Mastodawn

https://www.runzero.com/blog/oob-p1-ip-kvm/

this is a great read from @runZeroInc, @hdm, @todb, and Matthew Kienow on a new batch of IPKVMs coming out. I remember this tech was expensive, clunky, and practically only viable for the datacenter when Raritan and BOMGAR were doing it. To see these things popping up for sub-100 bucks is amazing and I'm highly considering grabbing some for my boxes in the basement of my home.

As with all things IoT:

You can't spell idiot without iot
The s stands for security.

As with most things IoT-related, expect ubiquity to result in seeing MANY of these things in the wild. Also, Security is kind of an afterthought with IoT devices. Trust me, I know.

My Corvid homie @cR0w has supplied me with more IoT command injections and buffer overflows than I thought possible, so... make sure you keep these things local-only behind a VPN, tailscale, or hopefully if they provide cloud-based management, you trust the cloud provider to one, support the product, and two be reasonably secure. Which... its the cloud, so don't count on either.

Out-of-Band, Part 1: The new gen of IP KVMs & how to find them

We begin the series exploring security risks of OoB management devices like BMCs, serial console servers, and IP-enabled KVMs, and share how to find them.

runZero

Gabriel 1d ago

Show thread

a beautiful bitch 2d ago

Seriously though i’m biased because i’m a fiber arts sicko but if you want to see a c. 1500 masterpiece in paris i highly recommend skipping the mona lisa and seeing the lady and the unicorn tapestries:

- way less people
- rabbits
- you can get like 1 inch away if you want
- dozens of rabbits
- looks even better in person, instead of much worse
- seriously they’re HUGE
- moving visual disquisiton on the 5 senses plus bonus mysterious sixth sense
- it has bunmy rabbits

Cat with cat ears

ity [unit X-69]2d ago

Moshidon crashed while I was hand typing the alt text for this image and deleted all of it. I give up - will alt text it later, or if someone sends the alt text to me.

TL;DR, Spanish vs English, remembering which way to turn a screw.

Gabriel 2d ago

Show thread

Elosha 2d ago

@nixCraft Well, then theft of intellectual property and commercial exploitation is fine! 🤦‍♀️ However Archive.org nearly was shut down for fair-using books. Sure, they just benefitted people who wanted to learn, which is evil, instead of megacorps. Or remember private copies of music and software? Evil! Commercial, you need to be.

Gabriel 2d ago

nixCraft 🐧2d ago

A judge has ruled in favor of Meta, saying training AI from copyrighted and pirated books is fair use.

In a similar case a judge ruled in favour of Anthropic.

It is a sad day for book writers. You have been robbed of revenue by the world’s richest people. They will make tons of money while book writers struggle to pay rent and food. There is no justice for artists and writers. My heart goes out to them.

Gabriel 2d ago

Show thread

Natasha Nox 🇺🇦🇵🇸2d ago

@ElysianEve @ondra @dopatwo @signalapp @Mastodon It would be nice if there was a federated/decentralized alternative that's as good as Signal (ease-of-use + security + feature set). Unfortunately there isn't.

Gabriel 2d ago

Signal Mar 25

Signal is open source, so our code is regularly scrutinized in addition to regular formal audits. We also constantly monitor security@signal.org for any new reports, and we act on them with quickness while also working to protect the people who rely on us from outside threats like phishing with warnings and safeguards.

This is why Signal remains the gold standard for private, secure communications. 5/

GitHub	https://github.com/gabriel-434/
Telegram	t.me/Gabriel434