kwesthaus

> Would be nice to see people start tinkering again - really go crazy on protocols, experimental PHYs, etc.

https://m17project.org/ https://openrtx.org/#/ https://freedv.org/

These are a few projects that I personally think embody this well.

> Would be nice to keep your complete config in git or the config management widget of your choice (often Puppet or Ansible).

I did this with my (mostly) OpenWrt-based network: https://github.com/kwesthaus/network-config.

I chose the NanoPi R4S instead of the R6S as my router since it is fully supported by vanilla OpenWrt [1] whereas the R6S is still in the works [2].

[1]: https://openwrt.org/toh/friendlyarm/nanopi_r4s_v1

[2]: https://forum.openwrt.org/t/nanopi-r6s-a-rockchip-rk3588s-ro...

Don't forget about preemptive security freezes at credit bureaus, which you have to do for each one individually. /r/personalfinance recommends 7 by default [0], but there are many more [1].

[0]: https://www.reddit.com/r/personalfinance/wiki/identity_theft...

[1]: https://files.consumerfinance.gov/f/documents/cfpb_consumer-...

Fascinating, thank you for sharing. I'm impressed they were able to find so many ways to essentially confuse the GFW as to the current state of the connection. Looks like any company which wants to do business in China will just avoid implementing ESNI for the foreseeable future.

Are you competing this weekend? I put together a small team for qualifiers and had a blast with the CTF problems. We did well enough to get challenge coins but not to move on to finals.

I also use restic and I have a cron script which runs early Monday morning every week. Restic supports auto-pruning, so I have it set up to backup a new snapshot then purge all except the most recent 100 years, 12 months, and 5 weeks.

Sure thing!

Will do, I've been a little lax the past few weeks but my school semester just finished so now I should have more time again.

Wasn't at a huge scale but for one project another intern and I took a proof of concept that another engineer had done with Gremlin [1] and turned it into a full tool and ended up using dgraph. The python bindings were easy to work with and Ratel (the UI/web frontend) made quick searches and tests easy.

I liked working with it so now I'm the package maintainer for it on AUR [2]. At some point I'd like to make a repo showing how to implement common graph algorithms with the python bindings, since GraphQL+- currently only supports k-shortest path at the query level [3].

[1] https://tinkerpop.apache.org/gremlin.html [2] https://aur.archlinux.org/packages/dgraph-bin/ , https://aur.archlinux.org/packages/dgraph-git/ [3] https://discuss.dgraph.io/t/how-about-doing-some-graph-compu...

To anyone who wants an introduction to car hacking, I recommend the Car Hacker's Handbook, which is available for free online [0]. The book has a security focus but is also interesting to skim if you just want to learn a bit about what goes on in the networks in your car.

[0] http://opengarages.org/handbook/ebook/

You are right that many pieces of software infringe on privacy. However, Zoom only recently has become one of the most widespread of these and because of that has only recently begun to affect a significant portion of the population, hence why it is newsworthy.

I think this also has to do with the fact that Zoom is being used for work and school and therefore people have less choice over their use of it. It's not a social network that many people have chosen to start using, it's a piece of software that millions of students and other people are being required to use without consideration of privacy.

The OverTheWire Advent Security CTF had one problem this year [0] which involved reverse engineering a (self-modifying) Master Boot Record binary similar to this which implemented AES-ECB-128, felt very rewarding to complete. I made heavy use of bochs [1] which seems to be the most common tool for emulating and debugging protected mode and bootloader code such as this. The creator of the CTF challenge talked about it on twitter as well [2].

[0]: https://advent2019.overthewire.org/challenge-zero [1]: https://wiki.osdev.org/Bochs [2]: https://twitter.com/David3141593/status/1210363683815272448

> That's why the best course of action is to not censor at all and allow the system to work itself out.

I disagree with this sentiment, and upon reflection of why, it seems we've come to a real-life example of the trolly problem. Choosing to be passive and "let the system sort itself out" will almost certainly result in more deaths (edit: specifically in terms of mass shootings), but choosing to be active means the powers that be are forced to make subjective choices. I personally believe that it's worth taking on the responsibility of subjective choice.

Edit: However, I also realize that censorship oftentimes just ostracizes already-radical groups. This has the advantage of making it harder for them to find an audience, but also allows them to radicalize further while under less scrutiny, which also seems like a complicated balance to me.

I've spoken to the Chef Technology Manager and the Chief Executive Director of E-ZPass for some research I did with their system [0] and confirmed that it is not 100% reliant solely on the transponders, and that they do use license plate readers as well.

[0] https://github.com/kwesthaus/ez-sniff

The thruhiking bubble also likely contributes to the similar rise in backcountry visits to Shenandoah in May and June.

Same. As far as I can tell, none of the usual restricted shell escape tricks work, so you just have to search through all the binaries on the system until you find one you can abuse to print the file contents, and that seems like more of a time sink than it's worth.