• 3 Posts
  • 10 Comments
Joined 2 years ago
cake
Cake day: March 3rd, 2023

help-circle






  • tarneo@lemmy.mltoPrivacy@lemmy.mlWTF IS THIS?
    link
    fedilink
    arrow-up
    179
    arrow-down
    1
    ·
    1 year ago

    Yeah, most anticheats are actually just rootkits (running at kernel level with unlimited privileges). This is also a big security issue, some games like genshin impact have also been used to create botnets since there is only one privilege escalation from the game itself to the kernel.

    Whenever you use an anticheat, you just have to take the company’s word for what they are doing with that kernel-level access.



  • tarneo@lemmy.mltoPrivacy@lemmy.mlPlease, do not use Brave.
    link
    fedilink
    arrow-up
    13
    arrow-down
    4
    ·
    1 year ago

    Use librewolf instead of Firefox to get rid of the whole spyware part of it. Librewolf only has a single request when starting, to “check for updates”. But using Firefox is the second best thing you can do both for your privacy and to fight Google’s " Web Environment Integrity" crap.


  • I’m surprised this strategy was approved for a public server

    The goal was to avoid getting hacked on a server that could have many vulnerable services (there are more than 20 services on there). When I set this up I was basically freaked out by the fact I hadn’t updated mastodon more than a week after the last critical vulnerability in it was found (arbitrary code execution on the server). The quantity of affected users, compared to the impact it would have if hacked, made me choose the option of auto-updates back then, even if I now agree it wasn’t clever (and I ended up shooting myself I’m the foot). These days I just do updates semi-regularly and I am subscribed to mailing lists like oss-security to know there’s a vulnerability as early as possible. Plus I am not the only person in charge anymore.