83 Followers
258 Following
648 Posts
maaad scientist, inventor, product developer, engineer, architect, flash point tester & aspiring triathlete.
The state of Linux accessibility in 2025. This started out as a rant but became a series. Please feel free to leave feedback, comments, and subscribe via rss or email for more stuff as I release it. https://fireborn.mataroa.blog/blog/i-want-to-love-linux-it-doesnt-love-me-back-post-1-built-for-control-but-not-for-people/
I Want to Love Linux. It Doesn’t Love Me Back: Post 1 – Built for Control, But Not for People — fireborn

Source: @sentdefender on X "Footage claimed to show a Unitree H1 (Full-Size Universal Humanoid Robot) going berserk, nearly injuring two workers, after a coding error last week at a testing facility in China." Nightmare fuel.
Das Regierungspersonal von CDU und CSU steht. Gleich mehrere Spitzenleute kommen aus Unternehmen. Haben sie Interessenskonflikte?
Wunschkabinett der Union: Das bisschen Lobbyismus
Wunschkabinett der Union: Das bisschen Lobbyismus

Das Regierungspersonal von CDU und CSU steht. Gleich mehrere Spitzenleute kommen aus Unternehmen. Haben sie Interessenskonflikte?

TAZ Verlags- und Vertriebs GmbH

Bank scammers using genuine push notifications to trick their victims

https://shkspr.mobi/blog/2024/05/bank-scammers-using-genuine-push-notifications-to-trick-their-victims/

You receive a call on your phone. The polite call centre worker on the line asks for you by name, and gives the name of your bank. They say they're calling from your bank's fraud department.

"Yeah, right!" You think. Obvious scam, isn't it? You tell the caller to do unmentionable things to a goat. They sigh.

"I can assure you I'm calling from Chase bank. I understand you're sceptical. I'll send a push notification through the app so you can see this is a genuine call."

Your phone buzzes. You tap the notification and this pops up on screen:

This is obviously a genuine caller! This is a genuine pop-up, from the genuine app, which is protected by your genuine fingerprint. You tap the "Yes" button.

Why wouldn't you? The caller knows your name and bank and they have sent you an in-app notification. Surely that can only be done by the bank. Right?

Right!

This is a genuine notification. It was sent by the bank.

You proceed to do as the fraud department asks. You give them more details. You move your money into a safe account. You're told you'll hear from them in the morning.

Congratulations. You just got played. Scammers have stolen your life savings.

How the scam works

This is reasonably sophisticated, and it is easy to see why people fall for it.

  • The scammer calls you up. They keep you on the phone while...
  • The scammer's accomplice calls your bank. They pretend to be you. So...
  • The bank sends you an in-app alert.
  • You confirm the alert.
  • The scammer on the phone to your bank now has control of your account.
  • Look closer at what that pop is actually asking you to confirm.

    We need to check it is you on the phone to us.

    It isn't saying "This is us calling you - it is quite the opposite!

    This pop-up is a security disaster. It should say something like:

    Did you call us?

    If someone has called you claiming to be from us hang up now

    Yes, I am calling Chase - No, someone called me

    I dare say most people would fall for this. Oh, not you! You're far too clever and sceptical. You'd hang up and call the number on your card. You'd spend a terrifying 30 minute wait on hold to the fraud department, while hoping fraudsters haven't already drained your account.

    But even if you were constantly packet sniffing the Internet connection on your phone, you'd see that this was a genuine pop-up from your genuine app. Would that bypass your defences? I reckon so.

    Criminals are getting increasingly good at this. Banks are letting down customers by having vaguely worded security pop-up which they know their customers don't read properly.

    And, yes, customers can sometimes be a little gullible. But it is hard to be constantly on the defensive.

    Further reading

    You can read the original story from the victim on Reddit. See more comments on Mastodon.

    #bank #CyberSecurity #phishing #scam #security

    Bank scammers using genuine push notifications to trick their victims

    You receive a call on your phone. The polite call centre worker on the line asks for you by name, and gives the name of your bank. They say they're calling from your bank's fraud department. "Yeah, right!" You think. Obvious scam, isn't it? You tell the caller to do unmentionable things to a goat. They sigh. "I can assure you I'm calling from Chase bank. I understand you're sceptical. I'll…

    Terence Eden’s Blog

    The guy drops some really important truths about manufacturing:

    America Underestimates the Difficulty of Bringing Manufacturing Back — Molson Hart

    https://www.molsonhart.com/blog/america-underestimates-the-difficulty-of-bringing-manufacturing-back

    America Underestimates the Difficulty of Bringing Manufacturing Back — Molson Hart

    On April 2nd, 2025, our president announced major new taxes on imports from foreign countries (“tariffs”), ranging from 10% to 49%. The stated goal is to bring manufacturing back to the United States and to “make America wealthy again”. These tariffs will not work. In fact, they may even do the opp

    Molson Hart
    artist fighting back against AI music by poisoning his songs to degenerate models https://youtube.com/watch?v=xMYm2d9bmEA&si=5hTFeEGrZOWhWhw4 🔥🔥🔥
    The Art Of Poison-Pilling Music Files

    YouTube
    Poster by Everyone Hates Elon,
    London.
    🚀 Es ist wieder soweit und du kannst deine kreativen Möglichkeiten entdecken! Beim Open Lab bestimmst du das Programm. Löten, 3D Druck, Holzwerkstatt oder Programmieren. Für deine Ideen stehen viele Möglichkeiten zur Umsetzung zur Verfügung. Alle Jugendlichen zwischen 12 und 18 Jahren sind herzlich willkommen! Komm einfach um 14 Uhr vorbei und lass uns gemeinsam mit Code die Welt verbessern! 🦙 #jugendhacktlabschwerin #hacklabor #schwerin
    My parents TV decided to let out some smoke... 4 bucks in caps, resistors, MOSFETs and a howaboutnow later, we got contact!

    Said something wrong on the internet a few years ago? Too bad… Facial recognition tech today could help baring you from entering an event venue you haven't even visited in years. No recourse, no refund.

    https://www.theverge.com/news/637228/madison-square-garden-james-dolan-facial-recognition-fan-ban

    Madison Square Garden’s surveillance system banned this fan over his T-shirt design

    A fan was ejected from a Knicks game in 2021 for wearing a shirt calling out the team’s owner, James Dolan. This week, the designer of the shirt was swept up in the saga when he was informed that he, too, was banned from all Madison Square Garden venues.

    The Verge