Forumi


Povratak   PC Ekspert Forum > Ostalo > Razno
Osvježi stranicu Privatnost i sigurnost podataka i korisnika
Ime
Lozinka

Odgovori
Stranica 28 od 29 « Prva 1824252627 28 29
 
Uređivanje
Staro 27.10.2025., 12:52   #811
Colop
Premium
 
Datum registracije: Sep 2011
Lokacija: Split
Postovi: 1,151
Citiraj:
Autor tomek@vz Pregled postova



Znači u budućnosti će sa članovima obitelji trebati dogovoriti password koji moraju reći kada te budu zvali iz zatvora u Turskoj da im platiš jamčevinu.
Colop je offline   Reply With Quote
Staro 27.10.2025., 20:24   #812
mkey
Premium
Moj komp
 
Datum registracije: Sep 2018
Lokacija: tu
Postovi: 3,578
PA ima na jobito onaj frajer koji maltretira Indijske scammere. Pred već barem pola godine je bio složio svoj garažni call centar gdje ti njegovi "AI" botovi dovode indijce do ludila i to uživo. Ne znam koliko je roknuo u hardware, ali mislim da je imao istovremeno 12 linija koje roštaju cijeli dan. Kit Boga, kako li se zove.
__________________
Citiraj:
Autor George Carlin
But there’s a reason. There’s a reason. There’s a reason for this, there’s a reason education sucks, and it’s the same reason that it will never, ever, ever be fixed. It’s never gonna get any better. Don’t look for it. Be happy with what you got. Because the owners of this country don't want that. I'm talking about the real owners now, the real owners, the big wealthy business interests that control things and make all the important decisions. Forget the politicians. The politicians are put there to give you the idea that you have freedom of choice. You don't. You have no choice. You have owners. They own you. They own everything. They own all the important land. They own and control the corporations. They’ve long since bought and paid for the senate, the congress, the state houses, the city halls, they got the judges in their back pockets and they own all the big media companies so they control just about all of the news and information you get to hear. They got you by the balls. They spend billions of dollars every year lobbying, lobbying, to get what they want. Well, we know what they want. They want more for themselves and less for everybody else, but I'll tell you what they don’t want: They don’t want a population of citizens capable of critical thinking. They don’t want well informed, well educated people capable of critical thinking. They’re not interested in that. That doesn’t help them. Thats against their interests. Thats right. They don’t want people who are smart enough to sit around a kitchen table to figure out how badly they’re getting f*cked by a system that threw them overboard 30 f*cking years ago. They don’t want that. You know what they want? They want obedient workers. Obedient workers. People who are just smart enough to run the machines and do the paperwork, and just dumb enough to passively accept all these increasingly shittier jobs with the lower pay, the longer hours, the reduced benefits, the end of overtime and the vanishing pension that disappears the minute you go to collect it, and now they’re coming for your Social Security money. They want your retirement money. They want it back so they can give it to their criminal friends on Wall Street, and you know something? They’ll get it. They’ll get it all from you, sooner or later, 'cause they own this f*cking place. It's a big club, and you ain’t in it. You and I are not in the big club. And by the way, it's the same big club they use to beat you over the head with all day long when they tell you what to believe. All day long beating you over the head in their media telling you what to believe, what to think and what to buy. The table is tilted folks. The game is rigged, and nobody seems to notice, nobody seems to care. Good honest hard-working people -- white collar, blue collar, it doesn’t matter what color shirt you have on -- good honest hard-working people continue -- these are people of modest means -- continue to elect these rich c*cksuckers who don’t give a f*ck about them. They don’t give a f*ck about you. They don’t give a f*ck about you. They don't care about you at all -- at all -- at all. And nobody seems to notice, nobody seems to care. That's what the owners count on; the fact that Americans will probably remain willfully ignorant of the big red, white and blue dick that's being jammed up their assholes everyday. Because the owners of this country know the truth: it's called the American Dream, because you have to be asleep to believe it.
mkey je offline   Reply With Quote
Staro 27.10.2025., 21:39   #813
tomek@vz
White Rabbit
 
tomek@vz's Avatar
 
Datum registracije: May 2006
Lokacija: -
Postovi: 5,066
Citiraj:
Autor mkey Pregled postova
PA ima na jobito onaj frajer koji maltretira Indijske scammere. Pred već barem pola godine je bio složio svoj garažni call centar gdje ti njegovi "AI" botovi dovode indijce do ludila i to uživo. Ne znam koliko je roknuo u hardware, ali mislim da je imao istovremeno 12 linija koje roštaju cijeli dan. Kit Boga, kako li se zove.

Hilarious


tomek@vz je offline   Reply With Quote
Staro 27.10.2025., 22:15   #814
mkey
Premium
Moj komp
 
Datum registracije: Sep 2018
Lokacija: tu
Postovi: 3,578
To je taj. Trebaš vidjeti video u kojem se indijac dere "DO NOT REDEEM!!11! DO NOT REDEEEMM!11!!" dok frajer redeema gift card od 500$. Komedija.
__________________
Citiraj:
Autor George Carlin
But there’s a reason. There’s a reason. There’s a reason for this, there’s a reason education sucks, and it’s the same reason that it will never, ever, ever be fixed. It’s never gonna get any better. Don’t look for it. Be happy with what you got. Because the owners of this country don't want that. I'm talking about the real owners now, the real owners, the big wealthy business interests that control things and make all the important decisions. Forget the politicians. The politicians are put there to give you the idea that you have freedom of choice. You don't. You have no choice. You have owners. They own you. They own everything. They own all the important land. They own and control the corporations. They’ve long since bought and paid for the senate, the congress, the state houses, the city halls, they got the judges in their back pockets and they own all the big media companies so they control just about all of the news and information you get to hear. They got you by the balls. They spend billions of dollars every year lobbying, lobbying, to get what they want. Well, we know what they want. They want more for themselves and less for everybody else, but I'll tell you what they don’t want: They don’t want a population of citizens capable of critical thinking. They don’t want well informed, well educated people capable of critical thinking. They’re not interested in that. That doesn’t help them. Thats against their interests. Thats right. They don’t want people who are smart enough to sit around a kitchen table to figure out how badly they’re getting f*cked by a system that threw them overboard 30 f*cking years ago. They don’t want that. You know what they want? They want obedient workers. Obedient workers. People who are just smart enough to run the machines and do the paperwork, and just dumb enough to passively accept all these increasingly shittier jobs with the lower pay, the longer hours, the reduced benefits, the end of overtime and the vanishing pension that disappears the minute you go to collect it, and now they’re coming for your Social Security money. They want your retirement money. They want it back so they can give it to their criminal friends on Wall Street, and you know something? They’ll get it. They’ll get it all from you, sooner or later, 'cause they own this f*cking place. It's a big club, and you ain’t in it. You and I are not in the big club. And by the way, it's the same big club they use to beat you over the head with all day long when they tell you what to believe. All day long beating you over the head in their media telling you what to believe, what to think and what to buy. The table is tilted folks. The game is rigged, and nobody seems to notice, nobody seems to care. Good honest hard-working people -- white collar, blue collar, it doesn’t matter what color shirt you have on -- good honest hard-working people continue -- these are people of modest means -- continue to elect these rich c*cksuckers who don’t give a f*ck about them. They don’t give a f*ck about you. They don’t give a f*ck about you. They don't care about you at all -- at all -- at all. And nobody seems to notice, nobody seems to care. That's what the owners count on; the fact that Americans will probably remain willfully ignorant of the big red, white and blue dick that's being jammed up their assholes everyday. Because the owners of this country know the truth: it's called the American Dream, because you have to be asleep to believe it.
mkey je offline   Reply With Quote
Staro 27.10.2025., 23:34   #815
Bono
Uptime 99.99%
Moj komp
 
