Email or username:

Password:

Forgot your password?
325 posts total
Sominemo

Okay so the idea is

You have two WPA3 APs which share a password but have different SSIDs. You as the user know that one of them is not secure somehow. You might also have a VPN configured to disable automatically only on the secure SSID.

An attacker creates an AP near, with the secure SSID, and relays your connection to the insecure one. The client device will show secure SSID but connection security will be degraded, and VPN will disengage.

top10vpn.com/research/wifi-vul

Okay so the idea is

You have two WPA3 APs which share a password but have different SSIDs. You as the user know that one of them is not secure somehow. You might also have a VPN configured to disable automatically only on the secure SSID.

An attacker creates an AP near, with the secure SSID, and relays your connection to the insecure one. The client device will show secure SSID but connection security will be degraded, and VPN will disengage.

Sominemo

Not sure how many networks would actually rely on SSID or would have two WPA3 APs with different SSIDs one of which is vulnerable somehow. Sounds a bit exotic.

But authors show one good case with eduroam, where they make university devices from Campus A connect to spoofed APs relaying to less secure devices in Campus B. Client devices still think they are connected to Campus A and disengage VPN.

And there an attacker can theoretically MITM into plain text traffic. Because it's time to go TLS.

Sominemo

Signal is an unfeasible alternative to Telegram or any other cloud based messenger while it remains all local storage-only. Do you really want to be forced to keep all the furry stickers people use etc. in your constrained local storage you can't expand easily?

kib@wetdry:~$ :idle:

@Sominemo id rather deal with that than risk having my messages anywhere near Elon Musk

Sominemo

Google is pushing AI so hard they'd rename Google I/O to Google A/I.

Yeahhh, you're right, I'm giving them ideas.

But look, from this class name in Google Pixel, it seems like they get paid for every use of "AI":
com.google.android.apps.miphone.aiai.app.wallpapereffects.AiAiWallpaperEffectsGenerationService

Sominemo

Lmao, this was the worst Google I/O ever, every single thing announced is about AI and not a single feature is in general availability today: either private beta or "available later this year".

#GoogleIO

Sominemo

Me everytime I try to explain what is Mastodon

Show previous comments
Beldarak

@capetaun

I'll never understand why Mastodon has that reputation (which sadly hurts it a lot when it's simply the better alternative to Twitter. Bluesky just added gifs, LOL and Threads wasn't even available in Europe for the longest time).

Maybe I've got bad memory or something but it was just like creating an account for any other website for me, except you have to chose your instance, which was a non-issue. Just pick social or your main interest.

Jigme Datse

@capetaun I see it as not really much different than the people saying, "hey contact me on this..." platform. Mastodon just isn't as well known by the people who insist on Signal, Instagram, Telegram, who knows what else... TikTok. I know who *most* of those people turned out to be (if I found out almost exclusively, though they often just disappear).

Sominemo

Of course you two idiots have no clue about your competitors, the fact Signal was initially funded by a US gov open fund is common knowledge for anyone who mindfully considered encrypted messaging and googled about it at least once

Григорий Клюшников

А откуда у тебя старый интерфейс твиттера 🤔

Sominemo

YouTube you absolute monster, you show me seal videos in recommended, and I do love watching them, but I shouldn't be watching them, and pressing "Not interested" on them feels so rude because I love them.

Sominemo

I missed _fibre_ optics Friday, oh noes

Sominemo

My little WordPress
My little WordPress

ₐᴀA𝗔

Sominemo

Gemini just slid into my DMs!! xD

Sominemo

Okay, what if- what if we declare a new language among instances and call it shitpositng-en.

Sominemo

Stuck in my head now, this song is so hilarious and funny

youtube.com/watch?v=GFokXnCCMf

Sominemo

Google Chrome added an unnecessary popup when you add a bookmark, hiding options to edit the bookmark or delete if it was accidental (a common case for me) behind an extra click.

No, clicking the bookmark button again doesn't un-bookmark it, it just closes the popup.

I'm not sure what purpose this popup is supposed to serve. To clear confusion if the bookmark was indeed saved when you clicked the button? Was it really a problem? Never seen anyone confused with the old behavior.

Sominemo

Haha, new update about the Twitter email delivery issue. Seems like the issue wasn't on my end after all.

I talked to my hoster and they found the issue in their logs: Twitter fucked up HELO header, which triggers anti-spam.

> Postfix: 450 by smtpd through no-relay with code 4.7.1 (<spring-chicken-bh.x.com>: Helo command rejected: Host not found).

Funny that it isn't an issue for Gmail and iCloud, guess these just had to adapt to Twitter's mistakes.

#Twitter #email

Sominemo

UPD: Wasn't SPF
collar.place/@Sominemo/1120600

I've complained about not being able to receive verification codes from Twitter to get my data export earlier.

Uhhh.. it seems like having multiple domains in SPF record caused the issue for me? I'm not entirely sure about it yet though.

If it is indeed SPF — WTF? It's just for received email verification, why does it cause delivery problems TO my domain from Twitter?

Sominemo

But I tried switching to iCloud custom domain purely and it worked with it, then I switched back and it kept working until I edited the SPF record.

I'm rate limited right now to keep experimenting, though.

Go Up