Gonçalo Ribeiro

@goncalor@infosec.exchange
342 Followers
446 Following
3.4K Posts
Defend. Pwn. Infosec. Free software. Vim nerd. #rustlang #electronics
websitehttps://goncalor.com
GitHubhttps://github.com/goncalor
Gonçalo Ribeiro1h ago
da_66712h ago
trying nobara on my old origin PC laptop. It's not really that old, but Microsoft thinks it a quad core system with over 1TB of SSD, and 32GB of ram can't run win11 because it lacks a TPM, so now it gets to become my Linux playground before I commit to LInux on my primary desktop. I really hope this goes well.
Gonçalo Ribeiro18h ago
Javier Jimenez Shaw22h ago

At the Comedy Wildlife exhibition in Madrid.

https://www.mncn.csic.es/es/visita-el-mncn/exposiciones/comedy-wildlife-premios-de-fotografia

#wildlife #photography

Gonçalo Ribeiro18h ago
daniel:// stenberg://18h ago

> AI assistance was used to help structure and format this vulnerability report.

That was a really stupid idea.

Gonçalo Ribeiro1d ago
The Wee Owl Art1d ago

Edinburgh Castle stands on Castle Rock, which has been occupied by humans since at least the Iron Age.
https://theweeowlart.etsy.com/listing/1886833786

#FediGiftShop #ScottishArtist #MastoArt #CreativeToots
#Landscape #Edinburgh #Scotland #OriginalArt #Drawing #PenAndInk #ColourPencil #MixedMedia #Painting #Artwork #TraditionalArtist #ArtFromScotland #GiftIdeas #ArtShop

Gonçalo Ribeiro1d ago
vascorsd1d ago

Faking a JPEG | Lobsters

https://lobste.rs/s/s6yydx/faking_jpeg

Faking a JPEG | Lobsters

Gonçalo Ribeiro1d ago
Kevin McShane1d ago
This is so dumb i'm sorry
--
#comics #kevincomics #hbo #hbomax
Gonçalo Ribeiro1d ago
JayeLTee2d ago

I received an email earlier this week from EA asking if I wanted to be added to a public acknowledgement page they were creating for individuals who responsibly disclosed vulnerabilities to them.

For all the shit people give EA, of the 100+ companies I contacted in the last two years, they were the only company I would say had a decent incident response.

They fixed the issue within 12 hours after validating it as critical, and proactively provided me multiple updates over time.

When the IR was done on their side, they reached out again with some more information about the potential impact if the issue hadn't been solved quickly, and also offered me a reward.

I did not have to keep chasing anyone for updates, I wasn't asked for non-disclosure, or offered money in exchange for it, and people replied instead of ignoring me.

I wasn't blamed for their mistake, either, or reported to the authorities.

Unfortunately, at least one or multiple of the things mentioned above are present in most of my other incidents reported; it's a real shit show out there.

#cybersecurity #infosec #responsibledisclosure #vulnerability #ea #electronicarts

Gonçalo Ribeiro3d ago
Secure ICS OT 3d ago
Gonçalo Ribeiro3d ago
Kyle Ford3d ago
Gonçalo Ribeiro3d ago
Marcus Hutchins 3d ago
A programming fact that still amazes me is that the HTTP header which containers the referring url is called "referer", because the developer spelt "referrer" wrong and the spell checker didn't catch it, so it made it into the official standards and they just never changed it lmao
×
Show threadQuixoticgeekJun 29

To illustrate just how much of a challenge this is, we need to cross the pond to LA. And perhaps the pinacle of poor bus shade design.

La Sombrita. The design of this is so notoriously bad that I, a geek who's never set foot in the US has heard how bad it is.

This is a cautionary tale of the competing obstacles to proper people centred infrastructure. Announced with some fanfair as a shade solution for bus users in LA. It's been universally mocked. But how did it happen?

11/n

Show threadQuixoticgeekJun 29

La Sombrita came about due to the competing jurisdiction wrangling of the LA street.

The transit authority don't own the pavement, so can't build a shelter there. They can't take space from the road, cos car space is sacred. They often also have to wrangle private interests in the areas around the bus stop too. The result is the only place the transit authority can put anything is on the bus stop pole itself. The need to handle winds dictate the perforated design. La Sombrita is...
12/n

Show threadQuixoticgeekJun 29

Basically all they could do within the constraints of the various stakeholders of an LA street. The podcast 99% invisible have am excellent episode that details how this all came about, I highly recommend a listen (https://99percentinvisible.org/episode/shade-redux/).

But the rest of us need to heed La Sombrita as a cautionary tale. And in the meantime time pressure local councils to build better public transport infrastructure, and of course plant more trees. Lots more trees.

