stedaniels

It is very trivial to serve different code to someone inspecting the code than when they pipe it to bash. In the very rare case someone inspected it they’d likely do so in a way that was vulnerable to this.

It wasn't when I tried it earlier.

This is very cool, and I _really_ want to love the ReMarkable 2, but it's stance on being an insecure device [0] makes this difficult.

[0] https://support.remarkable.com/s/article/Does-reMarkable-off...

What platform are you on? Doesn’t CTRL+SHIFT+V work for you?

Anecdotally, having worked on identity management systems, and merged a number of them, this hasn’t ever seemed like an edge case for me. It’s pretty high up on the list. I’d imagine the folks they’ve got working on these systems are paid an order of magnitude more than myself.

I have no comment on the security of Hikvision devices.

However, a lot of cameras these days come with a good sized amount of processing power onboard. This can be used for object detection amongst other things. Even without network access the devices could communicate and act on the command of others in many ways. A couple of ideas. You could communicate with the IR LEDs. You could blank the video feed if a certain QR code or flashing light pattern is detected. I'm sure there are more, but you get the idea.

You've misinterpreted the comment, this is exactly what they mean. The recent band, has made the term ungoogleable.

A link to the "Remote working" policy document publicly hosted on their main domain would be a solid choice, with key points summarised in the job posting.

That's a pretty narrow view of society. Many people work with people they don't want to, don't like, hate, despise even.

Supermarket deliveries are popular, but are third party delivery services for groceries? I don't have any stats, but anecdotally I'd say not.

Note however this is only partially true for single user devices, where lack of admin rights does prevent some attacker persistence, and is not at all true for multi user devices e.g. the shared family PC.

You are arguing a different point. They argued that doing exercise burns more calories than sitting idle.

@1_player said: > Your body burns incredibly more energy just "being there" than you burn moving about.

They also _coincidentally_ implemented a feature that autoran ImageGlass as a background service a day before the malware was slipped in.

Coordinating with CSIRTS and the big security vendors, think WAFs, XDRs, etc., would allow the impact of a disclosure to be heavily mitigated.

Just to add to the anecdotes.. I regularly run RDP over VPNs and web gateways all over WiFi and only occasionally feel a little bit of lag, otherwise it's so fast I forget it's not my local device. I largely use CLI's, IDE's, Office, web browsing, and often tell myself off for watching YouTube videos over the RDP connection instead of locally.

Looks very smooth. Pricing seems amazing for bootstrapping. Time to read the docs and sign up.

“We didn't mind," says Chris, "but I found loads of screens switched on one day when I came in to the office, and everybody's desktops were there, on display.”

The security implications for this are very bad. I can’t imagine approving this.

That isn't "just how the world works", that's how a subset of people in the world behave.

It would be handy if the _magic_ would stop it pegging the allocated WSL2 cores to 100% and leaving my laptop fan screaming.

Change the analogy from house to hotel room and management, it'd be more fitting.

Thank you for this link. The differences between the original and the upscaled SR3 model are highlighted mostly for me on the picture of the leopard. The facial markings are clearly different.

Sounds like a good excuse for a bigger drone.

MAC addresses aren't sent over the Internet.

Whole house music for me.

Assisted living for many.

For both of these it's the ease and affordability that it brings.

Looking at your previous comments, it seems you like to throw out this stat and other... less than factual statements, then never back up your comments or engage in the conversation. You are trolling or misguided.

Not to bring you down, but to let anyone else know, this isn't novel and has been standard practice for a decade or so.

Hmmm. My two bed 120 year old house has 9 rads and 28 bulbs. It's not what I, as someone in the UK so used to smaller houses than the US, would call, _large_.

It does _fail_ DMARC.. but the DMARC record for getopty.com tells it to do nothing if it fails.

It's policy is set to "none". You normally do this when you are starting to investigate your DMARC setup and want the stats. This way you can fix things before you up the policy through quarantine and then to reject.

Came here to say this. It makes perfect sense to me. Maybe we're missing something?!