HNHacker News
TopNewBestAskShowJobs

matbilodeau

914 karma · joined April 16, 2017

for the cheese https://hnbadges.netlify.app/?user=matbilodeau

Kismet : 8d240f87745707dbd7b48d0b1880574ec79561cb6a9a3d028cc86dcb5c1ac28e

[ my public key: https://keybase.io/matbilodeau; my proof: https://keybase.io/matbilodeau/sigs/8N_WF2kRQFQAl6qh4SM_BRVHPxnEGINrpKeihn0VR94 ]

submissionscomments
matbilodeau··on Canadian ISP must hand over names associated with IPs in torrent copyright case
The judge was “satisfied that the Doe defendants were given fair warning of the possibility that their personal information could be disclosed by Cogeco.”

The broadband outfit “provided the Doe defendants with first and second notices from (Hellboy Productions’) counsel which asserted (its) copyright in the work and alleged infringement of the work by the Doe defendants. The first notice advised of Cogeco’s obligation to retain records that will allow for the identification of the Doe defendants and the second notice warned of the plaintiff’s ability to make a formal legal request to Cogeco to compel the Doe defendants’ identity.”

First, the law firm sends them notices, giving them seven days to take the movie down and stop giving it away. If they comply, then typically nothing happens.

If they don’t stop, the firm issues a second notice indicating it reserves the right to sue the alleged movie pirates.

matbilodeau··on Canada to ban the Flipper Zero to stop surge in car thefts
Continuation of https://news.ycombinator.com/item?id=39308731
matbilodeau··on Remote access giant AnyDesk resets passwords and revokes certificates after hack
Seen on Breach Forums onion site as well ...
matbilodeau··on Remote access giant AnyDesk resets passwords and revokes certificates after hack
there are accounts for sale https://securityonline.info/anydesk-breach-2024-dark-web-sal...
matbilodeau··on AnyDesk Incident Response 2-2-2024
The ramifications of this breach are profound. Cybercriminals who gained access to the AnyDesk portal could glean valuable information about customers, including license keys, active connections, session durations, contact information, email addresses, and the number of managed remote access hosts, all with their online/offline status and IDs. Such details open up a plethora of malicious possibilities.

In light of this breach, AnyDesk customers must take proactive steps to protect their accounts and data. Password changes alone are insufficient. AnyDesk offers a whitelist feature, enabling users to specify who can connect to their devices, adding an extra layer of security. Multi-factor authentication (MFA) is strongly recommended to enhance account protection. Organizations should also monitor for any unexpected password and MFA changes, suspicious sessions, and emails referencing AnyDesk accounts from unknown sources.

https://securityonline.info/anydesk-breach-2024-dark-web-sal...

matbilodeau··on AnyDesk Incident Response 2-2-2024
https://www.thestack.technology/anydesk-hacked/
matbilodeau··on AnyDesk Exchanged code signing certificate, potential cyber incident
https://anydesk.com/en/public-statement
matbilodeau··on AnyDesk Exchanged code signing certificate, potential cyber incident
initial blog post , google translate

https://www-borncity-com.translate.goog/blog/2024/01/25/stru...

official changelog https://download.anydesk.com/changelog.txt

matbilodeau··on Bill 96 forces CompTIA to stop offering certifications to Quebec residents
Bill 96 as the title implies.
matbilodeau··on Bill 96 forces CompTIA to stop offering certifications to Quebec residents
Our political overlords only have the good of the many in mind.
matbilodeau··on Ask HN: How to Bring a Pneumometer to Market?
This sounds a lot like HRM already on the market for sports and fitness activities. Garmin's actually works by calculating breaths rather than measuring them.

https://support.garmin.com/en-CA/?faq=2yEgS0Pax53UDqUH7q4WC6

There are cheaper alternatives if you go off-brand.

matbilodeau··on Quebec Ministry of Cybersecurity and Digital Technology employee data leaked
can't do much , didn't make English language news. Google translate seems to have problems with some news sites. Here's what Radio-Canada (french CBC) has to say

https://ici.radio-canada.ca/nouvelle/2001279/incident-securi...

The Ministère de la Cybersécurité et du Numérique du Québec confirmed on Thursday that an incident of computer security due to an action by an employee was quickly corrected.

