. It's been like this for a few days.

view more: next ›