Skip to content

Tough, Tiny, and Totally Repairable: Inside the Framework 12

Technology
43 32 0
  • Musk's X sues New York state over social media hate speech law

    Technology technology
    1
    1
    1 Stimmen
    1 Beiträge
    0 Aufrufe
    Niemand hat geantwortet
  • Texting myself the weather every day

    Technology technology
    4
    14 Stimmen
    4 Beiträge
    1 Aufrufe
    G
    Even being too lazy to open the weather app, there are so many better and free ways of receiving a message on your phone. This is profoundly stupid.
  • 82 Stimmen
    6 Beiträge
    2 Aufrufe
    merde@sh.itjust.worksM
    (common people, this is the fediverse) [image: 922f7388-85b1-463d-9cdd-286adbb6a27b.jpeg]
  • 57 Stimmen
    5 Beiträge
    2 Aufrufe
    avidamoeba@lemmy.caA
    [image: c1b6d049-afed-4094-a09b-5af6746c814f.gif]
  • Fake It Till You Make It? Builder.ai’s $1.5B AI Scam Exposed

    Technology technology
    14
    1
    70 Stimmen
    14 Beiträge
    9 Aufrufe
    W
    Religion and fiat are always at the top
  • 1 Stimmen
    8 Beiträge
    5 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.
  • The Enshitification of Youtube’s Full Album Playlists

    Technology technology
    3
    1
    108 Stimmen
    3 Beiträge
    5 Aufrufe
    dual_sport_dork@lemmy.worldD
    Especially when the poster does not disclose that it's AI. The perpetual Youtube rabbit hole occasionally lands on one of these for me when I leave it unsupervised, and usually you can tell from the "cover" art. But only if you're looking at it. Because if you just leave it going in the background eventually you start to realize, "Wow, this guy really tripped over the fine line between a groove and rut." Then you click on it and look: Curses! Foiled again. And golly gee, I'm sure glad Youtube took away the option to oughtright block channels. I'm sure that's a total coincidence. W/e. I'm a have-it-on-my-hard-drive kind of bird. Yt-dlp is your friend. Just use it to nab whatever it is you actually want and let your own media player decide how to shuffle and present it. This works great for big name commercial music as well, whereupon the record labels are inevitably dumb enough to post songs and albums in their entirety right there you Youtube. Who even needs piracy sites at that rate? Yoink!
  • 0 Stimmen
    9 Beiträge
    5 Aufrufe
    kolanaki@pawb.socialK
    I kinda don't want anyone other than a doctor determining it, tbh. Fuck the human bean counters just as much as the AI ones. Hopefully we can just start growing organs instead of having to even make such a grim decision and everyone can get new livers. Even if they don't need them.