Stealing passwords from infosec Mastodon - without bypassing CSP | PortSwigger Research – portswigger.net/research/steal…
“My next test was with Chrome autofill - would the password get filled in automatically by Chrome? Of course it would, and without any user interaction!”
This is one of the reasons why your password manager should never be integrated with your browser.
Privacy Browser 3.12 has been released.
Německo znárodnilo majetek ruské státní firmy Gazprom
Německá vláda znárodnila 14. listopadu 2022 Gazprom Germania. Firma se nově jmenuje SEFE - Securing Energy for Europe. Od převzetí kontroly nad německými majetky Rosněfti (16. září 2022) jde o nejtvrdší krok ...
blisty.cz/art/110645-nemecko-z…
Německá vláda znárodnila 14. listopadu 2022 Gazprom Germania. Firma se nově jmenuje SEFE - Securing Energy for Europe. Od převzetí kontroly nad německými maj...Britské listy
THE PATTERNS OF MESUTA, TEXAS
A SHORT STORY
Normally, operators avoided having multiple tubes of the Hyperloop energized at the same transit point.
Utilities didn’t like the intense draw it put on electrical substations in rural areas, and corporate really didn’t like waterfalls.
Nonetheless, as demand for transit drove faster launch intervals at Hyperloop stations, moiré patterns of mutual line activation emerged.
Jed and Dylan Hanson were four and six when carrier infrastructure for hyperloop rails were first laid outside their town of Mesuta, Texas. Once a successful junction for intrastate travel between Texan megacities, the Hyperloop changed everything, they were told.
Monied travelers of the metros were already waning in Mesuta, as autonomous vehicle refuel patterns removed arbitrary stops from trips.
Local jobs laying the Hyperline were real, but amounted to subcontracted brush clearing. Land for pennies, promises for days, monuments to deprecation.
Metal and buildings not worth effort to rip them from the ground rusted in Texas sun, shaded periodically only by hazmat haul road trains.
This was a dead place; A forgotten place whose infinite prominence was once assured forever by geography, then ripped away by technology.
---
Jed laid under a struggling A/C, terminal behind polling Hyperloop API every minute for departures - algorithm searching for a trinity.
For days the dutiful program executed its commands, incrementing for patterns. On Sunday, it alarmed. Departure Austin. Trinity: 26 minutes.
Dylan woke, looked at the screen, then at Jed, and wordlessly stood. Opening their door to the mid-day sun, he made his way to church.
21 minutes: HVDC interconnects activated, feeding capacitors. Parallel coil whine twinged, pulsing sonic heartbeats through the air.
Hyperline Mesuta Cross was nicknamed The Church by workers, who during testing noticed an unanticipated resonance in the superstructure. An interference pattern in the overlapping magnetics induced the aural vibration, ultimately found benign to long-term system integrity.
24 minutes: The two parallel and third intersecting Hyperlines were fully powered - magnetics and vacuum boosters spooling at full load.
25 minutes: The Hyperpod from Austin carrying twenty-six passengers entered the Mesuta area Hyperloop subsection at 623 miles per hour.
26 minutes: “Punch it,” said Jed over the radio. A shaped charged high explosive punctured the Hyperloop Hyperline Rail 1 external sheath.
The explosive could be seen bursting outward in a roar, then immediately plunged back into the vacuum of the tube, its shrapnel peppering.
The Austin Hyperpod travelled through the breach, a hammer of atmospheric air near sea level slamming it against the interior guides.
Traveling 300 more feet before destabilizing back and forth, the pod rapidly decelerated, disintegrating its cabin and breaching the outside wall.
The pod’s heavy turbulence damper sled exited Hyperline Rail 1, turned perpendicular, and shattered the struts for parallel Hyperline Rail 2.
A Hyperpod from Houston entered the now-falling section, shunted downward, killing everyone from blunt force before ripping their bodies apart.
The breach of two Hyperlines and loss of connectivity to pods raised an Eschelon 1 alarm at headquarters. “Director, we have a waterfall.”