Bono's Avatar
 
Datum registracije: Nov 2001
Lokacija: Zagreb
Postovi: 2,631
Indijci kad namire lovu nikad ne odustaju.
https://youtube.com/shorts/_TaS080vGKc

Sent from my SM-S931B using Tapatalk
__________________
“Those who surrender freedom for security will not have, nor do they deserve, either one.”
Bono je offline   Reply With Quote
Staro 28.10.2025., 21:22   #816
tomek@vz
White Rabbit
 
tomek@vz's Avatar
 
Datum registracije: May 2006
Lokacija: -
Postovi: 5,066
Iduci velik problem o kojem nitko ne prica:


Citiraj:
After last week's major AWS outage took Signal along with it, Elon Musk was quick to criticize the encrypted messaging app's reliance on big tech. But Signal president Meredith Whittaker argues that the company didn't have any other choice but to use AWS or another major cloud provider.

"The problem here is not that Signal 'chose' to run on AWS," Whittaker writes in a series of posts on Bluesky. "The problem is the concentration of power in the infrastructure space that means there isn't really another choice: the entire stack, practically speaking, is owned by 3-4 players."

In the thread, Whittaker says the number of people who didn't realize Signal uses AWS is "concerning," as it indicates they aren't aware of just how concentrated the cloud infrastructure industry is. "The question isn't 'why does Signal use AWS?'" Whittaker writes. "It's to look at the infrastructural requirements of any global, real-time, mass comms platform and ask how it is that we got to a place where there's no realistic alternative to AWS and the other hyperscalers."
tomek@vz je offline   Reply With Quote
Staro 29.10.2025., 18:49   #817
domy_os
EMP moderator
 
domy_os's Avatar
 
Datum registracije: Apr 2005
Lokacija: Osijek
Postovi: 18,887
Citiraj:
In a post on his blog Small World, the computer programmer and electronics enthusiast Harishankar Narayanan detailed a startling find he made about his $300 smart vacuum: it was transmitting intimate data out of his home.
Citiraj:
“My robot vacuum was constantly communicating with its manufacturer, transmitting logs and telemetry that I had never consented to share,” Narayanan wrote. “That’s when I made my first mistake: I decided to stop it.”
https://futurism.com/robots-and-mach...m-broadcasting

Ponavlja se slučaj iz 2017...

https://thehackernews.com/2017/07/ir...a-vacuums.html
__________________
"Kako su krojači novog svjetskog poretka uspjeli u tako kratko vrijeme slomiti intelektualne sposobnosti društva, uništiti kritičku svijest i ljudima nametnuti izvrnutu logiku?"

Nisu slomili u kratko vrijeme. Slamali su godinama, desetljećima pa i stoljećima. Svaka odgledana epizoda Big Brothera, svaki dečko koji ne zna niti promijeniti žarulju, a kamoli uzeti sjekiru i pocijepati drva, svaka cura koja misli da je briga za vlastitu obitelj robija, ali rad za par tisuća kuna u korporaciji 12 sati dnevno blagodat, svako promicanje terora političke korektnosti, svaka podrška promociji svih oblika poremećenosti… Sve to nas je dovelo do ovdje. Korona je samo zakucavanje lopte u gol nakon što je obrana već izigrana i golman odletio u prazno.



Lenovo ThinkPad T14 Gen 2 + Lenovo ThinkPad Universal Thunderbolt 4 Dock

CPU: Intel Core i7-1165G7 @ 2.8 GHz
RAM: 2 x 16 GB DDR4-3200
SSD: Samsung 970 EVO Plus 2 TB NVMe M.2
LCD: 14" FHD IPS 400nits Low Power
WLAN: Intel Wi-Fi 6 AX201
WWAN: Quectel EM120R-GL 4G LTE CAT12
OS: Windows 11 Pro

LCD monitor: AOC AG493UCX
Keyboard: Razer Huntsman V2 Analog
Mice: Logitech G502 Proteus Spectrum
SB: Mackie Onyx Producer 2x2
Speakers: 2 x JBL LSR305
MFP: Canon Pixma MP240
NAS: Synology DS420+ with 4 x WD Red Pro 8 TB
HDD Dock: LC Power LC-DOCK-U3-CR + 12 x Hitachi/Samsung/Seagate/WD 1/2 TB
domy_os je offline   Reply With Quote
Staro 29.10.2025., 20:20   #818
mkey
Premium
Moj komp
 
