BrianKrebsDec 23

When an entire class of technology states on the packaging that it was made in China but intended "for overseas use only," this should really give you pause before plugging it into your network.

You will find this verbiage on a lot of Android TV streaming boxes for sale at the major retailers. There's a very good reason the country that makes this crap doesn't want it on their own networks. My advice: If you have one of these Android streaming boxes on your network or get one as a gift, toss it in the trash. I'll have a lot more about this in the New Year, but these things are responsible for building out a botnet that currently has ~2M devices and is growing rapidly. https://blog.xlab.qianxin.com/kimwolf-botnet-en/

Show threadRealGene ☣️Dec 23
@briankrebs
The fake CE Mark (actually China Export) is 👨‍🍳💋
Show threadcheesefoxDec 23
@RealGene @briankrebs no, that’s the proper CE mark; the China Export one is lacking the spacing between the letters
Show threadSven Slootweg, low-spoons mode ("still kinky and horny anyway")Dec 24

@cheesefox @RealGene @briankrebs FYI, the EU has publicly stated in the past that the "China Export" thing is an urban legend and the spacing or shaping of the letters is not relevant for whether something is (or can claim to be) CE-certified, which is a self-certification for most product categories anyway.

Edit: I think it was the European Commission who stated this, specifically.

Show threadcheesefox
@joepie91 @RealGene @briankrebs oh, boy https://www.europarl.europa.eu/doceo/document/P-6-2007-5938-ASW_EN.html pretty much suggests that the mark is so abused as to be completely meaningless \o/
Parliamentary question | Answer to Question No P-5938/07 | P-5938/2007(ASW) | European Parliament

Answer to Question No P-5938/07

Dec 24 at 7:19pmWeb
Show threadSven Slootweg, low-spoons mode ("still kinky and horny anyway")Dec 24
@cheesefox @RealGene @briankrebs I mean, I wouldn't say it's entirely meaningless (falsely printing it can be prosecuted as straightforward fraud rather than something harder-to-make-stick like "false advertising" or "unsafe product") but the fact that for almost everything it's self-certification so you don't need to report anything or have anything checked by a third party, certainly makes it less reliable than people often assume it to be... 😐
Show threadSven Slootweg, low-spoons mode ("still kinky and horny anyway")Dec 24
@cheesefox @RealGene @briankrebs (A notable example of an exception is medical equipment, which has to be certified by a certification body and also requires the CE mark to be printed on the product itself alongside the number of the certification body - this is why fake FFP2 masks can often be identified by missing that print or omitting the number, for example)