Skip to content

The Department of Defense Efforts to Buy and Maintain IT Systems Are Billions Over Budget and Delayed

Technology
13 11 38
  • FairPhone AMA

    Technology technology
    5
    14 Stimmen
    5 Beiträge
    28 Aufrufe
    alcan@lemmy.worldA
    Ask Me Anything
  • Matrix.org is Introducing Premium Accounts

    Technology technology
    1
    1
    0 Stimmen
    1 Beiträge
    11 Aufrufe
    Niemand hat geantwortet
  • 461 Stimmen
    89 Beiträge
    246 Aufrufe
    M
    It dissolves into salt water. Except it doesn't dissolve, this is not the term they should be using, you can't just dry out the water and get the plastic back. It breaks down into other things. I'm pretty sure an ocean full of dissolved plastic would be a way worse ecological disaster than the current microplastic problem... I've seen like 3-4 articles about this now and they all use the term dissolve and it's pissing me off.
  • 85 Stimmen
    12 Beiträge
    47 Aufrufe
    cupcakezealot@lemmy.blahaj.zoneC
    i like how ask photos is not just a dumb idea but it's also a dumb name
  • Microsoft wants Windows Update to handle all apps

    Technology technology
    45
    1
    61 Stimmen
    45 Beiträge
    153 Aufrufe
    N
    the package managers for linux that i know of are great because you can easily control everything they do
  • 1 Stimmen
    8 Beiträge
    34 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.
  • 109 Stimmen
    3 Beiträge
    20 Aufrufe
    M
    A private company is selling cheap tablets to inmates to let them communicate with their family. They have to use "digital stamps" to send messages, 35 cents a piece and come in packs of 5, 10 or 20. Each stamp covers up to 20,000 characters or one single image. They also sell songs, at $1.99 a piece, and some people have spent thousands over the years. That's also now just going away. Then you get to the part about the new company. Who already has a system in Tennessee where inmates have to pay 3-5 cents per minute of tablet usage. Be that watching a movie they've bought or just typing a message.
  • 552 Stimmen
    30 Beiträge
    104 Aufrufe
    swelter_spark@reddthat.comS
    Yeah, I don't prefer that. But with some things I feel like it's barely a downside, and I'd put Boxes into that category. It's useful and well-designed enough in terms of functionality that I'm willing to overlook the Gnominess.