We need an EU regulation to mandate that all internet-connected devices must have a mechanism to disable internet access entirely and remain functional indefinitely, at whatever capacity is technically possible.

Want to have an app to control your dumb gadget? That fucker can use bluetooth, there is no legitimate reason to require an account on the vendor's website, which they can block at any time, harvest data from at any time, get hacked, and also make your lightbulbs unable to turn off if us-east-1 is down.

I want an apology from all the mansplainers that mocked my belief that privatizing NASA and relying this heavily on SpaceX would undermine the national security policy of the United States.

https://t.co/WoMI4XEPhE

did you know that 100 years ago there were *electromechanical* radio transmitters?

these things are so crazy, you just have to read this

(photo from https://en.wikipedia.org/wiki/Grimeton_Radio_Station#/media/File:Alexanderson_Alternator.jpg)

Alphabet, Amazon, Apple, ByteDance, Meta, Microsoft

These are the first 6 companies designated as ‘gatekeepers' under the Digital Markets Act.

They have 6 months to ensure their core platform services comply with our rules, including:

✔ Allowing users to unsubscribe and remove pre-installed services
✔ Allowing the download of alternative app stores

❌ Banning tracking outside of their services without consent
❌ Stopping ranking their products more favourably

➡ https://europa.eu/!NbfBbn

#DMA

Techbros: self driving cars are inevitable!

Also techbros: prove you are human by performing a task that computers can’t do, like identifying traffic lights.

#software #unexplained

I hope everyone is having a great weekend!

This is my periodic reminder to support your instance - nearly all instances are free and rely on donations to pay the bills. I very much appreciate donations to Infosec.exchange, and I know that some other instances may be struggling financially. If you are in a position to donate to your instance, especially for those people on other instances, please consider donating. You can usually find the link to donate to your instance on the instance’s about page (such as Infosec.exchange/about).

My thanks to everyone who does support their instance. And there is zero problems (for me at least) with those that can’t afford it. These are tough times for many, and I think it’s vitally important to provide a reliable and useful social network outlet that is available to everyone.

Thank you!

Exactly 20 years and 20 minutes ago, this happened.

A man in Saudi Arabia has been sentenced to death for his tweets, and surprise: Elon Musk is NOT funding his legal bill as promised because there's a good chance that the necessary data to identify this man came from the second largest shareholder of Twitter: the Saudi prince Alwaleed bin Talal.

Musk has been awfully silent about this as you can't really make your “freedom of speech!!” argument when you assist with killing a retired teacher for the regime critic posts they made on your platform, only possible because that regime owns a huge chunk of “your” platform.

A colleague spent his 6-month internship reversing Starlink's dish.
Here are the results and the tools he built. Nice work on nicely engineered hardware.

https://blog.quarkslab.com/starlink.html

#infosec at it's finest.

A renegade certificate is removed from Windows, then returns. Confusion ensues."

https://arstechnica.com/security/2023/08/a-renegade-certificate-is-removed-from-windows-then-it-returns-confusion-ensues/

I updated my WordPress plugin that warns your site's visitors if they don't have an ad-blocker installed.

https://wordpress.org/plugins/detect-missing-adblocker

EDIT: You can now fully customize the note, including links to plugins and browser extensions you want to suggest.

By default, a link to my blog with a list of popular options will be shown.

https://stefanbohacek.com/project/detect-missing-adblocker-wordpress-plugin/#resources

Happy to get more recommendations!

#wordpress #webdev #WebDevelopment #ads #AdBlocker #OpenWeb #IndieWeb

Full text search has been merged in #Mastodon `main` branch, and will be in the next (and final?) 4.2.0 beta 🎉

It is opt-in, so it will take some time to be filled with people content as they enable their profile to be indexed, but this was one of the most wanted Mastodon features for some time.

We plan to deploy it to mastodon.social and mastodon.online in the coming days to have a bit more feedback on it and see how it behaves in the wild.

This is wild…

#Java: Possible #RCEs in X.509 #certificate validation [CVE-2018-2633][CVE-2017-10116]

https://mbechler.github.io/2018/01/20/Java-CVE-2018-2633/

Right now if you search for "country in Africa that starts with the letter K":

- DuckDuckGo will link to an alphabetical list of countries in Africa which includes Kenya.

- Google, as the first hit, links to a ChatGPT transcript where it claims that there are none, and summarizes to say the same.

This is because ChatGPT at some point ingested this popular joke:

"There are no countries in Africa that start with K."
"What about Kenya?"
"Kenya suck deez nuts?"

Google Search is over.

message to all reverse engineers and hackers of fedi: when youre figuring out some really obscure thing and you finally crack it PLEASE document it somewhere on the web. maybe youre the first to ever walk this path, maybe youre the first person to care. but i promise you are not the last, and there will be a day when some lone hacker follows the path you took years or decades ago and they will find what you wrote and they will be eternally grateful and wont forget it ever. and thats so beautiful

Now the Washington lawyers want to destroy digital collections of scratchy 78rpm records, 70-120 year old, built by dedicated preservationists online since 2006.

Who benefits?

https://www.reuters.com/legal/music-labels-sue-internet-archive-over-digitized-record-collection-2023-08-12/