Skip to content

Trump Mobile launches $47 service and a gold phone

Technology
129 103 393
  • Apple’s plan: Stall, cheat, repeat

    Technology technology
    17
    1
    124 Stimmen
    17 Beiträge
    0 Aufrufe
    ulrich@feddit.orgU
    No one should have to have an IT degree just to have the software they want installed on their devices.
  • Judge briefly pauses 23andMe bankruptcy sale amid California's appeal

    Technology technology
    1
    20 Stimmen
    1 Beiträge
    0 Aufrufe
    Niemand hat geantwortet
  • AI Leaves Digital Fingerprints in 13.5% of Scientific Papers

    Technology technology
    2
    1
    163 Stimmen
    2 Beiträge
    6 Aufrufe
    F
    So they established that language patterns measured by word frequency changed between 2022 and 2024. But did they also analyse frequencies across other 2-year time periods? How much difference is there for a typical word? It looks like they have a per-frequency significance threshold but then analysed all words at once, meaning that random noise would turn up a bunch of "significant" results. Maybe this is addressed in the original paper which is not linked.
  • We need to stop pretending AI is intelligent

    Technology technology
    330
    1
    1k Stimmen
    330 Beiträge
    801 Aufrufe
    A
    What does any of this have to do with anything anyway? Humans invented the first human language. People have ideas that aren't simple derivatives of other ideas.
  • ChatGPT Lost a Chess Game to an Atari 2600

    Technology technology
    1
    1
    0 Stimmen
    1 Beiträge
    10 Aufrufe
    Niemand hat geantwortet
  • 124 Stimmen
    12 Beiträge
    48 Aufrufe
    T
    Premium supported. You get plenty with the free tier, but you get lots more with paid.
  • 1 Stimmen
    8 Beiträge
    36 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.
  • WhatsApp provides no cryptographic management for group messages

    Technology technology
    3
    1
    17 Stimmen
    3 Beiträge
    22 Aufrufe
    S
    Just be sure to add only the people you want to be there. I've heard some people add others and it's a bit messy