Skip to content

North Korea sent me abroad to be a secret IT worker. My wages funded the regime

Technology
32 17 0
  • 50 Stimmen
    1 Beiträge
    7 Aufrufe
    Niemand hat geantwortet
  • Microsoft exec admits it 'cannot guarantee' data sovereignty

    Technology technology
    19
    1
    297 Stimmen
    19 Beiträge
    86 Aufrufe
    S
    The cloud is just someone else’s computer.
  • 0 Stimmen
    1 Beiträge
    18 Aufrufe
    Niemand hat geantwortet
  • www2025

    Technology technology
    1
    2
    1 Stimmen
    1 Beiträge
    19 Aufrufe
    Niemand hat geantwortet
  • Signal – an ethical replacement for WhatsApp

    Technology technology
    235
    1
    1k Stimmen
    235 Beiträge
    5k Aufrufe
    V
    What I said is that smart people can be convinced to move to another platform. Most of my friends are not technically inclined, but it was easy to make them use it, at least to chat with me. What you did is change "smart people" with "people who already want to move", which is not the same. You then said it's not something you can choose (as you cannot choose to be rich). But I answered that you can actually choose your friends. Never did I say people who are not interested in niche technologies are not smart. My statement can be rephrased in an equivalent statement "people who cannot be convinced to change are not smart", and I stand to it.
  • Cloudflare built an oauth provider with Claude

    Technology technology
    23
    1
    34 Stimmen
    23 Beiträge
    320 Aufrufe
    A
    I have to say that you just have to sayed something up
  • 54 Stimmen
    18 Beiträge
    159 Aufrufe
    halcyon@discuss.tchncs.deH
    Though babble fish is a funny term, Douglas Adams named the creature "Babel fish", after the biblical story of the tower of Babel.
  • 1 Stimmen
    8 Beiträge
    73 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.