lurch (he/him)

What I don’t understand is why devs of AI bots would try to masquerade as old Chrome versions.

It’s because the bot maintainers don’t update it much. Once it works for their purposes, they just don’t touch it any more until it breaks. Chrome on the other hand gets a lot of updates and automatically increases some version number every time.

A self destruct could fix it 😆

update: many hosters did. some even temporarily took down sites when the details and patches were out, until they had the systems patched, so they wouldn’t be attacked while still in the process of updating

the hosters will probably patch this for most ppl.

KeePassDX can store passkeys in a local encrypted DB you can backup like your other files. I plan to migrate to it. (Using another KeePass implementation right now that doesn’t do passkeys.)

KeePassDX can store passkeys in a local encrypted DB you can backup like your other files. I plan to migrate to it. (Using another KeePass implementation right now that doesn’t do passkeys.)

I think they use nonsensical pics now, instead of matching slop, which ppl found irritating.

Classic C problems. You don’t get things like that in Java, just to pick one. Many helpful libs are C tho.

yeah, but nobody stops you from adding error correctiveness. you could for example just put the whole thing three times with a seperator.

however there’s also an important point for text files: you can post them wherever you can write text messages. being able to digitally sign them even adds to your freedom, as you can post anonymously and your readers are able to verify it’s from the same source. like you could post your heated political manifesto or cousin incest smut on 4chan or some darknet forum and if you later make a part 2, ppl will be able to tell you apart from imposters.

no, i mean, you say text files are insecure and you prefer binary.

while it is true that processing text files needs additional code (validating/converting charsets/encoding), which increases the number of potential attack vectors, security threats introduced by this are not a fault of them being text, but of the parser code.

at the end of the day the attacker just switches from text editor to hex editor to prepare a malicious file.

idk about the specific formats, but i don’t think you can say that in general. what are those two formats and why does it make a difference in this case?

Actually it’s not if it was by accident. Still could be liable for damages tho.

“Oracle” is actually a nice name per se. Maybe too nice for that company 😄

Maybe sandbox it. Put it in a chroot or VM or something. It doesn’t always work as there are sometimes exploits to break out of those, but worth a shot.

Also, if you’re just webbrowsing, you could buy a cheapo outdated notebook/PC and slap it on there. I got old hardware even for free a few times. You can still use it for simple things, like webbrowsing or retro games.

It seems they are addicted to cyberattacks. They can’t even lay low in prison.

tools like Trivy, KICS, LiteLLM, and the Telnyx Python SDK

deleted by creator

Only works in a lab with an AI specifically trained to detect specific sites on one test PC

script kiddies evolved into ai kiddies

this is a shop owner account security problem. if someone can place the required malicious google tag on your site, they could also do whatever else they wanted. they could put any custom JS, for example. this stealer is just one of many payloads.