Snot Flickerman
Our News Team @ 11 with host Snot Flickerman
- 15 Posts
- 2.69K Comments
1·13 minutes agohttps://www.malwarebytes.com/blog/news/2021/12/was-threat-actor-kax17-de-anonymizing-the-tor-network
Given the number of servers run by KAX17 the calculated probability of a Tor user connecting to the Tor network through one of KAX17’s servers was 16%, there was a 35% chance they would pass through one of its middle relays, and up to 5% chance to exit through one.
This would give the threat actor ample opportunity to perform a Sybil attack. A Sybil attack is a type of attack on a computer network service where an attacker subverts the service’s reputation system by creating a large number of pseudonymous identities and uses them to gain a disproportionately large influence. This could lead to the deanonymization of Tor users and/or onion services.
Given the cost and effort put into this and the fact that actors performing attacks in non-exit positions are considered more advanced adversaries because these attacks require a higher sophistication level and are less trivial to pull off, it is highly likely this is the work of a high-level (state-sponsored?) threat actor. As for who is behind this group, neither Nusenu nor the Tor Project wanted to speculate.
A spokesperson for the Tor Project confirmed Nusenu’s latest findings and said it had also removed a batch of KAX17 malicious relays.
“Once we got contacted, we looked through all the relays in the network and identified several hundred relays that are very likely belonging to the same group and removed them on November 8.”
VPN’s also by definition still use the same corporate pipes as anything else.
That’s literally the same point I was making, that your protocol can be blocked when they’ve decided they don’t like it.
That’s rather missing the point, an integrity check doesn’t solve the fact that to communicate with anyone, you have to do it through giant corporations pipes.
An integrity check doesn’t help when an ISP have straight blocked your protocols traffic, like Comcast previously did with bittorrent.
Can we stop sucking down the preachings of an idiot like Jack Dorsey? We don’t actually have net neutrality, so it’s totally within their current rights to just block traffic they don’t like.
Do protocols solve the problem of every hop in between you and the destination has to pass through what amounts to someone else’s private property? Some private servers owned by who knows who on the way between that we have no idea whether they’re inspecting every packet that comes through or not.
Because that’s the bigger issue, and I’m not even sure it’s one we can solve, because it’s pretty important to how the internet functions.
A protocol still has to be supported and passed through private corporations walled gardens.
Who else remembers Comcast illegally using Sandvine to throttle bittorrent traffic specifically? Pepperidge Farm 'members.
https://torrentfreak.com/comcast-throttles-bittorrent-traffic-seeding-impossible/
You might be able to remove the malware, but you can’t remove the backdoors that the US government stipulated should be there to begin with, it’s just another exploit in waiting…
101·4 hours agoGender is not a boolean value.
4·5 hours agoLubuntu has more done to it to make it run on older/slower/less RAM hardware than Xubuntu. Xubuntu is better for modern but low powered machines.
For stuff that’s actually relatively old and low-power, I’ve had much more luck with Lubuntu.
8·1 day agoHey, I used to be a lot better writer, but then I got cancer and now my brain leaves out lots of words when I write or replaces words with similar words. These days I find myself constantly re-editing comments to make them make sense because the first run misses a lot. Nobody knows anyone else’s story or why they might struggle with communication, and whether it’s a second language or losing your faculties due to disease and age, it’s not really something fair to ridicule others for. Cheers and keep up the good work, you look like you’re doing fine to me.
Closed source is generally compiled code in an executable, so you’d have to do a lot of work de-compiling it back to the source code first.
Even at the OS level, lots of the stuff “under the hood” in Windows is obfuscated, and still the same issue, most of it is compiled code, you’d have to de-compile a significant portion of it (in an OS there’s also an amount that doesn’t have to be de-compiled) to be able to actually look at the code itself.
Please don’t apologize for bad English, it’s not against the law to have English as a second language. As a US citizen, one of the most frustrating thing is knowing brilliantly competent and capable immigrants who are ignored and passed over because their education and credentials are simply in a different language. They often come as refugees and didn’t have the opportunity to get a great English education, but literally come with multiple degrees from quality universities in their home countries. Treating them like they know less because they speak a different language is so fucking absurd. Also, your English is fine, don’t beat yourself up.
I would sound worse in any language I tried to speak other than English, you’re doing better than I would, and better than a lot of English speakers would when put in the same situation speaking a second language they’re not familiar with.
31·1 day agoDepends, is it a static site? There’s some good projects like this for quickly rolling out something static.
https://gohugo.io/getting-started/quick-start/
It’s more command-line than click and drop, but maybe it’s close to what you’re looking for?
P.S: I want to make a simple static personal website. Possible have a link from where they can download PDF samples of my writing/ literature / creative work.
Hugo is widely used for static resume sites, so I think this could work for you if you’re familiar with command-line Linux.
How Google looks:
It was also published by The Information, which has more of a solid reporting history. Their reporting was followed up by Reuters, so I’m gonna put this in a “likely” category.
https://www.theinformation.com/articles/nvidias-top-customers-face-delays-from-glitchy-ai-chip-racks
I can see why someone wouldn’t post a link to the article from The Information since it’s paywalled.
lol lmao even
Chase that dragon, NVIDIA!
Thanks for the feedback, that’s super interesting to me. I’m glad to hear they’ve come down in price more recently, for sure!
Oh snap I am really sorry to intrude but I have a question for someone like yourself who is an avid PC user and is also blind.
How do you feel about the prohibitive cost of braille terminals? I am not blind but I remember seeing the film Sneakers when I was young and the blind hacker Whistler using a braille terminal. As an adult I looked into them and was shocked that some cost more than a mid-range laptop. Are they even that useful or is this a relic that I recall but has been superseded by more useful assistive technologies?
Honestly, for real, a lot of low-power PCs are really useful once they have crap like Windows off of them and a lightweight Linux distro on them.
That’s because those are Branding places. They’re places to sell your Brand. It’s why business profiles are interchangeable with personal profiles, it’s about branding.
Branding isn’t just for corporate products anymore, it’s for everyone, apparently.
It’s the whole “influencer’s real lives are a lot less glamorous than their Insta leads you to believe,” which is totally true, most of the clothes are rented and they get to stay maybe 24 hours in a nice place just for a photo shoot, then they’re sent back to their crappy apartment.
Asmongold is a gross dumb piece of shit but openly living in filth is at least being honest about how most of these influencers actually live.
It’s all smoke and mirrors for branding. Real people with real lives don’t spend their time managing their “brand” anywhere, whether it’s Instagram or LinkedIn because, by definition, we have real lives and real connections with real people already.