---
Autonomous systems immediately began de-energizing components in the Mesuta subsection, polling all sensors for last data captured, preserving analytics.
Although only two lines had been breached, all six airtight emergency shutters in the three proximate Mesuta lines locked closed for safety.
However, design documents for the Hyperloop safety spool-down never tested for three simultaneously active proximate Hyperline rails.
A Hyperpod from Dallas in the subsection never received a halt command, and slammed into a sealed shutter 2 miles away, killing all onboard.
---
5 years later.
Governor and victims families finished their speeches, laid wreaths at the monument, and boarded buses back to metropolis.
The Hyperloop in Mesuta was redesigned, the sympathetic patterned whine of the Church eliminated. Safety testing was improved nationwide.
No one would ever see this monument.
No windows.
No rest stops for the weary.
Just a sealed tube, once again, passing Mesuta by.
—
More of my writing and a sign-up for alerts on next story:
universalshards.com/p/the-patt…
In 2017, I had my first job interview in 10 years. A job I ultimately would not get. I was flying back from New York for the first time, in a plane with broken WiFi. It was the first time I had ever seen The Big Leagues and what that meant. I knew I wouldn't get the job. It wouldn't be my first disappointment flying back.
So I sat there and looked out the airplane window. Thinking about those left behind by the world. Those who couldn't see themselves succeeding. Maybe who has witnessed the other side and had become even more dejected by the wall they'd never breach.
How would this person strike back at the society who abandoned them. What would be the most salient target. Who, in immediate satisfaction, would ultimately mean nothing.
Transit. Rural areas. The most advanced and privileged imaginable. A Hyperloop.
I started it in the Twitter app. Which is why the story is sectioned like it is, later adapted to newer character limits.
Thinking of a geographical point where this event would culminate across flat land amenable to expensive transit lines - Texas. I knew Dallas, San Antonio, and Houston. This would be the setting for my scene. I stated it in the first tweet. A Short Story By.
And I started writing. Sitting in the plane delivering me from my disappointment I'd have to overcome. So I was in a mood.
Wrote throughout the flight. Each section preceded by the other. There was little ultimate plan.
I came to the end. The final addition. A comment on my own diminutive life.
"No one would ever see this monument.
No windows. No rest stops for the weary. Just a sealed tube, once again, passing Mesuta by.
The End."
When we landed, still on the tarmac, I hit Send. It was 7:52PM local time.
Anyway - that is the story of "The Patterns Of Mesuta, Texas."
I cry every time I read it. I hope it means some minimal amount to you, from what it means to me.
The End.
Highly recommend all #DisabledSocial and new Mastodon users read the following tips on how to stay safe in the #Fediverse
fedi.tips/staying-safe-on-mast…
An unofficial guide to using Mastodon and the Fediversefedi.tips
DennisL reshared this.
As "#accessible" drag and drop (with accessible in quotes as I haven't personally verified the claims) is added to #React Aria and React Spectrum, I'm happy to see drag-and-drop get some #accessibility love at the framework level. However, I'm not convinced that aiming for parity always creates the most efficient, usable experiences in this area.
For many use cases, there are alternative approaches legitimately better suited to how people actually operate their devices, across various assistive technologies and input methods. For instance, dropdowns with type-ahead, offering more of an opportunity to browse before committing, rather than constantly navigating back and forth across drop zones which could be far apart.
The article highlights challenges in finding a preexisting holistic system, without delving into the possible reasons for that being the case until now. User feedback is also not a panacea; are you asking someone to evaluate whether they can use a thing? Or whether that thing is a good idea, and/or if a better thing could theoretically exist?
react-spectrum.adobe.com/blog/…
#a11y
We are excited to announce the release of drag and drop support in React Aria and React Spectrum! This includes a suite of hooks for implementing drag and drop interactions, with support for both mouse and touch, as well as full parity for keyboard a…Adobe Inc (Adobe)
My latest game, McPixel 3 was written entirely in C from scratch, thanks to that it's very easy to port it to everything!