Datum registracije: Sep 2018
Lokacija: tu
Postovi: 3,578
Mislim da je prvi znak da nešto nije u redu kada ti usisavač traži da se spoji na net
__________________
Citiraj:
Autor George Carlin
But there’s a reason. There’s a reason. There’s a reason for this, there’s a reason education sucks, and it’s the same reason that it will never, ever, ever be fixed. It’s never gonna get any better. Don’t look for it. Be happy with what you got. Because the owners of this country don't want that. I'm talking about the real owners now, the real owners, the big wealthy business interests that control things and make all the important decisions. Forget the politicians. The politicians are put there to give you the idea that you have freedom of choice. You don't. You have no choice. You have owners. They own you. They own everything. They own all the important land. They own and control the corporations. They’ve long since bought and paid for the senate, the congress, the state houses, the city halls, they got the judges in their back pockets and they own all the big media companies so they control just about all of the news and information you get to hear. They got you by the balls. They spend billions of dollars every year lobbying, lobbying, to get what they want. Well, we know what they want. They want more for themselves and less for everybody else, but I'll tell you what they don’t want: They don’t want a population of citizens capable of critical thinking. They don’t want well informed, well educated people capable of critical thinking. They’re not interested in that. That doesn’t help them. Thats against their interests. Thats right. They don’t want people who are smart enough to sit around a kitchen table to figure out how badly they’re getting f*cked by a system that threw them overboard 30 f*cking years ago. They don’t want that. You know what they want? They want obedient workers. Obedient workers. People who are just smart enough to run the machines and do the paperwork, and just dumb enough to passively accept all these increasingly shittier jobs with the lower pay, the longer hours, the reduced benefits, the end of overtime and the vanishing pension that disappears the minute you go to collect it, and now they’re coming for your Social Security money. They want your retirement money. They want it back so they can give it to their criminal friends on Wall Street, and you know something? They’ll get it. They’ll get it all from you, sooner or later, 'cause they own this f*cking place. It's a big club, and you ain’t in it. You and I are not in the big club. And by the way, it's the same big club they use to beat you over the head with all day long when they tell you what to believe. All day long beating you over the head in their media telling you what to believe, what to think and what to buy. The table is tilted folks. The game is rigged, and nobody seems to notice, nobody seems to care. Good honest hard-working people -- white collar, blue collar, it doesn’t matter what color shirt you have on -- good honest hard-working people continue -- these are people of modest means -- continue to elect these rich c*cksuckers who don’t give a f*ck about them. They don’t give a f*ck about you. They don’t give a f*ck about you. They don't care about you at all -- at all -- at all. And nobody seems to notice, nobody seems to care. That's what the owners count on; the fact that Americans will probably remain willfully ignorant of the big red, white and blue dick that's being jammed up their assholes everyday. Because the owners of this country know the truth: it's called the American Dream, because you have to be asleep to believe it.
mkey je offline   Reply With Quote
Staro 30.10.2025., 11:38   #819
tomek@vz
White Rabbit
 
tomek@vz's Avatar
 
Datum registracije: May 2006
Lokacija: -
Postovi: 5,066
Citiraj:
Trend Micro says the attackers are using WSL to be able to launch the ELF executable on a Windows device and to bypass traditional Windows security software.
"In this case, the threat actors were able to run the Linux encryptor on Windows systems by taking advantage of the Windows Subsystem for Linux (WSL), a built-in feature that allows Linux binaries to execute natively on Windows without requiring a virtual machine," Trend Micro said.

>> Techradar
>> WebProNews


Opet problemi sa npm libovima:


Citiraj:
Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component that collects sensitive data from Windows, Linux, and macOS systems.
The packages were uploaded to npm on July 4, and remained undetected for a long period due to multiple layers of obfuscation that helped escape standard static analysis mechanisms.
According to researchers at cybersecurity company Socket, the ten packages counted nearly 10,000 downloads and stole credentials from system keyrings, browsers, and authentication services.
At the time of writing, the packages are still available, despite Socket reporting them to npm:
  1. typescriptjs
  2. deezcord.js
  3. dizcordjs
  4. dezcord.js
  5. etherdjs
  6. ethesjs
  7. ethetsjs
  8. nodemonjs
  9. react-router-dom.js
  10. zustand.js

> bleepingcomputer
tomek@vz je offline   Reply With Quote
Staro 30.10.2025., 14:30   #820
mkey
Premium
Moj komp
 
Datum registracije: Sep 2018
Lokacija: tu
Postovi: 3,578
Ovo je baš nezgodno. Zato ekipa i upozorava da čim više vanjskog softwera koristiš šanse da budeš naletio na neki scam rastu, pošto s vremenom netko može preuzet projekt i raditi ovakve pi*darije.
__________________
Citiraj:
Autor George Carlin
But there’s a reason. There’s a reason. There’s a reason for this, there’s a reason education sucks, and it’s the same reason that it will never, ever, ever be fixed. It’s never gonna get any better. Don’t look for it. Be happy with what you got. Because the owners of this country don't want that. I'm talking about the real owners now, the real owners, the big wealthy business interests that control things and make all the important decisions. Forget the politicians. The politicians are put there to give you the idea that you have freedom of choice. You don't. You have no choice. You have owners. They own you. They own everything. They own all the important land. They own and control the corporations. They’ve long since bought and paid for the senate, the congress, the state houses, the city halls, they got the judges in their back pockets and they own all the big media companies so they control just about all of the news and information you get to hear. They got you by the balls. They spend billions of dollars every year lobbying, lobbying, to get what they want. Well, we know what they want. They want more for themselves and less for everybody else, but I'll tell you what they don’t want: They don’t want a population of citizens capable of critical thinking. They don’t want well informed, well educated people capable of critical thinking. They’re not interested in that. That doesn’t help them. Thats against their interests. Thats right. They don’t want people who are smart enough to sit around a kitchen table to figure out how badly they’re getting f*cked by a system that threw them overboard 30 f*cking years ago. They don’t want that. You know what they want? They want obedient workers. Obedient workers. People who are just smart enough to run the machines and do the paperwork, and just dumb enough to passively accept all these increasingly shittier jobs with the lower pay, the longer hours, the reduced benefits, the end of overtime and the vanishing pension that disappears the minute you go to collect it, and now they’re coming for your Social Security money. They want your retirement money. They want it back so they can give it to their criminal friends on Wall Street, and you know something? They’ll get it. They’ll get it all from you, sooner or later, 'cause they own this f*cking place. It's a big club, and you ain’t in it. You and I are not in the big club. And by the way, it's the same big club they use to beat you over the head with all day long when they tell you what to believe. All day long beating you over the head in their media telling you what to believe, what to think and what to buy. The table is tilted folks. The game is rigged, and nobody seems to notice, nobody seems to care. Good honest hard-working people -- white collar, blue collar, it doesn’t matter what color shirt you have on -- good honest hard-working people continue -- these are people of modest means -- continue to elect these rich c*cksuckers who don’t give a f*ck about them. They don’t give a f*ck about you. They don’t give a f*ck about you. They don't care about you at all -- at all -- at all. And nobody seems to notice, nobody seems to care. That's what the owners count on; the fact that Americans will probably remain willfully ignorant of the big red, white and blue dick that's being jammed up their assholes everyday. Because the owners of this country know the truth: it's called the American Dream, because you have to be asleep to believe it.
mkey je offline   Reply With Quote
Staro 30.10.2025., 16:41   #821
Bono
Uptime 99.99%
Moj komp
 
Bono's Avatar
 
Datum registracije: Nov 2001
Lokacija: Zagreb
Postovi: 2,631
EY Data Leak - Massive 4TB SQL Server Backup Exposed Publicly on Microsoft Azure

A massive 4TB SQL Server backup file belonging to global accounting giant Ernst & Young (EY) was discovered publicly accessible on Microsoft Azure.

