Skip to content

In North Korea, your phone secretly takes screenshots every 5 minutes for government surveillance

Technology
278 178 12
  • 162 Stimmen
    21 Beiträge
    0 Aufrufe
    sculptuspoe@lemmy.worldS
    When they are older I guess you can beg big brother and nanny state to hold their hand.
  • We Should Immediately Nationalize SpaceX and Starlink

    Technology technology
    467
    1
    1k Stimmen
    467 Beiträge
    0 Aufrufe
    F
    They weren't as typical with previous SpaceX models, Starship is easily their least successful project. Since SpaceX is launching large quantities of commercial satellites, big whoop, do you also celebrate when companies buy back stocks?
  • 122 Stimmen
    23 Beiträge
    4 Aufrufe
    A
    It's one of those things where periodically someone gets sanctioned and a few others get scared and stop doing it (or tone it down) for a while. I guess SHEIN are either overdoing it or they crossed the popularity threshold where companies become more scrutinized
  • There's no chance he signs it but I still hope he does

    Technology technology
    15
    1
    36 Stimmen
    15 Beiträge
    2 Aufrufe
    E
    And they've been doing it more blatantly and for longer than most tech companies.
  • 58 Stimmen
    5 Beiträge
    0 Aufrufe
    B
    Amazon is an absolute scumbag company, they don't pay taxes and they shit all over their workers, and fight unions tooth and nail. I have no idea how people can buy at Amazon, that stands for everything Trump and Musk stands for. Just fucking stop using Amazon if you value democracy. Pay an extra dollar and buy somewhere else.
  • 1 Stimmen
    5 Beiträge
    2 Aufrufe
    A
    Turns out dry sarcasm doesn't come across well in text form, if only there was a way to indicate it
  • 1 Stimmen
    8 Beiträge
    3 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.
  • [paper] Evidence of a social evaluation penalty for using AI

    Technology technology
    10
    28 Stimmen
    10 Beiträge
    9 Aufrufe
    vendetta9076@sh.itjust.worksV
    I'm specifically talking about toil when it comes to my job as a software developer. I already know I need an if statement and a for loop all wrapped in a try catch. Rather then spending a couple minutes coding that I have cursor do it for me instantly then fill out the actual code. Or, ive written something in python and it needs to be converted to JavaScript. I can ask Claude to convert it one to one for me and test it, which comes back with either no errors or a very simple error I need to fix. It takes a minute. Instead I could have taken 15min to rewrite it myself and maybe make more mistakes that take longer.