This employee has been transferred to une boîte de courriel personale des documents contenant des renseignements personnels de 529 employés de la fonction publique. Elle aurait agi de bonne foi et a collaboré avec le ministère, a indicé ce dernier en réponse aux questions de Radio-Canada.

The incident occurred on May 23 last year, when the employee was transferred to another public organization. She explained that she had transferred documents to be able to answer the questions of her replacement in order to facilitate the transition.

The ministry specified that the employee had access to this information in the framework of his duties.

Even if the intention of the employee was not to use the information for an illegal purpose, this practice contravenes the rules of safety in place intended for the personnel of MCN, the ministry emphasized in its email to Radio-Canada.

Par ailleurs, the ministère indicated that a complaint had been filed with the police so that an inquiry could be opened.

The employee was also sanctioned for not respecting the rules of the ministry, which ensured the destruction of the information transferred to the personal email box.

The Information Access Commission was also informed of the incident.

matbilodeau··on Quebec Ministry of Cybersecurity and Digital Technology employee data leaked
thanks, I actually copy pasted the title (Minister of...) since I couldn't find the actual name in English on the govt. website.
matbilodeau··on Quebec Ministry of Cybersecurity and Digital Technology employee data leaked
Translation / TLDR

Former HR employee (compensation) exfiltrated data to their personal email address. data included first and last name , SIN numbers of ministry employees. No evidence of wrongdoing yet but it raises questions of gross incompetence coming from the ministry in charge of preventing data loss.

matbilodeau··on Bill C-18: Google to remove news links in Canada over online news law
At least the "archive" workaround still works
matbilodeau··on Bill C-18: Google to remove news links in Canada over online news law
Suggested workaround https://tt-rss.org/

Most news outlets have rss feeds

https://www.thestar.com/about/rssfeeds.html

https://www.cbc.ca/rss/

matbilodeau··on Suncor Energy cyberattack impacts Petro-Canada gas stations
Source https://sustainability-prd-cdn.suncor.com/-/media/project/su...
matbilodeau··on [dead]
"WARNING YOUR PICNIC MAY HAVE SERIOUS CONSEQUENCES It is forbidden to consume food, to feed the animals and to leave garbage in the park. Birds and animals are a risk to aviatin safety. Violators of this regulation are liable to a fine"

Better picture of the sign

https://montreal.ctvnews.ca/picnics-at-montreal-s-unique-pla...

also , raccoons don't fly

matbilodeau··on Canada police arrest ‘pedophile hunting’ group over child abuse images
Here are excerpts from a Canadian Supreme Court decision explaining the reasoning in a much better way than my previous summary. Reasoning is the same.

P38 The first issue is important because it governs whether the prohibition on possession is confined to representations of actual persons, or whether it extends to drawings from the imagination, cartoons, or computer generated composites. The available evidence suggests that explicit sexual materials can be harmful whether or not they depict actual children (...)

P43 (...)The question is this: would a reasonable observer perceive the person in the representation as being under 18 and engaged in explicit sexual activity?

P51 Family photos of naked children, viewed objectively, generally do not have as their “dominant characteristic” the depiction of a sexual organ or anal region “for a sexual purpose”. Placing a photo in an album of sexual photos and adding a sexual caption could change its meaning such that its dominant characteristic or purpose becomes unmistakably sexual in the view of a reasonable objective observer(...)

https://www.canlii.org/en/ca/scc/doc/2001/2001scc2/2001scc2....

matbilodeau··on Starlink internet is going from rural savior to unreliable luxury
Just a reminder https://www.theglobeandmail.com/business/article-crtc-sides-...

Law has been modified recently https://www.canada.ca/en/radio-television-telecommunications...

matbilodeau··on Canada police arrest ‘pedophile hunting’ group over child abuse images
It's to tackle potential defense strategies. - No harm done, just drawings... - No harm done, the person actually waiting in the motel room was of legal age. etc.
matbilodeau··on Canada police arrest ‘pedophile hunting’ group over child abuse images
oops...

“There were exchanges of photos during conversations [online] and what the law says, when you share a photo, that it is explicit pornographic material and that you claim that it represents a person of age minor, even if it really isn’t, it becomes child pornography,” constable Andrée East told the Canadian Press. “It’s considered as such, even if in truth it doesn’t really represent the body of a minor person.”

