Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Jabor posted:

pos software is aptly named

pos my terminal

Adbot
ADBOT LOVES YOU

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

i can't print

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

here's poettering's explanation of why they didn't just use getrandom:

poettering posted:

BTW, the reason we use RDRAND in some cases instead of getrandom() [which we use in many others] is that we need to generate uuids early on (since every service we starts gets one passed, the "invocation ID", and for other stuff too), but getrandom complains in dmesg or blocks if we call it before the pool is initialized. Since systemd is one of the earliest programs that runs and thus very likely comes into contact with an uninitialized pool we attempt to avoid that by using RDRAND when generating uuids, since it should be good enough for that, as the usecase needs a "mid-quality" rng source: not crypt quality and not totally guessable either.

so is this a case of them being lazy and not doing something to get the pool initialized before calling getrandom?

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

pseudorandom name posted:

ah, yes, the laziness where when the CPU says that it's high-quality random number generator works, you use the CPU's high-quality random number generator for non-cryptographic purposes

i was more replying to the tweet that lain embedded that implicitly criticized systemd for not just calling getrandom

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Squinky v2.0 posted:

there’s one private religious school we deal with (very on the religious side) where it’s an absolute scourge and they are completely powerless to stop the kids from getting into the faculty accounts

the kid(s) doing it even figured out that just editing grades is too obvious and gets caught, and they figured out how to set up custom grading keys per-student and were messing with assignment weighting in grade books so the grade rounds up instead of down without changing the underlying assignment grades. like half the internal folks here don’t even know how to do that stuff without someone holding their hand

it kinda owns, usually high school kids are dumb and do things like delete all their attendance records so they go from 20 absences to 0 overnight

lol that absolutely owns, and i say that as someone who used to be a school district computer janitor


the biggest lol i remember seeing happening back when i was a high school student was when kids figured out using "net send *" to send pop-up messages to every computer on the network, completely freaking out the staff. oh wait did i say "figured out", what i meant was "learned how to do that from the "MCSE" class with its segmented-off LAN, and then went and did it from a school library computer"

man those computer courses were wild. they got some CJ to come in and teach the classes, so he had a way more laissez-faire attitude about what kids did in his class than the average teacher. kids would prank each other with netbus constantly, we had frequent LAN games happening. i somehow got on his good side such that he offered to hire me on one summer doing grunt work for the district IT department, and that's how i got my start into being a professional computer janitor

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

BangersInMyKnickers posted:

they might have stopped when they got caught red handed on this, but some of them completely ignored this so they could still connect to any available network and send usage data back

okay but won't the data be associated with your neighbor in that case?

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Bulgakov posted:

that anroid behavior is really something awful

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl
do you guys think there's gonna reach a point where organizations decide it's more convenient/feasible to simply roll back automation/networking/computerization than to try to deal with computer security, and if so how far away do you think that day is

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Powerful Two-Hander posted:

some guy in America keeps signing up to job sites with my email address so he probably wonders why he's never receiving anything. I also receive bank notifications on my other account with the same name, presumably from the same guy.

Once I got an invite to a family bbq and I think I did reply all to that and tell them to get their poo poo together and tell the guy to use the right address. or maybe I goatse'd the entire family idk it was a long time ago

lol one time someone accidentally sent me an invite for a wedding on the other side of the country, i wrote back and said "hey wrong address buddy, i'm all the way over here in oregon lol" and they laughed and invited me to attend too

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

KOTEX GOD OF BLOOD posted:

this poo poo is so loving unbelievably arrogant and irresponsible. tim should call the zoom ceo in and give him the travis kalanick treatment of “hey quick reminder, we could delete your business tomorrow if we wanted to lol”

I'm not sure Zoom is as reliant on the Mac market as Uber is on the iPhone market

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Ur Getting Fatter posted:

Lol @ equifax's settlement page being a random non-equifax site that asks for your last name and the 6 (!) last digits of your SSN

https://eligibility.equifaxbreachsettlement.com/en/eligibility

i don't want some piddlywinks settlement. i want equifax forcibly dissolved and its executives imprisoned.

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl
pffft, more like charles h. dooky

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

:supaburn:

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Schadenboner posted:

Because technical fixes to behavioral problems* are well-known for their effectiveness, ammirite?

*: :airquote:

framing a desire to not see a child OD and/or get raped as parental tyranny is strikingly lovely even coming from you

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Schadenboner posted:

This is a behavioral problem not a technical one. Technical solutions will only ever inspire false confidence and, because they do not address (much less resolve) the underlying behavioral issue, will never improve the situations.

Also: go gently caress yourself.

i'm responding to your asterisk and scare-quotes emoji, which implied that children potentially overdosing on drugs and/or getting raped is not a problem.


that said, if you want to really get into your post, while i wouldn't consider digital surveillance to be a complete solution to a behavior problem, i also wouldn't discount its use as an immediate tool for trying to protect a child from bad actors while also working to address the behavioral issue.

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Lain Iwakura posted:

your butt plug is a piece of poo poo

that's some pretty severe constipation

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl
not exactly a "hacker movie" but maybe Colossus: The Forbin Project might be fitting?

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

mystes posted:

It's great that in 2019 things like discord have real 2FA but banks all use SMS or are maybe in the process of jury rigging 2FA in their lovely mobile apps.