The file's naming convention screamed SQL Server backup (.BAK format), which typically contains full database dumps, including schemas, user data, and, crucially, embedded secrets such as API keys, credentials, and authentication tokens.

A simple HEAD request designed by researchers to retrieve metadata without downloading content revealed a massive size: 4 terabytes of data, which is equivalent to millions of documents or the contents of an entire library.

https://cybersecuritynews.com/ey-data-leak/

Sent from my SM-S931B using Tapatalk
__________________
“Those who surrender freedom for security will not have, nor do they deserve, either one.”
Bono je offline   Reply With Quote
Staro 31.10.2025., 08:26   #822
tomek@vz
White Rabbit
 
tomek@vz's Avatar
 
Datum registracije: May 2006
Lokacija: -
Postovi: 5,066
Citiraj:
Autor Bono Pregled postova
EY Data Leak - Massive 4TB SQL Server Backup Exposed Publicly on Microsoft Azure

A massive 4TB SQL Server backup file belonging to global accounting giant Ernst & Young (EY) was discovered publicly accessible on Microsoft Azure.

The file's naming convention screamed SQL Server backup (.BAK format), which typically contains full database dumps, including schemas, user data, and, crucially, embedded secrets such as API keys, credentials, and authentication tokens.

A simple HEAD request designed by researchers to retrieve metadata without downloading content revealed a massive size: 4 terabytes of data, which is equivalent to millions of documents or the contents of an entire library.

https://cybersecuritynews.com/ey-data-leak/

Sent from my SM-S931B using Tapatalk

auch....
tomek@vz je offline   Reply With Quote
Staro 31.10.2025., 08:47   #823
tomek@vz
White Rabbit
 
tomek@vz's Avatar
 
Datum registracije: May 2006
Lokacija: -
Postovi: 5,066
Na ovo se moram malo nasmijati


Citiraj:
Someone recently managed to get on a Microsoft Teams call with representatives from phone hacking company Cellebrite, and then leaked a screenshot of the company's capabilities against many Google Pixel phones, according to a forum post about the leak and 404 Media's review of the material. The leak follows others obtained and verified by 404 Media over the last 18 months. Those leaks impacted both Cellebrite and its competitor Grayshift, now owned by Magnet Forensics. Both companies constantly hunt for techniques to unlock phones law enforcement have physical access to.

"You can Teams meeting with them. They tell everything. Still cannot extract esim on Pixel. Ask anything," a user called rogueFed wrote on the GrapheneOS forum on Wednesday, speaking about what they learned about Cellebrite capabilities. GrapheneOS is a security- and privacy-focused Android-based operating system. rogueFed then posted two screenshots of the Microsoft Teams call. The first was a Cellebrite Support Matrix, which lays out whether the company's tech can, or can't, unlock certain phones and under what conditions. The second screenshot was of a Cellebrite employee. According to another of rogueFed's posts, the meeting took place in October. The meeting appears to have been a sales call. The employee is a "pre sales expert," according to a profile available online.

The Support Matrix is focused on modern Google Pixel devices, including the Pixel 9 series. The screenshot does not include details on the Pixel 10, which is Google's latest device. It discusses Cellebrite's capabilities regarding 'before first unlock', or BFU, when a piece of phone unlocking tech tries to open a device before someone has typed in the phone's passcode for the first time since being turned on. It also shows Cellebrite's capabilities against after first unlock, or AFU, devices. The Support Matrix also shows Cellebrite's capabilities against Pixel devices running GrapheneOS, with some differences between phones running that operating system and stock Android. Cellebrite does support, for example, Pixel 9 devices BFU. Meanwhile the screenshot indicates Cellebrite cannot unlock Pixel 9 devices running GrapheneOS BFU. In their forum post, rogueFed wrote that the "meeting focused specific on GrapheneOS bypass capability." They added "very fresh info more coming."
tomek@vz je offline   Reply With Quote
Staro 31.10.2025., 09:21   #824
Bono
Uptime 99.99%
Moj komp
 
Bono's Avatar
 
Datum registracije: Nov 2001
Lokacija: Zagreb
Postovi: 2,631
Moraju ljudi prodati svoj software.

Sent from my SM-S931B using Tapatalk
__________________
“Those who surrender freedom for security will not have, nor do they deserve, either one.”
Bono je offline   Reply With Quote
Staro 31.10.2025., 11:11   #825
Night
Premium
 
Datum registracije: Oct 2008
Lokacija: Dbk
Postovi: 1,308
Direkt link na screenshot : https://files.catbox.moe/80kwmt.jpg

Sad se nameće (retoričko) pitanje zašto Pixela sa standardnim Google provided OSom Cellebrite može otključati, a onoga sa Grapheneom ne može. Zašto Google ne začepi tu rupu koja je već dugo vremena poznata, osim ako je namjerno dopušta.
Night je offline   Reply With Quote
Staro 31.10.2025., 19:09   #826
mkey
Premium
Moj komp
 
Datum registracije: Sep 2018
Lokacija: tu
Postovi: 3,578
Retorički odgovor: to su sve teorije zavjere.
__________________
Citiraj:
Autor George Carlin
But there’s a reason. There’s a reason. There’s a reason for this, there’s a reason education sucks, and it’s the same reason that it will never, ever, ever be fixed. It’s never gonna get any better. Don’t look for it. Be happy with what you got. Because the owners of this country don't want that. I'm talking about the real owners now, the real owners, the big wealthy business interests that control things and make all the important decisions. Forget the politicians. The politicians are put there to give you the idea that you have freedom of choice. You don't. You have no choice. You have owners. They own you. They own everything. They own all the important land. They own and control the corporations. They’ve long since bought and paid for the senate, the congress, the state houses, the city halls, they got the judges in their back pockets and they own all the big media companies so they control just about all of the news and information you get to hear. They got you by the balls. They spend billions of dollars every year lobbying, lobbying, to get what they want. Well, we know what they want. They want more for themselves and less for everybody else, but I'll tell you what they don’t want: They don’t want a population of citizens capable of critical thinking. They don’t want well informed, well educated people capable of critical thinking. They’re not interested in that. That doesn’t help them. Thats against their interests. Thats right. They don’t want people who are smart enough to sit around a kitchen table to figure out how badly they’re getting f*cked by a system that threw them overboard 30 f*cking years ago. They don’t want that. You know what they want? They want obedient workers. Obedient workers. People who are just smart enough to run the machines and do the paperwork, and just dumb enough to passively accept all these increasingly shittier jobs with the lower pay, the longer hours, the reduced benefits, the end of overtime and the vanishing pension that disappears the minute you go to collect it, and now they’re coming for your Social Security money. They want your retirement money. They want it back so they can give it to their criminal friends on Wall Street, and you know something? They’ll get it. They’ll get it all from you, sooner or later, 'cause they own this f*cking place. It's a big club, and you ain’t in it. You and I are not in the big club. And by the way, it's the same big club they use to beat you over the head with all day long when they tell you what to believe. All day long beating you over the head in their media telling you what to believe, what to think and what to buy. The table is tilted folks. The game is rigged, and nobody seems to notice, nobody seems to care. Good honest hard-working people -- white collar, blue collar, it doesn’t matter what color shirt you have on -- good honest hard-working people continue -- these are people of modest means -- continue to elect these rich c*cksuckers who don’t give a f*ck about them. They don’t give a f*ck about you. They don’t give a f*ck about you. They don't care about you at all -- at all -- at all. And nobody seems to notice, nobody seems to care. That's what the owners count on; the fact that Americans will probably remain willfully ignorant of the big red, white and blue dick that's being jammed up their assholes everyday. Because the owners of this country know the truth: it's called the American Dream, because you have to be asleep to believe it.
mkey je offline   Reply With Quote
Staro 31.10.2025., 22:22   #827
Visage
8-bit Gen.
Moj komp
 
Visage's Avatar
 
Datum registracije: May 2004
Lokacija: Giethoorn - ZG
Postovi: 3,159
Leaked documents expose deep ties between Israeli army and Microsoft

Citiraj:
The documents additionally indicate that the “Rolling Stone” system, which the army uses to manage the population registry and movement of Palestinians in the West Bank and Gaza, is maintained by Microsoft Azure. Azure is also used in a highly classified unit inside the Israeli Prime Minister’s Office, where Microsoft employees with security clearance are required to sign off and oversee the provision of cloud services.

...
Visage je offline   Reply With Quote
Staro 01.11.2025., 09:35   #828
tomek@vz
White Rabbit
 
tomek@vz's Avatar
 
Datum registracije: May 2006
Lokacija: -
Postovi: 5,066
Prilično detaljno dokumentirano, topla preporuka:


Citiraj:
Key Points / Summary
  • 2 exposed AWS keys on public-facing websites revealed 70+ TB of sensitive information and infrastructure across hundreds of buckets.
  • Pointless AWS key encryption easily defeated.
  • Tableau backdoor made it possible to log in as anyone without a password, including the server admin. This exposed countless internal projects, financial reports, and dealer dashboards.
  • Exposed Azuga API key compromised test drive fleet management system.
If you are in the US and ask your friends and family if they have heard of “Tata Motors”, they would likely say no. However, if you go overseas, Tata Motors and the Tata Group in general are a massive, well-known conglomerate. Back in 2023, I took my hacking adventures overseas and found many vulnerabilities with Tata Motors. This post covers 4 of the most impactful findings I discovered that I am finally ready to share today. Let’s dive in!
Note that all secrets/credentials shown have been rotated, meaning they are no longer valid and cannot be used anymore. Additionally, no substantial amounts of data were downloaded as part of any testing, nor was there any obvious evidence of malicious access.

> Hacking India’s largest automaker: Tata Motors
tomek@vz je offline   Reply With Quote
Staro 01.11.2025., 10:08   #829
tomek@vz
White Rabbit
 
tomek@vz's Avatar
 
Datum registracije: May 2006
Lokacija: -
Postovi: 5,066
Citiraj:
The U.S. Cybersecurity and Infrastructure Security Agency has added a critical Linux kernel vulnerability to its Known Exploited Vulnerabilities catalog, warning that threat actors are actively leveraging the security vulnerability in ransomware campaigns targeting organizations worldwide.
The vulnerability, tracked as CVE-2024-1086, represents a significant threat to Linux-based systems and requires immediate attention from cybersecurity teams.
CVE-2024-1086 is a use-after-free vulnerability affecting the netfilter: nf_tables component within the Linux kernel.
This type of security weakness occurs when a program continues to use a memory pointer after the associated memory has been freed, allowing attackers to manipulate memory allocations and potentially execute arbitrary code with elevated privileges.
The vulnerability enables threat actors to achieve local privilege escalation, granting unauthorized administrative access to compromised systems.
The vulnerability is categorized under CWE-416, a common weakness enumeration that specifically addresses use-after-free conditions.
These vulnerabilities are particularly dangerous because they can be exploited to bypass security controls and escalate privileges from a standard user account to root or administrator level.
Once attackers obtain elevated privileges, they can deploy ransomware payloads, exfiltrate sensitive data, establish persistent access, or conduct other malicious activities across the compromised infrastructure.

> CISA Alerts on Linux Kernel Vulnerability Exploited in Ransomware Attacks
tomek@vz je offline   Reply With Quote
Staro 02.11.2025., 07:07   #830
tomek@vz
White Rabbit
 
tomek@vz's Avatar
 
Datum registracije: May 2006
Lokacija: -
Postovi: 5,066
Citiraj:
The address bar/ChatGPT input window in OpenAI's browser ChatGPT Atlas "could be targeted for prompt injection using malicious instructions disguised as links," reports SC World, citing a report from AI/agent security platform NeuralTrust:
Citiraj:
NeuralTrust found that a malformed URL could be crafted to include a prompt that is treated as plain text by the browser, passing the prompt on to the LLM. A malformation, such as an extra space after the first slash following "https:" prevents the browser from recognizing the link as a website to visit. Rather than triggering a web search, as is common when plain text is submitted to a browser's address bar, ChatGPT Atlas treats plain text as ChatGPT prompts by default.

An unsuspecting user could potentially be tricked into copying and pasting a malformed link, believing they will be sent to a legitimate webpage. An attacker could plant the link behind a "copy link" button so that the user might not notice the suspicious text at the end of the link until after it is pasted and submitted. These prompt injections could potentially be used to instruct ChatGPT to open a new tab to a malicious website such as a phishing site, or to tell ChatGPT to take harmful actions in the user's integrated applications or logged-in sites like Google Drive, NeuralTrust said.
Last month browser security platform LayerX also described how malicious prompts could be hidden in URLs (as a parameter) for Perplexity's browser Comet. And last week SquareX Labs demonstrated that a malicious browser extension could spoof Comet's AI sidebar feature and have since replicated the proof-of-concept (PoC) attack on Atlas.

But another new vulnerability in ChatGPT Atlas "could allow malicious actors to inject nefarious instructions into the artificial intelligence (AI)-powered assistant's memory and run arbitrary code," reports The Hacker News, citing a report from browser security platform LayerX:
Citiraj:
"This exploit can allow attackers to infect systems with malicious code, grant themselves access privileges, or deploy malware," LayerX Security Co-Founder and CEO, Or Eshed, said in a report shared with The Hacker News. The attack, at its core, leverages a cross-site request forgery (CSRF) flaw that could be exploited to inject malicious instructions into ChatGPT's persistent memory. The corrupted memory can then persist across devices and sessions, permitting an attacker to conduct various actions, including seizing control of a user's account, browser, or connected systems, when a logged-in user attempts to use ChatGPT for legitimate purposes....

"What makes this exploit uniquely dangerous is that it targets the AI's persistent memory, not just the browser session," Michelle Levy, head of security research at LayerX Security, said. "By chaining a standard CSRF to a memory write, an attacker can invisibly plant instructions that survive across devices, sessions, and even different browsers. In our tests, once ChatGPT's memory was tainted, subsequent 'normal' prompts could trigger code fetches, privilege escalations, or data exfiltration without tripping meaningful safeguards...."

 LayerX said the problem is exacerbated by ChatGPT Atlas' lack of robust anti-phishing controls, the browser security company said, adding it leaves users up to 90% more exposed than traditional browsers like Google Chrome or Microsoft Edge. In tests against over 100 in-the-wild web vulnerabilities and phishing attacks, Edge managed to stop 53% of them, followed by Google Chrome at 47% and Dia at 46%. In contrast, Perplexity's Comet and ChatGPT Atlas stopped only 7% and 5.8% of malicious web pages.
From The Conversation:
Citiraj:
Sandboxing is a security approach designed to keep websites isolated and prevent malicious code from accessing data from other tabs. The modern web depends on this separation. But in Atlas, the AI agent isn't malicious code — it's a trusted user with permission to see and act across all sites. This undermines the core principle of browser isolation.

Ponekad je gluplje i jednostavnije - bolje.
tomek@vz je offline   Reply With Quote
Staro 02.11.2025., 11:09   #831
OuttaControl
Premium
Moj komp
 
OuttaControl's Avatar
 
Datum registracije: Feb 2007
Lokacija: Dalmacija
Postovi: 5,872
https://www.instagram.com/reel/DPHFw...YybGJsdTRsYg==

TLDR
Auto skuplja podatke o voznji, GM ih prodaje data brokeru, data broker ih prodaje osiguranju.
U ovom slucaju covjeku je skocila cijena osiguranja 80% zato jer je imao puno "near crash events at night" crash events at night su bile njegove macke koje izlete pred auto svaku večer jer je dosao kuci. Inace prate kad vozis, koliko vozis, kako vozis, gdje vozis, kako kocis, kako ubrzavas itd. itd.
GM kaze sve pise u terms and conditions

Poanta je i kako je on kaznjen, za krive podatke i netocne informacije, tako da nam sljeduje i gore sa AI radnicima, al korporacije nije briga, njima je to profit
OuttaControl je online   Reply With Quote
Staro 02.11.2025., 14:53   #832
mkey
Premium
Moj komp
 
Datum registracije: Sep 2018
Lokacija: tu
Postovi: 3,578
Nije istina da ih nije briga, itekako ih je briga i milo im je.
__________________
Citiraj:
Autor George Carlin
But there’s a reason. There’s a reason. There’s a reason for this, there’s a reason education sucks, and it’s the same reason that it will never, ever, ever be fixed. It’s never gonna get any better. Don’t look for it. Be happy with what you got. Because the owners of this country don't want that. I'm talking about the real owners now, the real owners, the big wealthy business interests that control things and make all the important decisions. Forget the politicians. The politicians are put there to give you the idea that you have freedom of choice. You don't. You have no choice. You have owners. They own you. They own everything. They own all the important land. They own and control the corporations. They’ve long since bought and paid for the senate, the congress, the state houses, the city halls, they got the judges in their back pockets and they own all the big media companies so they control just about all of the news and information you get to hear. They got you by the balls. They spend billions of dollars every year lobbying, lobbying, to get what they want. Well, we know what they want. They want more for themselves and less for everybody else, but I'll tell you what they don’t want: They don’t want a population of citizens capable of critical thinking. They don’t want well informed, well educated people capable of critical thinking. They’re not interested in that. That doesn’t help them. Thats against their interests. Thats right. They don’t want people who are smart enough to sit around a kitchen table to figure out how badly they’re getting f*cked by a system that threw them overboard 30 f*cking years ago. They don’t want that. You know what they want? They want obedient workers. Obedient workers. People who are just smart enough to run the machines and do the paperwork, and just dumb enough to passively accept all these increasingly shittier jobs with the lower pay, the longer hours, the reduced benefits, the end of overtime and the vanishing pension that disappears the minute you go to collect it, and now they’re coming for your Social Security money. They want your retirement money. They want it back so they can give it to their criminal friends on Wall Street, and you know something? They’ll get it. They’ll get it all from you, sooner or later, 'cause they own this f*cking place. It's a big club, and you ain’t in it. You and I are not in the big club. And by the way, it's the same big club they use to beat you over the head with all day long when they tell you what to believe. All day long beating you over the head in their media telling you what to believe, what to think and what to buy. The table is tilted folks. The game is rigged, and nobody seems to notice, nobody seems to care. Good honest hard-working people -- white collar, blue collar, it doesn’t matter what color shirt you have on -- good honest hard-working people continue -- these are people of modest means -- continue to elect these rich c*cksuckers who don’t give a f*ck about them. They don’t give a f*ck about you. They don’t give a f*ck about you. They don't care about you at all -- at all -- at all. And nobody seems to notice, nobody seems to care. That's what the owners count on; the fact that Americans will probably remain willfully ignorant of the big red, white and blue dick that's being jammed up their assholes everyday. Because the owners of this country know the truth: it's called the American Dream, because you have to be asleep to believe it.
mkey je offline   Reply With Quote
Staro 02.11.2025., 14:59   #833
Matta
El Mattador
Moj komp
 
Matta's Avatar
 
Datum registracije: Nov 2001
Lokacija: <->
Postovi: 1,922
Citiraj:
Autor OuttaControl Pregled postova
https://www.instagram.com/reel/DPHFw...YybGJsdTRsYg==

TLDR
Auto skuplja podatke o voznji, GM ih prodaje data brokeru, data broker ih prodaje osiguranju.
U ovom slucaju covjeku je skocila cijena osiguranja 80% zato jer je imao puno "near crash events at night" crash events at night su bile njegove macke koje izlete pred auto svaku večer jer je dosao kuci. Inace prate kad vozis, koliko vozis, kako vozis, gdje vozis, kako kocis, kako ubrzavas itd. itd.
GM kaze sve pise u terms and conditions