Plus it's enviromentally friendly! Doesn't use much battery and won't make your fans spin up!
Here's a video of the game running on a lot of different things.
Anyone heard of Monkey Island? I hear there is a new one:
Return to Monkey Island is an unexpected, thrilling return of series creator Ron Gilbert that continues the story of the legendary adventure games The Secret of Monkey Island and Monkey Island 2: LeChuck’s Revenge developed in collaboration with Luca…Return to Monkey Island | Available now on PC, Nintendo Swtich, PS5, and Xbox S/X
brands.town is absolutely the best thing ever 😂.
Many individual accounts on there are a great parody. But together everyone contributes to a giant #AlternateReality game, with fake news agencies reacting to fictional press releases, etc.
I'll let you explore it for yourself. 🙂
The one that got me most though? Fake Elon musk just reposting stuff from real musk's Twitter. 😁
Brands Town is the first ever Mastodon Instance dedicated solely to corporate brand promotion.Mastodon hosted on brands.town
The new test version is out for testing 1.33.2, the "USP" of this version is that we fixed the bug that made #deltachat use 100% CPU. If you don't find any blockers, we'll release this version as 1.34 to the website and stores.🎉
support.delta.chat/t/help-test…
The time has come for a new Desktop Release! 🎉 Help us find the most annoying bugs so we can make sure this update is ready to be released on the website and in stores.Delta.Chat
@devSJR just desktop for now and it's opt-in. #deltalab (alternative android app by @adbenitez) already has markdown since some time now. Desktop had it already some time ago (from 2019-06-09 until 2019-12-12) but it was removed again because it was buggy.
See support.delta.chat/t/markdown-… for the whole history/discussion on markdown support.
The basics like bold, italics, underlined and strikethrough should be enough.Delta.Chat
Complying with WCAG AA is hard, and AAA seems a lot harder, but there are actually plenty of AAA rules that are relatively easy to meet.tempertemper
Just in: A Browser Extension to redirect users to their home instance. Instead of only redirecting only on actions (follow, like, etc), user is automatically redirected to the equilevant page on their home instance.
By @raikas
github.com/raikasdev/mastodon4… #opensource #Mastodon
Redirects users from Mastodon4 instances to their home instance - GitHub - raikasdev/mastodon4-redirect: Redirects users from Mastodon4 instances to their home instanceGitHub
GTK-based Mastodon client for Linux. Contribute to bleakgrey/tootle development by creating an account on GitHub.GitHub
In April 2022, I was contacted by an author who reported being basically ghosted by Catstone Books after submitting a revised manuscript at Catstone's request.Victoria Strauss (Writer Beware)
Staatliches Hacken schafft keine Sicherheit, sondern Unsicherheit. Die Europäische Union muss handeln und den Verkauf und Einsatz von Staatstrojanern verbieten. Das habe ich dem Pegasus-Untersuchungsausschuss im Europaparlament gesagt.netzpolitik.org
Filed a feature request on Mastodon for moderators to have the option to let users know when a moderation report has been resolved:
github.com/mastodon/mastodon/i…
It's annoying right now that I have to DM individual users every time I act on a report telling them what action I took on a reported post or account!
Pitch As a moderator reviewing reports from users, I would like a check box that says something like "notify this user when their report is resolved". On resolving the report, it would se...GitHub
Tune in to our new episode! @katherined, @dsearls, @shawnp0wers, and @kyle discuss the ups, downs, and how-tos of using Mastodon amid Twitter's recent instability.
Visit the following link for full episode - reality2cast.com/132
#Mastodon #socialMedia #Technology #Privacy #Podcast #newEpisode
Doc Searls, Katherine Druckman, Shawn Powers, and Kyle Rankin discuss the ups, downs, and how-tos of using Mastodon amid Twitter's recent instability.Reality 2.0
Proč půjdeme Pochod za demokracii 17.11.2022?
