News for hackers. Stuff that matters.

escalt

this is left as an exercise for the reader
Re:Most FOSDEM 2023 videos have been uploaded on Saturday February 11, 2023 @10:50AM (#34753364)
The Matrix talk recording is broken. The referenced video files have a size of 0 bytes
Re:Towards a Reproducible F-Droid on Friday January 20, 2023 @04:48PM (#34460439)
It's just another client that (by default) uses the official F-Droid repo
The "essence of linear algebra" series by 3blue1brown on YouTube does a really good job at intuitively explaining and visualizing matrix multiplication and other linear algebra topics.
That might be true in some places, but in Europe for example there really isn't that much room left. And moving large quantities of electricity from a desert to a place where people actually use it is also a challenge
It is said that the infrastructure required to sustain suburbs costs more money than these suburbs bring in. In the US a city gets federal money to build new suburbs, but when it comes to renewing them after a few decades, the city has to pay on its own and it often has not enough money to do it.

I am by no means an expert on this topic and just poorly summarized the contents of this video: https://youtube.com/watch?v=7IsMeKl-Sv0

Re:Dora: A open-source Rust DHCP Server on Wednesday December 07, 2022 @06:27PM (#33901870)
On IPv6 this would be a solved issue. With SLAAC the router just broadcasts Router Advertisements and all the machines just automatically configure their addresses, which are fully predictable based on their MAC address (if you have privacy extensions disabled). The router has no state to keep and as such the network can be scaled up "infinitely". Just pick a random /64 prefix and set up radvd (or systemd-networkd) to send the router advertisements.
People are saying this because so far it has just been much warmer than usual at this time of year, and snow in November wouldn't be the most unusual thing, and most people just assume snow=winter.

Some stats of my weather station in South Germany from this year and last year. It is much warmer this year, and even last year was pretty warm

Oct 2021: Avg: 8.5°C Min: 0.5°C Max: 22.0°C

Oct 2022: Avg: 12.7°C Min: 4.9°C Max: 21.5°C

Nov (1st to end of 11th) 2021: Avg: 4.1°C Min: -1.9°C Max: 9.4°C

Nov (1st to end of 11th) 2022: Avg: 7.8°C Min: 0.9°C Max: 15.8°C

I have no clue about weather forecasting and I can't exclude a drastic change in the coming months, but right now it just doesn't look like that at all

Re:what.cd: A Cypherpunk's Manifesto on Friday November 11, 2022 @10:35AM (#33562079)
You either do an interview or a member sends you an invite. It's a private tracker just like what.cd was. It's less elitist than most other trackers which are invite only and sometimes lock registrations completely. Unfortunately they have to keep a low profile and pick their members to avoid copyright trolls or being shut down entirely. The test isn't very difficult and there is a public page explaining everything one needs to know. It's more about showing some effort and making sure that you know how to act accordingly on a private tracker
Well, clearly they sent it to you, so they're distributing the images. The E-Mail headers, especially if they contain a dkim signature, are likely sufficient proof for that. If not, the provider they used might be able to back your claims up. If you were using some E-Mail provider instead, those images would still land on your client devices, and the situation would be almost the same. And of course let a lawyer do the talking
Re:An Introduction to PipeWire on Sunday August 28, 2022 @04:08PM (#32631611)
People still using PulseAudio can use pagraphcontrol (https://github.com/futpib/pagraphcontrol)
It's also a perfect way to enter the hacking scene
Yeah in rural areas it's hard to justify building public transport. Villages can still have grocery stores though. But we were talking about cities here
Shopping would optimally happen by foot or by bike. Somewhat impossible with US zoning laws, but in a decent mixed use neighborhood a grocery store would be a <5 minutes walk from home, with actual sidewalks and no highways in between.

And overcrowded buses happen in underfunded bus systems with not enough capacity or on peak times. Consider increasing the frequency or upgrading to a tram line if your buses are always full

Inner city driving should be restricted to service vehicles only. The inner city should be dense enough that shopping is easily done by foot or by bike, and things further away are covered by a tram or bus line within walking distance
Every baby right now is a "covid baby", so of course they're easy to spot
Re:Ask HN: Is Public WiFi Dangerous? on Friday March 18, 2022 @02:23PM (#30725713)
Exactly. A commonly missed attack vector is just intercepting plaintext http and blocking https, so the browser thinks the site doesn't offer https and will just continue in plaintext. The same criticism applies to smtp using starttls, an attacker can suppress the starttls command and the default is to just continue in plaintext.

