

-
Post your actual configs and logs or people will only be able to guess. (Censor any secrets.)
-
My guess: It’s probably your nginx config.
-
Why are you using 0.19.4? That version is over a year old.
Post your actual configs and logs or people will only be able to guess. (Censor any secrets.)
My guess: It’s probably your nginx config.
Why are you using 0.19.4? That version is over a year old.
Clickable: [email protected]
Fun idea. Subbed.
The command you’re looking for is lsusb
. There’s going to be a lot in there, but for a security token like that, you’re probably looking for something that says “yibikey”, “Fido”, or “u2f”.
So what you meant was: this isn’t enough evidence to change my mind.
No.
One thing getting more upvotes than another isn’t somehow evidence that reddit is manipulating anything. There’s no immutible law that the original source of something should naturally get more upvotes than anything else. I find that the opposite is most often the case, even when the re-blogged story is crap.
That is not a repost, this is an other article from ProPublica
Ah, I just assume that was a slightly different title for the same article. Maybe a mod made the same assumption.
Are you joking with me? They are using a paraphrased title.
Well, the first part is. But, I don’t know what “munching” means. The second part of the Ars title actually says what it’s about. Don’t get me wrong, I can probably make a guess. But when you’re scrolling social media, I don’t think anyone is stopping to think about what a title really means. If it’s not obvious at first glace most people are just scrolling by. The Ars title, at least to me, skims as “AI bad” since those are the words anchoring each end of the title, that’s probably enough all by itself to get some people to upvote.
I am really curious, what sort of evidence you want/expect to see?
Literally anything vaguely conclusive. I’m not saying you should go find more evidence for me or anything. I’m just trying to explain why I don’t find your evidence here convincing.
I suspect that Reddit has more than enough money to be competently shitty. So, if they are doing what you suggest, unless they fuck up or decide they don’t care, you might not be able to find solid evidence.
I don’t think that shows what you say it does.
First, deleting a repost is clearly not evidence of any kind of bias.
Second, maybe Ars is just more popular/trusted? Maybe it’s more upvoted because the Ars title is more meaningful, it’s super well known that people mostly only read the title.
I’m not saying reddit isn’t manipulating things, I’d be shocked if they weren’t. But this isn’t really evidence that they are.
I agree that would make sense. I think it’ll come with time.
To others, I’m pretty sure what OP is suggesting is just a generic activity pub server that all the various front ends could use.
I’m pretty sure this is what the original (?) authors of the AP spec intended and that’s why they specified a client-server protocol. My understanding is that (almost?) no one uses that API though, they all just specify their own.
Oh the irony of using a sharrow with that slogan.
Fry and the Slurm Factory
Have they said that recently? The only definitive comment I remember from them was something along the lines “definitely not in the next 2-3 years” around launch, which was 3 years ago.
Not saying that means I “expect” it’s happening, just curious if you know of anything more recent that says its not happening.
It’s not even over USB by default. It’s an internal binary driver API. The USB part is a custom firmware for the ESP that exposes that api via USB that the people giving the talk wrote because it’s useful for pentesting / development of exploits for other Bluetooth devices.
Yep, I’m seeing it now too. 👍
I know this website seems sketchy/scammy AF, but I found that these actually do a good job dimming the LEDs to reasonable levels, but keeping them visible.
https://www.lightdims.com/store.htm
I imagine (mostly because of all the “patent pending” bs) that this is a film you just just buy from somewhere else way cheaper, I just don’t know what it is.
Idea Not Found
Tried creationg an account and still don’t see it.
Another test.
Edit: Hey, @[email protected], ding dong?
Test
@[email protected], blah blah, blah
Maybe we can find out for sure through the magic of the fediverse…
@[email protected] Is the “backdoor” mentioned in https://www.tarlogic.com/news/backdoor-esp32-chip-infect-ot-devices/ about what you shared in your RootedCON talk? If so, how worried should people using devices containing ESP32s be?
I don’t think is is a backdoor. At the moment I wouldn’t consider this article any more than FUD.
It’s unclear to me if the security company has actually said what the vuln is or not, but if it’s what was presented in the slides linked in the article this is at worst something that can be “attacked” from a computer connected via USB (and I’m pretty sure it would also require special software already on the ESP32), where the attack is sending out possibly invalid bluetooth messages to try to attack other devices or flashing new firmware to the ESP itself. It’s not a general “backdoor” in the ESP32 itself. At least that’s the best interpretation I’ve been able to make. Happy to be corrected if anyone finds more info.
I mean, if it were a backdoor, the one thing you can be sure of is that the people who put it there wouldn’t be calling it a backdoor, ever.
Though, I think it’s worth pointing out that the while the security company’s blog calls whatever it is a “backdoor”, “backdoor” (nor “puerta” (though, I have no idea if that would be translated literally or to something else)) doesn’t appear in the the slides. So I’m going to lay that one at the marketing people trying to drum it up into something more impressive than it really is.
Before anyone thinks this could be good news for EA…
A leveraged buyout from a PE firm means they’ve decided EA needs to die and they’re going to pick the carcass clean.