Skip to content
linux-nerds.org

linux-nerds.org
  1. Übersicht
  2. Technology
  3. Dems Demand Answers from Palantir About Plans to Build IRS “Mega-Database” of American Citizens

Dems Demand Answers from Palantir About Plans to Build IRS “Mega-Database” of American Citizens

Technology
27 26 0
Anmelden zum Antworten

  • P

    WhatsApp is getting ads using personal data from Instagram and Facebook

    Technology technology
    2
    1
    50 Stimmen
    2 Beiträge
    0 Aufrufe
    baronvonj@lemmy.worldB
    So glad I never got on WhatsApp
  • P

    How Do I Prepare My Phone for a Protest?

    Technology technology
    139
    1
    504 Stimmen
    139 Beiträge
    2 Aufrufe
    D
    So first, even here we see foundation money and big tech, not government. Facebook, Google, etc mostly love net neutrality, tolerate encryption, anf see utility in anonymous internet access, mostly because these things don't interfere with their core advertising businesses, and generally have helped them. I didn't see Comcast and others in the ISP oligopoly on that list, probably because they would not benefit from net neutrality, encryption, and privacy for obvious reasons. The EFF advocates for particular civil libertarian policies, always has. That does attract certain donors, but not others. They have plenty of diverse and grassroots support too. One day they may have to choose between their corpo donors and their values, but I have yet to see them abandon principles.
  • S

    YouTube Loosens Video Content Moderation Rules | The world’s largest video platform has told content moderators to favor “freedom of expression” over the risk of harm in deciding what to take down.

    Technology technology
    1
    1
    1 Stimmen
    1 Beiträge
    0 Aufrufe
    Niemand hat geantwortet
  • S

    Bill Atkinson, Who Made Computers Easier to Use, Is Dead at 74

    Technology technology
    1
    1
    0 Stimmen
    1 Beiträge
    2 Aufrufe
    Niemand hat geantwortet
  • P

    Why Decentralized Social Media Matters

    Technology technology
    45
    1
    388 Stimmen
    45 Beiträge
    7 Aufrufe
    fizz@lemmy.nzF
    Yeah we're kinda doing well. Retaining 50k mau from the initial user burst is really good and Lemmy was technologically really bad at the time. Its a lot more developed today. I think next time reddit fucks uo we spike to over 100k users and steadily grow from there.
  • Q

    New Cars Don't All Come With Dipsticks Anymore, Here's Why

    Technology technology
    22
    1
    2 Stimmen
    22 Beiträge
    5 Aufrufe
    L
    The U660F transmission in my wife's 2015 Highlander doesn't have a dipstick. Luckily that transmission is solid and easy to service anyway, you just need a skinny funnel to fill it.
  • P

    Unlock Your Computer With a Molecular Password

    Technology technology
    9
    1
    32 Stimmen
    9 Beiträge
    4 Aufrufe
    C
    One downside of the method is that each molecular message can only be read once, since decoding the polymers involves degrading them. New DRM just dropped. Imagine pouring rented movies into your TV like laundry detergent.
  • deltawingdragon@sh.itjust.worksD

    Chrome using Gemini Nano for ‘Enhanced Protection’ against scams

    Technology technology
    8
    1
    1 Stimmen
    8 Beiträge
    5 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.