This is why an https only mode is important. In Firefox it can be enabled somewhere in the settings.

uBlock Origin can block network requests too. These rules should block requests to trending hashtags and recommended user accounts:

  ||twitter.com/i/api/2/guide.json$xhr,1p
  ||twitter.com/i/api/1.1/users/recommendations.json$xhr,1p
Alternatively you can use nitter.net to browse Twitter
Re:The Rise and Fall of 'Social Bot' Research (2021) on Sunday January 23, 2022 @07:28PM (#30052180)
The other author also did a talk (in German) on social bots at the end of 2017

https://media.ccc.de/v/34c3-9268-social_bots_fake_news_und_f...

https://youtu.be/6jNWl5d_DOk

Re:IP Addressing in 2021 on Saturday January 22, 2022 @07:16AM (#30036011)
It allows for tracking users since the second half of your address is always constant. It's a fixed problem though since basically all consumer devices these days use privacy extension addresses, which don't expose your MAC address and periodically change to a new random IP address
Re:IP Addressing in 2021 on Saturday January 22, 2022 @07:09AM (#30035968)
My private Wireguard network is IPv6 only. SSH on all my remote servers listens on a random statically configured IPv6 address dedicated only for ssh. Since every server has an entire /64 prefix, a random internet scanner is never going to find it (Of course I still secure ssh properly since a man in the middle still sees what IPs I'm connecting to). Some cloud server providers started offering IPv6 only servers at a cheaper price to save money on unnecessary IPv4 addresses, so there's also a financial incentive to move non-public things to IPv6 only.
Re:See how DMARC, SPF, and DKIM work interactively on Monday January 10, 2022 @08:31AM (#29874474)
Then E-Mails which fail the SPF and DKIM checks should be rejected by the receiving server. Many mailservers still let them through though because they just don't check dmarc or put them in a spam folder or quarantine.
Re:See how DMARC, SPF, and DKIM work interactively on Monday January 10, 2022 @08:22AM (#29874365)
This is what DMARC should solve, but it appears your mailserver lets these messages through without checking
It's actually a pretty small prefix in the IPv6 world. The recommendation for an IPv6 network is to be at least a /64, because features like SLAAC, which mostly replaces DHCP, need a /64 prefix to work properly. If you have multiple networks, it's standard to use a separate /64 prefix per network. My ISP for instance gives every home user a /56 prefix, some ISPs even give out /48 prefixes.
Re:How to programmatically find out if computer is on on Sunday November 21, 2021 @03:57AM (#29295043)
You can embed a minimal ssh server (like dropbear or tinyssh) in your initramfs to remotely enter the passphrase. There are some guides for that online
Re:Did AS8003 just disappear? on Saturday September 11, 2021 @07:06AM (#28490949)
In a perfect world where everyone used IPv6 ULAs this would be a solved problem. I wonder if we will ever get there
Vacuums from Dreame and Roborock can be rooted with some effort and be used completely offline with Valetudo. It's getting harder and harder though.
Re:Conduit Beta – Matrix chat server on Saturday September 04, 2021 @04:46AM (#28413303)
This is already the case. There is an actual matrix server reachable @gitter.im and you can join gitter rooms through it
Re:From stolen laptop to inside the company network on Wednesday July 28, 2021 @03:56PM (#27988939)
The way I understand full disk encryption (with LUKS at least) is that the device generates a random key which does the data encryption/decryption and the user entered password is used exclusively to encrypt that key. This allows encrypting the key with thousands of iterations (the number is picked in a way that it takes a few seconds on the currently used CPU). That way you can use a very slow encryption algorithm (meaning it's very slow to brute force) to get the actual key, which can then be used for fast encryption of the actual data. This approach also allows changing passwords or using multiple passwords without rewriting the entire drive, since just the key has to be re-encrypted
Re:Self hosting is important on Saturday July 24, 2021 @11:22AM (#27941690)
This sounds like an awesome idea, and for many communities it might be, but having to trust someone you know personally for things like these can also be a source of drama when your relationship becomes bad for unrelated reasons

Older »