Skip to content

We Should Immediately Nationalize SpaceX and Starlink

Technology
496 196 1.9k
  • video gen error

    Technology technology
    8
    2
    3 Stimmen
    8 Beiträge
    45 Aufrufe
    H
    Sorry what? You mean post to technology@lemmy.world?
  • Microsoft’s new genAI model to power agents in Windows 11

    Technology technology
    12
    1
    31 Stimmen
    12 Beiträge
    66 Aufrufe
    ulrich@feddit.orgU
    which one would sell more I mean they would charge a lot of money for the stripped down one because it doesn't allow them to monetize it on the back end, and the vast majority would continue using the resource-slurping ad-riddled one.
  • AI search finds publishers starved of referral traffic

    Technology technology
    38
    1
    117 Stimmen
    38 Beiträge
    144 Aufrufe
    alk@sh.itjust.worksA
    They really do! It's nice to read something that's clearly hand crafted and high quality, especially the big news roundups that you do, as opposed to the usual SEO slop most news sites have. It's a treat every time a new one comes out.
  • 0 Stimmen
    1 Beiträge
    12 Aufrufe
    Niemand hat geantwortet
  • 782 Stimmen
    231 Beiträge
    840 Aufrufe
    D
    Haha I'm kidding, it's good that you share your solution here.
  • 1 Stimmen
    8 Beiträge
    40 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.
  • Mazda DMCA takedown of Open Source Home Assistant App

    Technology technology
    6
    108 Stimmen
    6 Beiträge
    40 Aufrufe
    S
    Soon this all will be much easier. From 12 of September we’re going into a new world of EU Data Act that forces all companies to allow third parties to communicate with iot devices. Which a car is. So soon Mazda will need to provide those APIs in an official way.
  • 32 Stimmen
    8 Beiträge
    46 Aufrufe
    J
    Apparently, it was required to be allowed in that state: Reading a bit more, during the sentencing phase in that state people making victim impact statements can choose their format for expression, and it's entirely allowed to make statements about what other people would say. So the judge didn't actually have grounds to deny it. No jury during that phase, so it's just the judge listening to free form requests in both directions. It's gross, but the rules very much allow the sister to make a statement about what she believes her brother would have wanted to say, in whatever format she wanted. From: https://sh.itjust.works/comment/18471175 influence the sentence From what I've seen, to be fair, judges' decisions have varied wildly regardless, sadly, and sentences should be more standardized. I wonder what it would've been otherwise.