There's probably a special circle of hell for companies like Bank of America that are members of the FIDO Alliance but still only support SMS in 2019.

wells fargo still won't accept a password longer than 14 characters


edit: and they disable paste functionality on the password change form so you cannot easily create a random password and copy/paste it in

Farmer Crack-Ass fucked around with this message at 00:11 on Sep 18, 2019

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Cocoa Crispies posted:

why do those need a not secure random number?

if you need a predictable sequence for the sake of repeatability, you get to manage your own rng state, this isn’t a gross imposition because you’re probably already doing this

making every program that already exists use a poo poo rng until they’re fixed is basically the worst way to do this

i think it's less about needing a specifically non-secure random number and more about being assured that a random number will be delivered regardless of whether it is secure or not, because if i'm understanding correctly there are scenarios in which the current secure random number generator may fail, timeout, or otherwise be unable to deliver a secure random number.

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl
the state governor. president can't pardon county/state crimes anyway

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Lain Iwakura posted:

it's tempting to register clownsterling.io

do it

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl
lol you all reminded me of the time when i used to CJ at a school district

we got a complaint that some teacher was able to print to the big copier in the library when it was supposed to be restricted only to certain people

i looked into it and saw that they weren't on it, and tested, and sure enough the teacher was able to print. why? idk, i'm just a junior-grade cj at the time, i reported my findings to one of the network guys and went on with reviving "dead" printers by turning the power switch on


later i asked one of the two network guys "oh hey were you able to figure out why they were able to print?"
"oh yeah. you're gonna love this. turns out everyone's been domain admin for some time now."
"lol what"


if i remember right it wasn't that everyone got added to domain admins, but that everyone got added to some printer-related AD group, and then that group somehow got added to domain admin. or something like that. god it's been so long now.

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

lmbo


so, i've never used an s3 bucket. if it's unprotected, is it possible to upload as well as download?

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl
does amazon trip and ban you if you guess the wrong filename too many times, or can you write a script to just bang out numerous possible filenames

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Rufus Ping posted:

They don't throttle at all, I did this a while ago and also indexed contents and permissions where possible

https://twitter.com/hilare_belloc/status/1018922843290161154?s=19

https://twitter.com/hilare_belloc/status/1027622205062955008?s=19

yeah this is exactly what i was wondering about

hilarious

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Sniep posted:

ooh that sounds fun. totally missed that

no what's really fun is that those pictures were apparently to NBSD's weirdly strict sense of propriety what a desk corner is to a funny-bone, and seeing so much "wrong" broke his rigid little brain so hard that he started accusing methanar of trading in child pornography

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl
guaranteed there's moles at Facebook too

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

CRIP EATIN BREAD posted:

ok so searching its basically patreon but focused on sad losers who want to get regular clips of cammers?

putting your real information on that site should be considered a secfuck

i think porn laws pretty much require websites like that to have documentation so they can prove they weren't knowingly hosting child pornography

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

ewiley posted:

this is the end result of corporate sponsored phishing simulations, a farce inside a joke wrapped in nonsense.

nah, they're good. i'd rather have people be paranoid and suspicious.

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl
i remember like six or seven years ago i tried futzing around with some ancient Wyse thin terminal box that was basically a VIA C3 mini-ITX board with a tiny CF card for storage, and decided to try throwing a super-minimal linux distro on it, only to find that the CPU was lacking key features needed by nearly every distro i tried

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl
nah this was like a 941gxl (based on what I've found online)

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Partycat posted:

For me in a SSO enabled org,

did you ever stop to think maybe the people you were hearing from weren't in ~*~SSO enabled orgs~*~?

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Media Bloodbath posted:

how would you do that though? manually unsolder the antenna?
there were some Samsung TVs that will try to log onto open WiFi's in the area on a regular basis if it can't connect to the web to send data.

A) how many open wifis do you have in range of your TV

B) you realize that it connecting to the open wifi means the data it sends is being associated to your neighbor's internet connection, right?

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl
i don't use my ~*smart tv*~ as my main system's monitor so i don't really think it's a security issue if someone manages to find out that a TV attached to a neighbor's open wi-fi (which, again, that data's going to be associated to the neighbor) has a few generic desktop icons on it and occasionally watches old episodes of the simpsons


like, sure, i'd rather that TVs not do that, but i don't see where it's worth worrying about.

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl
and again that's assuming there's an open wi-fi in range, which, last time i checked, there wasn't





now i'm wondering how you could gently caress with the TV vendor. what happens if you replay a shitload of those phone-home packets again and again.

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

cybersecurity firm, or digital pinkertons?

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

extremely interesting, thank you

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Methanar posted:

chinese owned CEO-literally-fart-on-female-intern video game company

wait what

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

Shame Boy posted:

speaking of zoom, i did a ~tele-health~ appointment with my doctor instead of going in for my usual prescription refill checkup since i'd rather not go to a doctor's office if i'm not sick when there's a global pandemic, and the way he did it was via a normal-rear end zoom meeting, which i'm pretty sure isn't hipaa-compliant but hey

at least he set a goddamn password on the meeting so we didn't get interrupted by naked germans or whatever

from what i've heard about doctors, gigantic lols at expecting any kind of technical competence from them


also i think zoom started making passwords enabled by default at some point, so i wouldn't even give him points on that

Adbot
ADBOT LOVES YOU

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

flakeloaf posted:

chicken chicken, chicken chicken chicken chicken? chicken chicken

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply