bflesch

19 ms·

331.
by bflesch 9mo ago
If US had such amazing offensive cyber capabilities, why are bug bounties like HackerOne not already bankrupt? The NSA hackers could just easily farm all those bounties and make significantly more than they earn at the government. I feel th
332.
by bflesch 9mo ago
Ok so we settle for technically incorrect ;)
333.
by bflesch 9mo ago
Thank you, I missed the part with several "top of the chain" providers. So all of them would need to go down at the same time for things to really stop working. How many "top of chain" providers is letsencrypt using? Are
334.
by bflesch 9mo ago
[flagged]
335.
by bflesch 9mo ago
This sounds like a very good thing, like a lot of stuff coming from letsencrypt. But what risks are attached with such a short refresh? Is there someone at the top of the certificate chain who can refuse to give out further certificates wit
336.
by bflesch 9mo ago
Makes sense, thanks for elaborating. Just the logistics of it sound like a lot of overhead.
337.
by bflesch 9mo ago
I can see how a team of cyber bureaucrats is required to type in the fancy n you are using in your password. At least it is safe against brute forcing attempts with standard settings.
338.
by bflesch 9mo ago
My original post was more focused on defensive capabilities, but those things are hard to discern - you need to know about vulnerabilities in order to protect yourself from them. If the damage is done, of course the US can massively retalia
339.
by bflesch 9mo ago
source: toilet in google headquarters
340.
by bflesch 9mo ago
[flagged]
341.
by bflesch 9mo ago
I click on the link and see that ublock origin blocks a total of 15 tracking scripts on your health-related website. At the bottom there is a "cookie management" popup and I wonder what went wrong that your website includes Google
342.
by bflesch 9mo ago
US cyber capabilities have an edge because they can analyze all of our data stored with US tech companies and they have interception points on all major internet cables. Their human intelligence is much better prepared to "convince&quo
343.
by bflesch 9mo ago
Good point. It's easier to say you got hacked by nation state actors than to tell your boss you accidentally screwed up a major system with no way to recover. It's not like 99% of the management could tell the difference.
344.
by bflesch 9mo ago
Sounds too good to be true. I'd love to believe it. Didn't russia claim to have the full Epstein files, so how did they get them if not by hacking US government? Attribution of cyber attacks is extremely difficult, and US seems to
345.
by bflesch 9mo ago
You're using "false equivalence" bias. Not every government is bad, especially if you still have russia, iran, and others as ongoing contenders for worst crimes against humanity. So saying "every government is bad"
346.
by bflesch 9mo ago
It happened to 90s systems which were used in the 2000s so you are still technically correct ;)
347.
by bflesch 9mo ago
Let's hope those chicken never come home to roost. NSA has a history of losing offensive cyber tools. IIRC both Texas and California had widespread power outages in the last few years. I am not convinced that US power grid is much bett
348.
by bflesch 9mo ago
Even with white labeled products so they stay legally compliant, is it really justifiable to increase the risk? They're having people flying in and out for "sales meetings", shared office spaces, devices, maybe even staff ove
349.
by bflesch 9mo ago
http://xcancel.com/i/status/2011803910155935764
350.
by bflesch 9mo ago
I assume the traffic over Starlink is encrypted, so what exactly do they mean with "personal information"? Like the very basic customer details and everything they can get from their analytics? For my taste the sentences are over
351.
by bflesch 9mo ago
Cloudflare definitely gets positive PR out of this which makes people forget their CEO's recent meltdown on twitter.
352.
by bflesch 9mo ago
I heard they are hiring in Cloudflare PR department
353.
by bflesch 9mo ago
Yes. I recommend everybody to do a deep dive into font file formats and you'll see a lot of monsters hiding.
354.
by bflesch 9mo ago
Google has carte blanche to lie to foreigners for national security purposes, it's not even illegal for them. The data is fed into the mass surveillance systems. IP, user agent, language headers and network timings are enough to finger
355.
by bflesch 9mo ago
> This website collects anonymous usage analytics data via GoatCounter and Umami. My uBlock origin shows that googlefonts.com and fonts.googleapis.com are being blocked. It irks me a bit that your message explicitly mentions two trackers
356.
by bflesch 9mo ago
I feel the narrative on these kind of issues should be updated. We've been using their framing of "algorithms" but it is taking away all responsibility from the US tech workers who are actually designing and running Google. T
357.
by bflesch 9mo ago
I also cannot understand how they mix up their brands so much, even people working in the MS ecosystem need to learn new brands every year.
358.
by bflesch 9mo ago
It's a weak argument that Europeans are legally bound to forever buy iPhones "designed in california" because they used to buy them in the past. Other US companies like Tesla massively lost market share already, whole US stat
359.
by bflesch 9mo ago
> Go ahead, call me a prick, but you're a good customer, and I know you'll keep buying. Your overconfidence might set you up for disappointment, just like those US states who are begging Canadians to buy their booze. I understa
360.
by bflesch 9mo ago
Read the book "careless people" there it is clearly explained how Facebook is responsible for Rohingya genocide. The problem is that the digital world creates real-world harm to people, and US tech companies are very far from acti

More ›