Skip to content

Millions of Americans Who Have Waited Decades for Fast Internet Connections Will Keep Waiting After the Trump Administration Threw a $42 Billion High-Speed Internet Program Into Disarray.

Technology
51 37 0
  • 1 Stimmen
    1 Beiträge
    0 Aufrufe
    Niemand hat geantwortet
  • Tough, Tiny, and Totally Repairable: Inside the Framework 12

    Technology technology
    105
    1
    541 Stimmen
    105 Beiträge
    1 Aufrufe
    B
    The whole point of making a easy to repair and upgrade laptop is that people wouldn't have to buy the latest model to get upgrades, they can just buy the parts they want to upgrade and swap them in their existing laptop and if the come up with a upgraded Framework 12, they can just add the year it comes out to the title
  • 898 Stimmen
    204 Beiträge
    14 Aufrufe
    S
    I know what an LLM is doing. You don't know what your brain is doing.
  • 347 Stimmen
    51 Beiträge
    4 Aufrufe
    4
    Interestingly it loads today. I have AdAway on my phone and PiHole in my home network
  • 137 Stimmen
    16 Beiträge
    7 Aufrufe
    H
    My ports are on the front of the router. No backdoors for me, checkmate Atheists.
  • 1 Stimmen
    8 Beiträge
    4 Aufrufe
    L
    I made a PayPal account like 20 years ago in a third world country. The only thing you needed then is an email and password. I have no real name on there and no PII, technically my bank card is attached but on PP itself there's no KYC. I think you could probably use some types of prepaid cards with it if you want to avoid using a bank altogether but for me this wasn't an issue, I just didn't want my ID on any records, I don't have any serious OpSec concerns otherwise. I'm sure you could either buy PayPal accounts like this if you needed to, or make one in a country that doesn't have KYC laws somehow. From there I'd add money to my balance and send money as F&F. At no point did I need an ID so in that sense there's no KYC. Some sellers on localmarket were fancy enough to list that they wanted an ID for KYC, but I'm sure you could just send them any random ID you made in paint from the republic of dave and you'd be fine.
  • 1 Stimmen
    8 Beiträge
    5 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.
  • 88 Stimmen
    4 Beiträge
    3 Aufrufe
    C
    Won't someone think of the shareholders?!