HackerTrans
TopNewTrendsCommentsPastAskShowJobs

melicerte

no profile record

Submissions

Life Under a Clicktatorship

donmoynihan.substack.com
13 points·by melicerte·hace 6 meses·0 comments

KeePass trojanised in advanced malware campaign

labs.withsecure.com
5 points·by melicerte·el año pasado·2 comments

comments

melicerte
·hace 18 días·discuss
Did anyone notice that anonymous donators[1] have the picture of Larry David, and the link points to the Curb Your Enthusiasm - Anonymous Donor Pt2[2] episode?

So geeky, so cool !

- [1] https://scrollprize.org/#sponsors

- [2] https://www.youtube.com/watch?v=JqrJ4wGid4Y
melicerte
·el mes pasado·discuss
Do you know that some open models developed in China are financially supported by Meta ?
melicerte
·hace 8 meses·discuss
i-Logs SRL | Brussels, Belgium | Full Time | On Site | https://www.i-logs.com

Brussels based company specialized in Custom Web & Android Applications, Security and Compliance, Managed IT Services and Cloud Hosting. We are looking for Commercial Manager M/F.

As a Commercial Manager, you will play a central role in the development of our business. You will work directly with the management committee, actively contribute to defining the commercial strategy, represent the company’s image in the field, and stay continuously trained and informed on cybersecurity issues.

Info & Application: https://www.i-logs.com/job-opportunity-commercial-manager-25...
melicerte
·hace 9 meses·discuss
I've notice there is "merde" method which is available in the example like in https://github.com/bnjbvr/rouille/blob/7e9523fe24026bff1a3a7...

Merde is an alias for "calisse" and "oups" , see https://github.com/bnjbvr/rouille/blob/7e9523fe24026bff1a3a7...
melicerte
·hace 9 meses·discuss
> I'm afraid this will be the future, as these AI-browsers do truly bring value. But they open up the gate for a single Big Tech Winner that truly knows everything about you, and can even control everything on your behalf.

Oooh boy, thanks, but no thanks. I don't want a BitTech to know everything about me and my browsing habit.

Yet I wonder how these browser behave when you are visiting your Friday night porn site?

Also, your comment made me think about the fact that free AI is dead in a near feature because it probably is economically unsustainable. Consequently, pay to browse might around the corner. Or ..., like for the for all those social networks, we all be the product. Is AI powered browsers the dead of our freedom ?
melicerte
·hace 9 meses·discuss
On a side note, am I the only to find the CSAM acronym to be very unfortunate choice?
melicerte
·hace 10 meses·discuss
i-Logs | Brussels, Belgium | Full-Time | ONSITE | https://www.i-logs.com

Brussels based company specialized in Custom Web & Android Applications, Security and Compliance, Managed IT Services and Cloud Hosting. We are looking for Commercial Manager M/F.

As a Commercial Manager, you will play a central role in the development of our business. You will work directly with the management committee, actively contribute to defining the commercial strategy, represent the company’s image in the field, and stay continuously trained and informed on cybersecurity issues.

Info & Application: https://www.i-logs.com/job-opportunity-commercial-manager-25...
melicerte
·el año pasado·discuss
forgot to say my plan is to try building a small community around cyber security news and discussion with a focus on the belgium market (where I'm from)
melicerte
·el año pasado·discuss
A hackernews clone, using sqlite3, nestjs for the backend and svelte5/sveltekit/flowbyte svelte/tailwindcss for the frontend.

I must say it has been more challenging than what I though it would be, specially if you are looking to put it onto production. I'm doing it for fun though.

Nothing published yet, I'm not sure if it will ever be. What do you think ?
melicerte
·el año pasado·discuss
If you look at Mistral investors[0], you will quickly understand that Mistral is far from being European. My understanding is it is mainly owned by US companies with a few other companies from EU and other places in the world.