Podívejte se na náš vzkaz ⬇️
Pochod za demokracii - 17.11.2022 - Praha - Albertov
#pochodzademokracii #praha #albertov #17.11. #demokracie #cesko #ceskarepublika
✨ Tady něco nového ode mě v #czech! 🎉
Koukněte na zbrusu nový webový komiks "Contra Chrome":
Podtitul: O tom, jak se prohlížeč Googlu stal hrozbou pro #soukromí a #demokracie
Těšit se můžete na Shoshanu Zuboff nebo veganské piraně :)
Dozvíte se všechno, co jste kdy chtěli vědět o #Chrome, ale báli jste se zeptat!
Čtěte a stahujte zdarma - doufáme, že se Vám to bude líbit! 😊
A pokud ano, prosíme o co největší šíření! 
reshared this
With Godot Engine 4.0 slowly approaching release, the developers are still hooking up some huge features to this free and open source game engine like a Movie Maker.Liam Dawe (GamingOnLinux)
#AndroidAppRain today at @guardianproject (updated Tor Proxy), @fdroidorg (32 apps updated) – and at apt.izzysoft.de/fdroid with 10 updated & 2 new apps:
* Sensor Server: stream phone's motion sensors to websocket clients
* Symphony: a lightweight, elegant music player that enhances your offline music experience
Enjoy your #free #Android #apps with #FDroid and the #IzzySoftRepo 
This is a repository of apps to be used with F-Droid. Applications in this repository are official binaries built by the original application developers, taken from their resp. repositories (mostly Github).IzzyOnDroid App Repo
If you appreciate the app and our work, you can help us with donations on #Liberapay or #OpenCollective.
Thank you to all people that donated and to new ones. You really help Fedilab.
Liberapay: liberapay.com/tom79
OpenCollective: opencollective.com/fedilab
My name is Thomas, I use a part of my spare time to develop and maintain open source projects (Fedilab, Tubelab, UntrackMe, OpenMultiMaps, FediPlan, Mastodon comments for …Liberapay
Leyck Dieken (Gematik Chef): Wir sind immer davon ausgegangen, dass der Konnektor in lauteren Händen ist. Wenn die gematik künftig hochkriminelles Potenzial mitdenken muss, kommen wir zu Lösungen, die keiner mehr umsetzen kann.
Hat er mich und das Reverse-Engineering eines Konnektors mehr oder weniger subtil »hochkriminell« genannt? 🧐
[Paywall] aerztezeitung.de/Wirtschaft/ge…
gematik-Geschäftsführer Markus Leyck Dieken verspricht einen datenschutzkonformen E-Rezeptabruf mittels eGK bis Mitte 2023.Ilse Schlingensiepen (Springer Medizin Verlag GmbH, Ärzte Zeitung)
Vorallem was ist denn das für eine Vorstellung von IT-Sicherheit?
"Klar sichern wir das gegen Angriffe ab. Aber halt nicht gegen so richtig kriminelle, das wäre voll anstrengend!!"
chaos.social – a Fediverse instance for & by the Chaos communityMastodon hosted on chaos.social
@Friendica Support : Just a curious question:
I follow quite a lot of mastodon account, and in the last days, mastodon users seem to develop a passion for polls.
I noticed that I am on my friendica instance are not able to participate in these polls since the content is only included in plain text.
Does #Friendica just do not support polls, or is it only my instance / a missing add-on that prevents me to participate in polls?
