richij

something-something I have a bridge to sell you something

tl;dr: A rogue device plugged into a "trusted" motherboard makes it untrusted.

As the saying goes, "It rather involved being on the other side of this airtight hatchway."

Sigh.

/me laughs in legitimate-interest

Steve is in GDPR land, according to his profile page.

Not theft, AFAICS: Creative Commons licensed, with correct attribution given.

And Thunderbird is dead to me

bless you for your correct use of the C-word.

In other words, the threat actors had access to the breached network during the 22-ish months before they were discovered.

DUPE of https://news.ycombinator.com/item?id=41434500

Or just read the same publication's web page: https://www.thedrive.com/news/how-an-artist-helped-millions-...

Fun website, but most of these really don't cross the line from "aggressive marketing" into "dark pattern." If the site reps are listening, why not let me browse the worst offenders first?

tl;dr: Send an email message with a carefully crafted file attachment. Triggers a parsing bug (presumably a buffer overflow). Attacker could cause several bad things, including adding a root user. Yikes.

Troll detected.

[dupe] https://news.ycombinator.com/item?id=40233746

(this item was first, but the other has more traction)

No, it does not.

This one gained more traction: https://news.ycombinator.com/item?id=39856756

Do you?

Because I'd guess the true figure would be a bit higher than 75%. Have a think about that.

AFAICS, it wasn't the journalist's fault. It was the Swiss PR spokesman. While the company concerned made a mild followup statement implying the journalist misunderstood because of a translation error, both parties spoke Swiss German as a native language.

tl;dr: It was Fortinet's fault and they tried to cover it up: https://securityboulevard.com/2024/02/toothbrush-ddos-botnet...

Dupe: https://news.ycombinator.com/item?id=39061800

Dupe: https://news.ycombinator.com/item?id=39061800

DUPE: https://news.ycombinator.com/item?id=39005187

It absolutely does not. The ability to craft a realistic phishing login page is unaffected by Google's proposed MI API.

Accelerating the switch to NACS on the car side won't work. The unspoken part of "automakers standardize on NACS" is the update to the Superchargers themselves. The signaling is basically CCS, not the legacy Tesla protocol.

DUPE (of later popular item): https://news.ycombinator.com/item?id=37985630

DUPE: https://news.ycombinator.com/item?id=37985630

DUPE: https://news.ycombinator.com/item?id=37985630

DUPE: https://news.ycombinator.com/item?id=37957495

DUPE: https://news.ycombinator.com/item?id=37938866

Local fire service is on record saying car zero was a Diesel Range Rover (not even a hybrid).

Could someone please edit the headline to include "(2022)"?