Poanta je i kako je on kaznjen, za krive podatke i netocne informacije, tako da nam sljeduje i gore sa AI radnicima, al korporacije nije briga, njima je to profit
Ovaj put sam si dao vremena i odgledao čitav video. Nigdje se dokazano ne tvrdi da je to istina nego tip(ovi) zaključuje da je to razlog zašto mu je osiguranje poskupilo.
U slučaju da je to istina osiguranje bi trebalo navesti razloge poskupljenja i ovaj tip bi to pokazao na videu.
Nadalje, da je to istina, pokazali bi i ljude kojima osiguranje NIJE poskupilo a voze isti automobil a nemaju sve gore navedene "prijestupe".
Ne kažem da sve to ne bi moglo biti tako ali ovaj gore video ocjenjujem kao clickbait.
P.S.
Još jedan razlog - "Near collision" ne znači ništa, palo bi na sudu samo tako. Jer j*bati i skoro j*ebati nije ni približno isto.
__________________
Matta je offline   Reply With Quote
Staro 02.11.2025., 15:09   #834
mkey
Premium
Moj komp
 
Datum registracije: Sep 2018
Lokacija: tu
Postovi: 3,578
Evo tu imaš dosta više detalja. Slobodno ti dovodi u pitanje sve što želiš, ali mora ti biti jasno da 99% instagram korisnika ima attention span od max dvije minute.
https://web.archive.org/web/20250906...a-consent.html


Bokte mazo, moraš skinuti video da vidiš koliko traje. Kakve su to legende. Dakle, traje 2:59, vjerojatno se nisu usudili ići na 3 minute jer bi to bio insta mind blown.
__________________
Citiraj:
Autor George Carlin
But there’s a reason. There’s a reason. There’s a reason for this, there’s a reason education sucks, and it’s the same reason that it will never, ever, ever be fixed. It’s never gonna get any better. Don’t look for it. Be happy with what you got. Because the owners of this country don't want that. I'm talking about the real owners now, the real owners, the big wealthy business interests that control things and make all the important decisions. Forget the politicians. The politicians are put there to give you the idea that you have freedom of choice. You don't. You have no choice. You have owners. They own you. They own everything. They own all the important land. They own and control the corporations. They’ve long since bought and paid for the senate, the congress, the state houses, the city halls, they got the judges in their back pockets and they own all the big media companies so they control just about all of the news and information you get to hear. They got you by the balls. They spend billions of dollars every year lobbying, lobbying, to get what they want. Well, we know what they want. They want more for themselves and less for everybody else, but I'll tell you what they don’t want: They don’t want a population of citizens capable of critical thinking. They don’t want well informed, well educated people capable of critical thinking. They’re not interested in that. That doesn’t help them. Thats against their interests. Thats right. They don’t want people who are smart enough to sit around a kitchen table to figure out how badly they’re getting f*cked by a system that threw them overboard 30 f*cking years ago. They don’t want that. You know what they want? They want obedient workers. Obedient workers. People who are just smart enough to run the machines and do the paperwork, and just dumb enough to passively accept all these increasingly shittier jobs with the lower pay, the longer hours, the reduced benefits, the end of overtime and the vanishing pension that disappears the minute you go to collect it, and now they’re coming for your Social Security money. They want your retirement money. They want it back so they can give it to their criminal friends on Wall Street, and you know something? They’ll get it. They’ll get it all from you, sooner or later, 'cause they own this f*cking place. It's a big club, and you ain’t in it. You and I are not in the big club. And by the way, it's the same big club they use to beat you over the head with all day long when they tell you what to believe. All day long beating you over the head in their media telling you what to believe, what to think and what to buy. The table is tilted folks. The game is rigged, and nobody seems to notice, nobody seems to care. Good honest hard-working people -- white collar, blue collar, it doesn’t matter what color shirt you have on -- good honest hard-working people continue -- these are people of modest means -- continue to elect these rich c*cksuckers who don’t give a f*ck about them. They don’t give a f*ck about you. They don’t give a f*ck about you. They don't care about you at all -- at all -- at all. And nobody seems to notice, nobody seems to care. That's what the owners count on; the fact that Americans will probably remain willfully ignorant of the big red, white and blue dick that's being jammed up their assholes everyday. Because the owners of this country know the truth: it's called the American Dream, because you have to be asleep to believe it.
mkey je offline   Reply With Quote
Staro 02.11.2025., 17:11   #835
Libertus
Premium
Moj komp
 
Libertus's Avatar
 
Datum registracije: Jul 2017
Lokacija: Ramura
Postovi: 2,814
Citiraj:
Autor OuttaControl Pregled postova
https://www.instagram.com/reel/DPHFw...YybGJsdTRsYg==

TLDR
Auto skuplja podatke o voznji, GM ih prodaje data brokeru, data broker ih prodaje osiguranju.
U ovom slucaju covjeku je skocila cijena osiguranja 80% zato jer je imao puno "near crash events at night" crash events at night su bile njegove macke koje izlete pred auto svaku večer jer je dosao kuci. Inace prate kad vozis, koliko vozis, kako vozis, gdje vozis, kako kocis, kako ubrzavas itd. itd.
GM kaze sve pise u terms and conditions :)

Poanta je i kako je on kaznjen, za krive podatke i netocne informacije, tako da nam sljeduje i gore sa AI radnicima, al korporacije nije briga, njima je to profit :)
Upitno da li je istina ili nije, ali svejedno dobar primjer za ove koji "nemaju što skrivati" pa im je svejedno da li im država snima i skenira sve poruke koje primaju i šalju.
Libertus je offline   Reply With Quote
Staro 02.11.2025., 17:34   #836
OuttaControl
Premium
Moj komp
 
OuttaControl's Avatar
 
Datum registracije: Feb 2007
Lokacija: Dalmacija
Postovi: 5,872
Pitao sam chatgpt za factcheck prije postanja rekao mi je "substantially supported by credible sources" good enough for me.

Citiraj:
Autor Libertus Pregled postova
Upitno da li je istina ili nije, ali svejedno dobar primjer za ove koji "nemaju što skrivati" pa im je svejedno da li im država snima i skenira sve poruke koje primaju i šalju.


Tocno sam na te ciljao tako ce bit i sa zdravstvom pa bolesne ljude nece osigurati, to se u biti vec sad dogadja, manje u nas nego u ameriki
OuttaControl je online   Reply With Quote
Staro 02.11.2025., 17:35   #837
Bono
Uptime 99.99%
Moj komp
 
Bono's Avatar
 
Datum registracije: Nov 2001
Lokacija: Zagreb
Postovi: 2,631
Takvima nema pomoci...na njihovu nesrecu nisu najbistriji i oni ocekuju od drzave da se pobrine za njih. Takvi najcesce kazu, spijuniraju te ionako cim imas smartphone.
A nemojte misliti da je kod nas isto zdravstvo zagarantirano, moglo bi i kod nas biti kao u americi. I kod nas je vec bilo, ako osiguranje sazna da imas rak ne zeli te osigurati, pa sad ti zamisli koliko su im vrijedni ti podaci.