13/13

Shade Redux - 99% Invisible

This past May, the city of Los Angeles rolled out a brand new, state-of-the art feature for bus shelters. It’s called La Sombrita. La Sombrita is a metal screen that’s intended to provide shade for the thousands of people who ride the bus every day. The shade screen is about two feet wide, ten feet

99% Invisible
Show threadQuixoticgeekJun 29

PostScript. Some of you are raising eyebrows at the feeling 30°C cooler claim. That's based on research by TU Delft. Note "feels cooler" Vs standing on direct sunlight.

https://www.tudelft.nl/io/onderzoek/sustainability/i-tree-20-nl

A summary of the research in English from nl times:
https://www.dutchnews.nl/2025/06/trees-are-natures-air-conditioning-lowering-city-temperatures/

i-Tree 2.0-NL

TU Delft
Show threadBashStKidJun 29
@quixoticgeek Combination of less direct sun, much less reradiated ground heat, and moderation of humidity?
I don’t know if there’s a small psychological aspect from simply seeing green ?
Show threadQuixoticgeekJun 29
@BashStKid there is a psychological impact from nature. And trees can be enough for that.
Show threadKatLSJun 29
@quixoticgeek @BashStKid I still say vines are part of the solution - but I’m in #missouri where vines abound . Smaller roots then trees, not gonna break in a storm if they get cut back every winter, shade, berries for birds, sometimes flowers for pollinators- this will require collaboration with botanists and gardeners. God forbid a non grower choose the species- that NEVERgoes well.
Show threadBashStKidJun 29
@KatLS @quixoticgeek Interesting idea. Would that need some kind of sparse support structure (wires?) above the pavements?
Show threadKatLSJun 29
@BashStKid @quixoticgeek existing shelters would do where those are in place. Otherwise, a wide metal mesh may be ideal . You’d need something people won’t damage being people.
Show threadPlsik (born in 320 ppm) 🇨🇿🇺🇦🇵🇸Jun 29
@quixoticgeek Any tree, especially a deciduous tree, is practically an air conditioner that runs on solar energy. The tree literally draws water from the ground and evaporates it through microscopic holes in the leaf surface. It can regulate these vents so that it maintains a constant temperature of around 20˚C above the leaf surface. The leaf area of a large tree is enormous. Therefore, it greatly influences the temperature around the tree. Of course, this only works if the tree has water.
Show threadAstronotJun 29

@plsik @quixoticgeek Albuquerque, even though we are in high desert with lots of heat and low humidity, provides treebates to encourage planting trees and maintaining them. Covers new irrigation systems, buying trees, pruning, and other things to make trees more affordable for everyone.

https://www.abcwua.org/conservation-rebates-tree-rebates/

Show threadSpace HoboJun 29
@quixoticgeek
30°C is a sweltering summer day. I'm suffering in 28°. 0°C freezes water solid. The reason we're raising eyebrows is that this sounds more plausible in degrees Fahrenheit.
Show threadAstronotJun 29
@quixoticgeek The Albuquerque "ART" bus line is another example. They cut down all the mature trees in the median and side walks to add a bus lane without impacting the car lanes. They built raised platforms that slope so wheel chairs roll off. All seating is just spots to lean. The shade structure never shades the platform but does shade the street where no one can use it. No protection from the wind, rain or snow. But it does take a pretty picture.
Show threadSilviavontJun 29
@astronot @quixoticgeek what a description! Looking at the picture, I'd agree with you.
Show threadsamiamsamJun 29

@astronot @quixoticgeek

it is horrible and many were against it

my thought is the mayor at the time must have gotten kickbacks

Show threadAstronotJun 29

@quixoticgeek TLC Plumbing got the contract for the bus lane. Why a plumbing company for road work? Because the Mayor's wife is on their board. Strange that the stops were placed next to vacant lots that mayor and his cronies owned.

Painting pavement to "protect" the bus lane.
Lanes that end with no signage.
Buses sometimes on the left of platforms. Sometimes on the right.
Conflicting signage all in English (we are majority Hispanic).
So many accidents every week.

Show threadAstronotJun 29
@quixoticgeek electric buses sourced from a company in china that never made electric buses before. Charging incompatible with local electric. Batteries with less than 40% of spec. So buses can't finish one run on a charge.
So much corruption but no one was ever charged and we are still dealing with consequences years later.
None of the signs meet federal road safety standards.
Local shopping district collapsed between construction and the new buses that make it impossible to cross the street.
Show threadKim ScheinbergJun 29

@quixoticgeek
Don't overlook what money interests did to reduce shade in LA

"Universal Studios is receiving a fine of $250 from the City of Los Angeles after it trimmed down trees allegedly being used for shade by writers and actors picketing outside."

https://www.newsweek.com/universal-studios-slammed-triming-trees-giving-shade-actors-writers-strike-1814860

Universal Studios Slammed After Trimming Trees Giving Shade to Strikers

While actors and writers strike in Los Angeles, Universal Studios has been accused of illegally trimming trees that were providing shade to picketers.

Newsweek
Show threadLord HeeHaw IIJun 29
@quixoticgeek
Thanks for this. You're right on the button!
Show threadSu_GJun 30

@quixoticgeek

"proper people centred infrastructure" love the term & the concept! So much scope for improvement!! So encouraging to see the thinking & details of what could work... and what definitely doesn't work! Thanks again. 🙂

#PeopleCentredInfrastructure
#Infrastructure #BusStop #ScopeForImprovement
#ReconnectingConsequencesToCauses