„Expertengenerator“ steht in meinen Notizen. Ich wollte einen einfachen Generator bauen, der zufällige Expertennamen und Fachgebiete generiert (vermutlich hoher Tagesschau-Konsum zu der Zeit). Das war BEVOR es Text-zu-Bild-Modelle gab. Jetzt:
@grumpygamer
"Slippery slop" LOL 💯
I'll note that this happened on a modern mobile phone, the most secure computing platform currently available. Logins simply should not "expire". There's nothing that makes a high-entropy token in secure storage suddenly go bad.
If you're confused enough to also then treat the same device as very trusted, that's just icing on the cake.
Even more: the token flow didn't work and I had to instead get an OTP by email. One of the, ahem, less secure transports. So the entire theater just collapsed.
The absolute brain damage that developers have sustained when being subjected to "login expired" messages at a formative age without anyone telling them that this is not normal and should not be emulated.
Just now: "Your login session has expired, please log in again" … "another device is logged in to the account, please enter the token code shown on the other device".
So… the device is logged out because it might be untrusted, but is also the root of trust for new logins?
Cool.
Musst halt danach eventuell die Geranien neu pflanzen.
Ist das Rätsel, wie man die Nachrichten loswird?
Ich hätte Merz auch ab Tag 1 seine Arbeitsunfähigkeit bescheinigen können.
TIL: Ubuntu 26.04 *still* comes with `HashKnownHosts yes` in /etc/ssh/ssh_config
(I had an interaction a couple of years ago where I was publicly annoyed that OpenSSH would set (I thought) HashKnownHosts by default, and one of the developers went "WTF? No, we don't?" at me, and then we discovered that Ubuntu sets this, which they didn't even know and don't recommend.)
I talked about Buffy the Vampire Slayer on a work call and one of our interns said “oh yeah my grandma told me about that show” so I’m just going to lay down and die now.
@mekkaokereke I've seen this one floating around to capture the way incumbent Dems are meeting the moment.
The inscription on this monument built by the Ancients was damaged, but we were still able to translate it. Looks like we will find many valuable relics and treasure if we dig here!
RE: https://mastodon.tds.xyz/@whoopsie/116834268971705198
There's something about the phrase "loss of the primary, backup, and alternate methods".
Something that one hopes will lead to very pointed questions, asked in a rather sharp tone.
(LONG POST) Fell down a fascinating rabbit hole today about a few little boys and a little girl in ancient China about 2100 years ago.
Emperor Wu went mad with paranoia in his old age, accusing everyone of using witchcraft against him. This led to him needlessly launching attacks on his own eldest son, who never intended to betray him, and the prince's own sons. This whole branch of the royal household was wiped out in the attack. Except... there was a baby. A brand new baby boy, only a few weeks old, the Emperor's great-grandchild. The baby's name was Bingyi.
Someone brought baby Bingyi to a prison rather than kill him as ordered. The prison warden personally took good care of him; when word got out and he was ordered to finish the job, he refused to kill the baby, knowing it would presumably cost him his life. However, the Emperor came to his senses and stopped the witch hunt. The order to kill baby Bingyi and this random prison warden along with him never came. Bingyi safely disappeared into the household of distant relatives, to live an ordinary middle-class life.
Emperor Wu died of old age, and his dying wish was for the crown to skip over all the sons he distrusted and go straight to the only one not yet old enough to have earned his distrust, the surprise offspring of a May-December fling. Emperor Zhao was still a small child. He was immediately married-on-paper to another small child, Lady Shangguan.
A few years later, Lady Shangguan's family was accused of planning a coup by Zhao's regent and executed, but she was spared on account of being too young to have possibly been in on it.
Zhao was, apparently, a completely reasonable and level-headed young man. He showed wisdom in dealing with court rumors and did not do the ridiculous things young people with power often do. When he found out that Bingyi was alive, he visited with the other boy, treated him with kindness and made sure his needs were met.
Unfortunately, Zhao dropped dead when he was 20. (No indications of foul play, he was just unlucky). He had no children; his marriage to Lady Shangguan may not have even ever been consummated. The Empress Dowager was 15 years old.
A nephew of Zhao was brought in to be the new emperor; he was slightly older than Lady Shangguan, at 17. And he... partied. Immediately. Extremely. Incessantly. He was hinted to stop. He was told to stop. He was told more boldly and explicitly to stop. He did not stop.
An entire 27 days after this loser nephew took the throne, Lady Shangguan put on her best dress, entered the court, sat down on the throne, and called for the nephew. He came in. She unrolled a list of over 1000 complaints that had accrued since he arrived at the palace. She fired him. A 15-year-old girl with no actual hard power fired the Emperor of China in front of all his ministers. And he turned around, left, and went home.
(And in a very Ancient Chinese approach, he was allowed to live but most of his attendants were executed for allowing him to grow into such a brat. Only a handful who were known to have boldly rebuked him were spared.)
Lady Shangguan was now in direct defacto control of the empire. However, she understood that trying to hold on to that for the rest of her life would be destabilizing, since her claims were paper-thin as the childless widow of a child-emperor, whose family was already executed for treason. She sent for Bingyi.
Bingyi ruled under the name Emperor Xuan, and is considered to have been one of the wisest emperors, being possessed of common sense and moral sympathy for the poor after a heathy, normal upbringing. Lady Shangguan quietly stepped back after thus saving the empire from disastrous misrule, never remarried, and was pretty much the only person on either side of her family to never get executed, exiled or driven to unalive.
Lady Shangguan: https://en.wikipedia.org/wiki/Grand_Empress_Dowager_Shangguan
Emperor Zhao: https://en.wikipedia.org/wiki/Emperor_Zhao_of_Han
Bingyi / Emperor Xuan: https://en.wikipedia.org/wiki/Emperor_Xuan_of_Han
Loser Nephew: https://en.wikipedia.org/wiki/Prince_He_of_Changyi
Did you know that some data centers use dihydrogen monoxide, an asphyxiant linked to roughly 250,000 deaths per year?
@jaj @ck0 @thedarktangent @torproject you can check the #Mullvad tag, but TL-DR: one the founders and CEOsof Mullvad donated a staggering amount of money to a swedish extremely racist and nationalist party, single-handedly allowing those assholes to aim for nation-wide elections.
For #DEFCON to do private email we would want to host our own servers to avoid the 3rd party legal doctrine, and keep them secure.
No problem, we have a secure location and lawyers.
Back during COVID when we were investigating this it was still possible to gather some open source info on how large other private email services were. How big was the market? Could you make enough money to hire the people and buy the servers?
MailFence, Proton, and others showed it was possible if you were very efficient. Great!
Then I spoke with someone who worked at a white label email service provider. I realized DEF CON would never do a private email service for two reasons:
CSAM: They explained they had about 10 people dedicated to responding to legal requests around CSAM, not including their lawyers and LE relationship people.
SPAM: They had another room with about 30 people dealing just with spammers and the impacts of spammers. Managing their ASNs, netblocks that get lower reputation on blackhole lists, moving customers to "clean" netblocks when a shared block gets polluted by spammers, etc.
Conclusion? If you are very successful you can look forward to having a room of 40 people dealing with LE, SPAM, CSAM, Networking, and that's before you add on customer service. That doesn't seem fun or very DEF CON Hacker anymore.
Next up, VPN.