Ima i onih koji dobrovoljno dijele, kao i u skandinaviji koji su si dobrovoljno ukljucili na kreditnim karticama pracenje CO2 kod kupnje.

Citiraj:
Several car companies in the USA are collecting driving data and sharing it with insurance companies, often through third-party data brokers. Here are some of the key players involved:

General Motors (GM): GM, along with its subsidiary OnStar, has been accused of collecting driving data through its OnStar Smart Driver technology and sharing it with data brokers like LexisNexis and Verisk Analytics. This data is then sold to insurance companies, which use it to assess risk and set premiums. GM has faced multiple lawsuits and investigations over these practices 1•2•3.

Toyota: Toyota has also been under scrutiny for its data collection and sharing practices. The company has been asked to produce information about how it sells and shares data with Connected Analytic Services, LLC (CAS), an affiliate of Toyota Insurance Management Solutions USA, LLC. This data is reportedly used by insurance companies to price premiums 4•5.

Ford: While Ford has stated that it does not sell connected vehicle data to data brokers, it has previously shared data with insurers on behalf of customers who wanted usage-based insurance policies. However, Ford decided to discontinue this practice 4.

Allstate and Arity: Allstate, through its subsidiary Arity, collects a wide range of driving data, including geolocation, driving habits, and behavior, from connected cars and smartphone apps. This data is then sold to third parties, including insurance companies, to justify higher car insurance premiums or to target advertisements 6•7.

Other Automakers: Several other automakers, including Hyundai and Mitsubishi, have been noted for collecting and potentially sharing driving data. The extent of this data sharing and the specific insurance companies involved are not always clearly disclosed 5.

These practices have sparked outrage among drivers and led to legal actions in multiple states. Drivers are concerned about privacy invasions and the potential for higher insurance premiums based on data they were not aware was being collected and shared.
Sent from my SM-S931B using Tapatalk
__________________
“Those who surrender freedom for security will not have, nor do they deserve, either one.”
Zadnje izmijenjeno od: Bono. 02.11.2025. u 18:02.
Bono je offline   Reply With Quote
Staro 02.11.2025., 20:09   #838
medo
#erase startup-config
Moj komp
 
medo's Avatar
 
Datum registracije: Nov 2001
Lokacija: Zagreb
Postovi: 3,730
Privatnost i sigurnost podataka i korisnika
Citiraj:
Autor Bono Pregled postova
A nemojte misliti da je kod nas isto zdravstvo zagarantirano, moglo bi i kod nas biti kao u americi. I kod nas je vec bilo, ako osiguranje sazna da imas rak ne zeli te osigurati, pa sad ti zamisli koliko su im vrijedni ti podaci.
Malo je OT ali možda nekome bude korisno.

Imao sam rak. Mislio sam da me nitko neće osigurati ali evo iz prve ruke sam se pozitivno iznenadio u razgovoru s nekim osiguravateljima.

Prema njihovim statistikama određeni postotak preživjelih od raka su manji rizik nego prosječni građani jer se puno više paze (prehrana, kretanje, izbjegavanje poroka…).
__________________
"It's not a bug, it's a feature!"
1N6pJsvusP7afu23qs1uBscK16wfcG7C8m
medo je offline   Reply With Quote
Staro 02.11.2025., 20:12   #839
Bono
Uptime 99.99%
Moj komp
 
Bono's Avatar
 
Datum registracije: Nov 2001
Lokacija: Zagreb
Postovi: 2,631
Croatia osiguranje isto?

https://www.index.hr/mobile/vijesti/...a/2709156.aspx

Sent from my SM-S931B using Tapatalk
__________________
“Those who surrender freedom for security will not have, nor do they deserve, either one.”
Bono je offline   Reply With Quote
Staro Jučer, 07:22   #840
tomek@vz
White Rabbit
 
tomek@vz's Avatar
 
Datum registracije: May 2006
Lokacija: -
Postovi: 5,066
Ne spada direktno u ovu temu ali...


Citiraj:
"An engineer got curious about how his iLife A11 smart vacuum worked and monitored the network traffic coming from the device," writes Tom's Hardware.

"That's when he noticed it was constantly sending logs and telemetry data to the manufacturer — something he hadn't consented to."
Citiraj:
The user, Harishankar, decided to block the telemetry servers' IP addresses on his network, while keeping the firmware and OTA servers open. While his smart gadget worked for a while, it just refused to turn on soon after... He sent it to the service center multiple times, wherein the technicians would turn it on and see nothing wrong with the vacuum. When they returned it to him, it would work for a few days and then fail to boot again... [H]e decided to disassemble the thing to determine what killed it and to see if he could get it working again...

[He discovered] a GD32F103 microcontroller to manage its plethora of sensors, including Lidar, gyroscopes, and encoders. He created PCB connectors and wrote Python scripts to control them with a computer, presumably to test each piece individually and identify what went wrong. From there, he built a Raspberry Pi joystick to manually drive the vacuum, proving that there was nothing wrong with the hardware. From this, he looked at its software and operating system, and that's where he discovered the dark truth: his smart vacuum was a security nightmare and a black hole for his personal data.

First of all, it's Android Debug Bridge, which gives him full root access to the vacuum, wasn't protected by any kind of password or encryption. The manufacturer added a makeshift security protocol by omitting a crucial file, which caused it to disconnect soon after booting, but Harishankar easily bypassed it. He then discovered that it used Google Cartographer to build a live 3D map of his home. This isn't unusual, by far. After all, it's a smart vacuum, and it needs that data to navigate around his home. However, the concerning thing is that it was sending off all this data to the manufacturer's server. It makes sense for the device to send this data to the manufacturer, as its onboard SoC is nowhere near powerful enough to process all that data. However, it seems that iLife did not clear this with its customers.

Furthermore, the engineer made one disturbing discovery — deep in the logs of his non-functioning smart vacuum, he found a command with a timestamp that matched exactly the time the gadget stopped working. This was clearly a kill command, and after he reversed it and rebooted the appliance, it roared back to life.
tomek@vz je offline   Reply With Quote
Odgovori
Stranica 28 od 29 « Prva 1824252627 28 29

« Prethodna tema | Sljedeća tema »

Uređivanje

Pravila postanja
Vi ne možete otvarati nove teme
Vi ne možete pisati odgovore
Vi ne možete uploadati priloge
Vi ne možete uređivati svoje poruke
BB code je Uključeno
Smajlići su Uključeno
[IMG] kod je Uključeno
HTML je Uključeno
Idi na



© 1999-2024 PC Ekspert - Sva prava pridržana ISSN 1334-2940
Ad Management by RedTyger
Powered by vBulletin®
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.