szescstopni @szescstopni@qoto.org

Concerning CrowdStrike:

We are now at t+26h. Please compare how much we knew about the xz-attack after less than a day with what we know about the chain of events of giant outage yesterday.

If something similar had been caused by an OSS component, we would see congress discussing a ban on open software in critical infrastructure already.

Turtle might still be alive https://lemmy.dbzer0.com/post/24001330

Hacking Scientific Citations

Some scholars are inflating their reference counts by sneaking them into metadata:
Citations of scientific work ab... https://www.schneier.com/blog/archives/2024/07/hacking-scientific-citations.html

#Uncategorized #academic #hacking #fraud

Well this USB issue is kicking me. To recap, I unexpectedly disconnected a device by snapping the cable the device was connected to (from the device end, no damage to the port). It's a front port connected to the motherboard header.

I tried swapping out the whole bay panel but it didn't help (possibly a power issue but I don't think so as it sort-of worked powering my phone). I've removed all the USB hubs in windows several times, removed all unconnected devices, and been through USBTreeView and USBDeview. I don't think it's a physical issue as a sudden disconnection wouldn't have caused a surge.

So it seems the motherboard controller itself has been locked out. There's nothing in the BIOS I can do with it as there are no individual controller settings, though I can see a stack of ports which are all enabled (the motherboard has a shitload of ports on the back) I can't tell which are spefically on his hub, from the BIOS.

So I cna't tell if Windows has locked the controller, or the motherboard itself. I'm really reluctant to reset the CMOS but if I have to I will.

Has anyone come across this problem before in #Windows where a #USB device disconnection has locked out use of the entire hub? All of the usual solutions have failed, including booting Ubuntu and having the device re-recognise there (it didn't recognise). It's not the end of the world but I'd like to understand the issue.

#crowdstrike #funny #meme

This thread, my god... I'm literally speechless.

https://digipres.club/@foone/112817523308786223
@foone - good lord. I pulled a microSD card out of a Raspi inside an IoT product and it appears they had some developer use a raspi to develop/test some software,  and then they just yanked the SD card out of that machine and duped it on to all of their deployed products.

it's got .bash_history of the development process! there's git checkouts of private repos! WHY WOULD YOU DO THIS?

Lazyweb. Identify this movie:

Late 80s or early 90s. Super low budget, like Full Moon Entertainment level. Late teen male and female leads. Set in an early-post-apocalypse world, so basically our lives reality today.

There's a scene when they go into an ER and the PA is playing a loop including the line, "You have the right to SUE your doctor. To SUE your doctor, pick up te courtesy phone and dial FIVE."

There may have been killer robots?

happy to report our telescope operations are extremely safe from the recent crowdstrike outage.

Two incomes are better than one so make certain your partner has two jobs.

If your partner doesn’t have two jobs, then get two partners.

Follow me for more financial advice.

@malwareminigun @GossiTheDog

According to industry analysts, the world production of snake oil is expected to surpass that of fossil oil in 2027. Huge, billion-barrel reserves are being discovered and tapped almost daily, mostly in California.

Have you tried turning it off and never turning it back on again?

Crowd Strike thing is basically an "Ever Given stuck in Suez Canal" of IT industry.

All the techies losing hair, sleep, and family time trying to get this un-stuck are the excavator operator trying to get things un-fucked.

#CrowdStrike #InfoSec

CrowdStrike is a small, local, struggling, resource-constrained mom-and-pop infosec shop which should not be regulated because that would kill it, and also is a globally-recognized security vendor of advanced AI-based EDR tools that you should definitely use because the company is massive and has all the resources in the world that they can put to making their tools top-of-the-line, not like those FLOSS amateurs.

Obviously.

#CrowdStrike

Hey fellow #Linux users, despite #CrowdStrike only affecting #Windows, this is not really a windows problem.

This is an "automatic update that got forced onto everyone with insufficient testing while also having way too many permissions" problem.

If you think big corps wouldn't run something similar on Linux, I have a an NFT of a bridge to sell you.

Let's cut the bullshit and spell out a few things. The IT security industry is about as trustworthy as the food supplement and vitamin industry, but somehow they escaped the same reputation. Their products are overwhelmingly based on flawed ideas, and the quality of their software is exceptionally bad. And while not everyone will agree with the harshness of my words, I'll say this: Essentially everyone in IT security who knows anything in principle knows this.