Yes, this summarizes exactly my reading. I just asked on git
Is there already _something_ implemented regarding those interactions? I would love to have a look at it as a starting point to get familiar with the code structure. :)
Mein erster selber geschriebener Heise Artikel ist online: »BSI: Laufzeitverlängerung der TI-Konnektoren wohl auch über 2025 hinaus möglich« 🎉
heise.de/news/BSI-Laufzeitverl…
Das BSI hat bestätigt, dass mit den Kryptofähigkeiten der SmartCards in den TI-Konnektoren ein Weiterbetrieb über 2025 hinaus möglich sei.Flüpke (heise online)
one more blog post (actually put up last night) takes me to the end of the pile of _completed_ posts waiting for me to fix my website
owlfolio.org/development/threa…
this one's real niche, folks
Enjoy end-to-end-encrypted Matrix conversations within Chats when you use your Librem devices. Get the details 📱 ➡️
puri.sm/posts/toward-matrix-su…
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.Purism SPC
Tomorrow (Wednesday at 1700 UTC) we're presenting Part 2 of the annual State of the Onion!
Last week's presentation focused on in-house Tor Project teams; tomorrow will be focused on community projects. (This part is always super interesting to me.)
Please join us!
youtube.com/watch?v=O-7k0PjnBb…
#Tor #Privacy #FOSS @torproject
State of the Onion - Community is a compilation of updates from the Tor Project different projects, highlights of the work from projects that are part of the...YouTube
The State of the Onion is livestreaming in 30 minutes!
Learn more about what the Tor community is up to! Get updates on exciting software projects! Learn more about the people and groups that keep the network running! Learn how you can get involved in the fight against censorship and surveillance! Generally have a good time!
youtube.com/watch?v=O-7k0PjnBb…
#tor #FOSS #privacy @torproject
State of the Onion - Community is a compilation of updates from the Tor Project different projects, highlights of the work from projects that are part of the...YouTube
#Friendica needs new contributors!
I'm not used to do this, but with the large influx of new users and node admins recently coming from #Twitter, our small team is now behind the curve for handling support requests, bug reports and bring about much-needed features.
The project is built on a #PHP/#MySQL platform, but we also need people to be able to assist others just using the software to give developers some space.
If you're willing and able to help, please follow @Friendica Support and the project on Github: github.com/friendica/friendica
Thank you!
Friendica Communications Platform. Contribute to friendica/friendica development by creating an account on GitHub.GitHub
#fediblock
Pls be aware that a notable transphobe has recently signed up ie angi@home.social. Little activity so far
Real life = Angi Mansi, who's known by the trans community. She's one of a few who go as far as calling for the repeal of legal gender change in the UK
gcritical.org/2020/10/05/the-g…
Big picture,this type is about as toxic as it gets for us as a trans community. On @tech.lgbt she's been blocked, I'd ask that you consider the same, or at least keeping a very close eye here
The Gender Recognition Act Reform/Repeal Group had its first meeting on 24th June 2020. It was born out of increasing anger and despair at the current state of our public debate - or lack of it - around issues of fundamental importance to women.https://gcritical.org/author/svphillimore/#author (The Gender Critical)
Souhlas s tim linkováním bez popisu, ale abych to vrátil zpět k topicu:
Vezmete za mě někdo ten pochod z Albertova? :D
Na milion chvilek jsem to zvlád, na tenhle mi nezbyly ani finance, ani logisticky to nejde zvládnout :(
I've discovered that currently, as of Ubuntu 22.10, Ubuntu distributes a package called "fortunes-off" that is full of homophobia, Hitler quotes, virulent misogyny, racism, and more, for the "fortunes" program
All the text in it is ROT13'd so it doesn't show up on searches. Text pulled from the .deb available live on Universe: packages.ubuntu.com/kinetic/fo…
Data files containing offensive fortune cookiespackages.ubuntu.com
Encryption around the world is under threat. That's why we are part of an international coalition calling for withdrawal of the Draft Indian Telco Bill. 🔒💪 Read more here:
accessnow.org/india-telecommun…
International coalition urges India to withdraw Draft Telecommunications Bill, and introduce a revised draft that ensures secure communications and end-to-end encrypted platforms.Golda Benjamin (Access Now)
Little photo study from a while ago...
used photo: Beach by Tony George on Flickr
#photostudy #digitalart #landscape #environment #beach #rock #gameart
Dan Oachs
in reply to Soren Stoutner • • •