![](/static/253f0d9b/assets/icons/icon-96x96.png)
![](https://fry.gs/pictrs/image/c6832070-8625-4688-b9e5-5d519541e092.png)
[# Systematic Destruction (Hacking the Scammers pt. 2)
Taking on the “Smishing Triad”](https://blog.smithsecurity.biz/systematic-destruction-hacking-the-scammers-pt.-2) g
His blog on the topic if you don’t want the wired summary.
[# Systematic Destruction (Hacking the Scammers pt. 2)
Taking on the “Smishing Triad”](https://blog.smithsecurity.biz/systematic-destruction-hacking-the-scammers-pt.-2) g
His blog on the topic if you don’t want the wired summary.
Based some of the revealed history of some of these agencies, I feel like Hollywood is both closer and much further off than the reality of what happens. Closer in that history is stranger then fiction, and much further off in that these agencies are not monolithic decision makers and the hydraheaded nature of a political/bureaucracy makes for some strange decision.
What in the world are they digging for?
Alternative link non paywalled
Favorite quote:
But the left’s determination has already reassured many politicians. “They can’t back out of this, because the first person to do so will end up with their head on a spike,” said Sandrine Rousseau, a prominent Green MP.
The DDOS attack or the lawsuits?
State budgets are difficult, but perhaps this helps:
https://www.volckeralliance.org/state-budgets/
and this:
https://www.pewtrusts.org/en/research-and-analysis/data-visualizations/2014/fiscal-50
If this request worked, it meant that I could use an “encryptedValue” parameter in the API that didn’t have to have a matching account ID.
I sent the request and saw the exact same HTTP response as above! This confirmed that we didn’t need any extra parameters, we could just query any hardware device arbitrarily by just knowing the MAC address (something that we could retrieve by querying a customer by name, fetching their account UUID, then fetching all of their connected devices via their UUID). We now had essentially a full kill chain.
I formed the following HTTP request to update my own device MAC addresses SSID as a proof of concept to update my own hardware:
…
Did it work? It had only given me a blank 200 OK response. I tried re-sending the HTTP request, but the request timed out. My network was offline. The update request must’ve reset my device.
About 5 minutes later, my network rebooted. The SSID name had been updated to “Curry”. I could write and read from anyone’s device using this exploit.
This demonstrated that the API calls to update the device configuration worked. This meant that an attacker could’ve accessed this API to overwrite configuration settings, access the router, and execute commands on the device. At this point, we had a similar set of permissions as the ISP tech support and could’ve used this access to exploit any of the millions of Cox devices that were accessible through these APIs.
Blows me a away that an unauthenticated API with sensitive controls and data was publicly facing. Corporations these days want all your data but wonder why some customers are worry about how it is protected, it let alone if it’s being sold. Why should I allow you to control my hardware when you can’t protect yourself.
Paid, but less crap.
Especially if it includes any YT plugins beyond redfin.
While I agree with the sentiment, I have accepted that the simple way to make “things” work now is to leverage the cheap computing that is ubiquitous. That headunit is likely now built on a SoC or some embedded OS and is easier and cheaper because of it.
Functionally we need regulations and safeguards in place that maintain the accountability for making the choice to use and build an OS as a life safety device that also serves Bluetooth audio. If the cost of supporting it, or failing to properly develop it, then perhaps the choice to make it dumb will become more adopted. Other economic forces are more likely to play out, but it’s a possibility that we can reinforce by what we buy and signal.
Two point one: That’s how many children everyone able to give birth must have to keep the human population from beginning to fall. Demographers have long expected the world will dip below this magic number—known as the replacement level—in the coming decades. A new study published last month in The Lancet, however, puts the tipping point startlingly near: as soon as 2030.
It’s no surprise that fertility is dropping in many countries, which demographers attribute to factors such as higher education levels among people who give birth, rising incomes, and expanded access to contraceptives. The United States is at 1.6 instead of the requisite 2.1, for example, and China and Taiwan are hovering at about 1.2 and one, respectively. But other predictions have estimated more time before the human population reaches the critical juncture. The United Nations Population Division, in a 2022 report, put this tipping point at 2056, and earlier this year, the Wittgenstein Centre for Demography and Global Human Capital, a multidisciplinary research organization dedicated to studying population dynamics, forecasted 2040.