[0] https://tracxn.com/d/companies/mistral-ai/__SLZq7rzxLYqqA97j... (edited for typo)
melicerte
·el año pasado·discuss
> Of particular concern, WithSecure Threat Intelligence identified a successful campaign, spanning at least 8 months, where legitimate source code of the popular open-source password manager tool ‘KeePass’ had been modified, and recompiled with trusted certificates.

My understanding is that if you don't pay particularly care to where you get your KeePass from, you can be tricked into downloading and installing a keepass from perfectly valid installer, potentially leaking all your passwords to the attackers.

I don't know if using open source projects with recompiled sources and valid trusted certificate is a common vector of attack but WithSecure reports that it has been installed a number of times across several of their customers.
melicerte
·el año pasado·discuss
Then comes the question of what is a correct response...

ps: I fail to detect whether your comment was ironic or not.
melicerte
·hace 2 años·discuss
No matter the amount of CO2 emitted, can we agree emails and attachment produce a certain amount of it and that we could probably do better with alternate solutions than sending files by email. In that context, the idea behind firefox send was one possible way of being more efficient. That's all what I'm saying.
melicerte
·hace 2 años·discuss
Don't forget the encryption step is done locally by the browser before the file is transmitted to the server. As such, you better have a limit.
melicerte
·hace 2 años·discuss
I see I'm being downvoted which is ok but to the down voters, I genuinely wonder why ?
melicerte
·hace 2 años·discuss
1. local copy of the file on the sender computer

2. local copy in the send item once sent

3. a copy on the sender email server

4. a copy on the receiver email server

5. a copy on the inbox of the receiver

6. add one if the file is saved as a local copy on the sender computer

And this does not take into consideration backups (like local backups and email server backups). Also, the number increases obviously by the number of recipients (points 4, 5 and 6).

(edited for layout)
melicerte
·hace 2 años·discuss
In my opinion, the idea behind Firefox send was a real step towards a more greener IT. The elephant in the room here that no one is talking about is the impact of the email with attachment on climate change. In 2018 (that's the best I could find) nearly 600 billion emails are distributed every day around the world. Im' pretty sure this is a lot more nowadays. No matter the truth, this colossal figure is not without impact on the environment. From the PC to the data center to the small lithium battery of a smartphone, email consumes electricity and its consequences on greenhouse gas emissions are far from negligible.

Studies on the subject (very few actually, if you have intel on that matter, let me know) have already been conducted and reveal that a simple email with an attachment of 1MB produces around 15 grams of CO2[1]. Obviously, this figure increases with the size of the email. This is the case, for example, when the email includes large attachments or if the email is sent to several recipients.

With the use of the IMAP protocol, one email sent has at least 6 permanent copies (from the sent item in the sender email client to the inbox of the recipient, through sender and recipients email server which hopefully have long term archiving).

A solution like firefox send with automatic shredding of the file after an expiration period to replace email attachment would drastically reduce the consequences of email usage on greenhouse gas emissions. It would also resolve other issues related to sending files by email, but that would make this post waaaayyy to long :-)

[1] http://www.helixee.me/limpact-ecologique-des-e-mails/ (in French)
melicerte
·hace 2 años·discuss
In the meantime, wireframesketcher[1] seems to do the same than Konty and runs on linux. I'm not related to them in any way but use this solution for years and I'm very happy with it (paying customer).

[1] https://wireframesketcher.com/
melicerte
·hace 2 años·discuss
wireframesketcher[1] seems to do the same than Konty and runs on linux. I'm not related to them in any way but use this solution for years and I'm very happy with it (paying customer).

[1] https://wireframesketcher.com/
melicerte
·hace 2 años·discuss
I can recognize a lot of what you wrote to be true for myself,although my diagnostic was made very recently. The most difficult part for me is to be understood and accepted for who I'm, probably because it was hard for me to accept who I am. For years, I've been fighting to be like "anyone else" which eventually led me to be rejected, misunderstanding and considered "sick" (sic) by others, especially the most significant ones in my life. This is one of the trait of my life which is difficult to handle and makes me sometimes feel miserable.