Yes there is an exception in Canadian legislation when such investigation techniques are used by law enforcement.

matbilodeau··on A cyberpunk bathroom in the middle of nowhere
"Let’s pray they’re not connected to Wi-Fi." After getting out of the bathroom, Bob noticed he was being served a noticeable amount of ads for male enhancement.
matbilodeau··on Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
Exploit Code Maturity This metric measures the likelihood of the vulnerability being attacked, and is typically based on the current state of exploit techniques, exploit code availability, or active, 'in-the-wild' exploitation. Unproven No exploit code is available, or an exploit is theoretical.
matbilodeau··on Giving the finger is a ‘God-given right’, Canadian judge rules
Thanks for the amazing read.
matbilodeau··on Canada's tax revenue agency tries to ToS itself out of hacking liability
I follow you train of thought and I'm wondering where the loophole would be. I mean if you file on paper you don't use the My Account service. How would the agreement acceptance occur ? Maybe the TOS could be interpreted as "being the holder of a canadian SIN, CRA gives you access to My Account".

In return for the Canada Revenue Agency (CRA) giving you access to My Account, you agree to abide by the following terms and conditions of use for this and all future uses of My Account:

https://www.canada.ca/en/revenue-agency/services/e-services/...

matbilodeau··on Giving the finger is a ‘God-given right’, Canadian judge rules
Court decision

http://citoyens.soquij.qc.ca/php/decision.php?ID=B4064956004...

matbilodeau··on Canada's tax revenue agency tries to ToS itself out of hacking liability
You don't need a computer to file your taxes. Paper kits are provided by CRA and declarations can be submitted on paper by mail. Potential use cases being technology illiteracy, access to reliable internet connections just to name a few .

https://www.canada.ca/fr/agence-revenu/services/formulaires-...

matbilodeau··on Canada's tax revenue agency tries to ToS itself out of hacking liability
Thankfully , the Civil Code also contains definitions for contracts So here we are dealing with an contract of adhesion (terms being imposed by CRA).

Here's an interesting case that may enlighten, however it was approached as a consumer contract because it was not onerous. https://www.canlii.org/en/qc/qccs/doc/2011/2011qccs1506/2011...

How onerous is it to be forced to use CRA online services ? Are the taxes you pay considered onerous ? Are the CRA TOS considered an adhesion contract ?

This should really be tested by by the justice system rather than enthusiasts on a discussion forum. However, since we're all governed by such laws, it's never a loss to spend time on learning about them, especially physics.

1378. A contract is an agreement of wills by which one or several persons obligate themselves to one or several other persons to perform a prestation. Contracts may be divided into contracts of adhesion and contracts by mutual agreement, synallagmatic and unilateral contracts, onerous and gratuitous contracts, commutative and aleatory contracts, and contracts of instantaneous performance or of successive performance; they may also be consumer contracts.

1379. A contract of adhesion is a contract in which the essential stipulations were imposed or drawn up by one of the parties, on his behalf or upon his instructions, and were not negotiable. Any contract that is not a contract of adhesion is a contract by mutual agreement.

1384. A consumer contract is a contract whose field of application is delimited by legislation respecting consumer protection whereby one of the parties, being a natural person, the consumer, acquires, leases, borrows or obtains in any other manner, for personal, family or domestic purposes, property or services from the other party, who offers such property or services as part of an enterprise which he carries on.

matbilodeau··on Canada's tax revenue agency tries to ToS itself out of hacking liability
That's where 3149 would come in. Maybe even 3150 if you have "ID theft" insurance.

3149. Québec authorities also have jurisdiction to hear an action based on a consumer contract or a contract of employment if the consumer or worker has his domicile or residence in Québec; the waiver of such jurisdiction by the consumer or worker may not be set up against him.

3150. Québec authorities also have jurisdiction to hear an action based on a contract of insurance where the holder, the insured or the beneficiary of the contract is domiciled or resident in Québec, the contract covers an insurable interest situated in Québec or the loss took place in Québec.

https://www.legisquebec.gouv.qc.ca/en/document/cs/CCQ-1991?l...

Page 1 of 5Next →