Skip to content

We Should Immediately Nationalize SpaceX and Starlink

Technology
438 189 0
  • The Arc Browser Is Dead

    Technology technology
    48
    145 Stimmen
    48 Beiträge
    0 Aufrufe
    ulrich@feddit.orgU
    LOL no. 96% is not irrelevant. 4% is irrelevant.
  • Tech Company Recruiters Sidestep Trump’s Immigration Crackdown

    Technology technology
    3
    1
    39 Stimmen
    3 Beiträge
    0 Aufrufe
    G
    "Hey ChatGPT, pretend to be an immigration attorney named Soo Park and answer these questions as if you're a criminal dipshit."
  • uBlockOrigin is porting uBOL to iOS and macOS

    Technology technology
    30
    324 Stimmen
    30 Beiträge
    4 Aufrufe
    C
    Will never happen unfortunately
  • 50 Stimmen
    27 Beiträge
    0 Aufrufe
    S
    Brother I live in western Europe and of the 6 supermarkets in my smallish city, 4 offer the handscanner. It's incredibly common here, and very convenient.
  • 154 Stimmen
    137 Beiträge
    4 Aufrufe
    brewchin@lemmy.worldB
    If you're after text, there are a number of options. If you're after group voice, there are a number of options. You could mix and match both, but "where everyone else is" will also likely be a factor in that kind of decision. If you want both together, then there's probably just Element (Matrix + voice)? Not sure of other options that aren't centralised, where you're the product, or otherwise at obvious risk of enshittifying. (And Element has the smell of the latter to me, but that's another topic). I've prepared for Discord's inevitable "final straw" moment by setting up a Matrix room and maintaining a self-hosted Mumble server in Docker for my gaming buddies. It's worked when Discord has been down, so I know it works. Yet to convince them to test Element...
  • 1 Stimmen
    8 Beiträge
    3 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.
  • Moon missions: How to avoid a puncture on the Moon

    Technology technology
    1
    1
    14 Stimmen
    1 Beiträge
    2 Aufrufe
    Niemand hat geantwortet
  • Indian Government orders censoring of accounts on X

    Technology technology
    12
    149 Stimmen
    12 Beiträge
    2 Aufrufe
    M
    Why? Because you can’t sell them?