Christopher Murray, co-author of the new study and director of the University of Washington’s Institute for Health Metrics and Evaluation (IHME), suspects his study’s forecast is conservative. “With each passing year … it’s becoming clearer that fertility is dropping faster than we expect,” he says. Because the 2030 figure is already a hastening of IHME’s previous estimate of 2034, “I would not be surprised at all if things unfold at an even faster rate,” he says.
SIGN UP FOR THE SCIENCEADVISER NEWSLETTER The latest news, commentary, and research, free to your inbox daily A drop below replacement fertility does not mean global population will immediately fall. It will likely take about 30 additional years, or roughly how long it takes for a new generation to start to reproduce, for the global death rate to exceed the birth rate. Even then, because countries’ fertility may vary dramatically, global fertility rate is a “very abstract concept that doesn’t mean much,” says Patrick Gerland, chief of the Population Estimates and Projection Section of the U.N. Population Division. But he says the trend points to a world increasingly split between low-fertility countries, in which a diminishing number of young people support a burgeoning population of seniors; and high-fertility countries, largely poorer sub-Saharan African nations, where continued population growth could hamper development.
Estimating when the world will reach the turning point is challenging. The new model from IHME is based on how many children each population “cohort”—people born in a specific year—will give birth to over their lifetime. It captures changes such as a move to childbirth later in life. But full cohort fertility data are thus far only available for generations of people older than 50, and so the IHME model builds projections within itself to try to capture trends as they are unfolding.
A steady decline Global fertility has been dropping for several decades. Low-income countries in sub-Saharan Africa and high-income countries such as the United States and Japan are expected to dip below the level needed to sustain the human population in the coming decades. But a new model says the global fertility rate could drop below the replacement level as soon as 2030.
D. AN-PHAM/SCIENCE In contrast, the U.N. and Wittgenstein models are based on each country’s total fertility rate, or the sum of age-specific fertility rates, typically for those between the ages of 15 and 49, which is considered reproductive age. As a result, temporary fluctuations in childbearing behaviors—say, people decades ago delaying giving birth to children so they could advance in their education and careers—can throw off their projections, and they can miss longer term changes in childbearing behaviors. These models may have been prone to undercounting fertility in the past, then finding a temporary rebound in fertility rate, and therefore predicting a longer time frame for world population decline.
ADVERTISEMENT This is one reason that Wittgenstein is considering moving to a cohort model, says Anne Goujon, director of the Population and Just Societies Program at the International Institute for Applied Systems Analysis, one of the three institutions that form the Wittgenstein Centre.
Other factors also contribute to the differences between the projections, including how the IHME model accounts for four variables that impact fertility, including access to contraceptives and higher education among those who give birth. (The other two models generally do not, although Wittgenstein considers education.)
Regardless of when the turning point comes, “growing disparity in fertility levels could contribute to widening of [other] disparities,” says Alex Ezeh, a global health professor at Drexel University, who was not involved in the Lancet study. For middle- to high-income, low-fertility countries, falling below replacement level could mean labor shortages and pressure on health care systems, nationalized health insurance, and social security programs. Meanwhile, low-income countries that still have high fertility are at heightened risk of falling further behind on the world’s economic stage, Ezeh says. “They will not be able to make the necessary investments to improve health, well-being, and education” with too few resources to support a booming population.
Although some experts, including Goujon, think there isn’t yet reason for alarm, others call for urgency. “This is going to be a very big challenge for much of the world,” Murray says. “There’s a tendency to dismiss this as sort of like, yeah, we’ll worry about it in the future. But I think it’s becoming more of an issue that has to be tackled sooner rather than later.”
What are a few? Any good lists?
Dumb question for the Lemmy lawyers, if enough redditors joined could a class action lawsuit be filed to be paid for their content… Or is that so outside of the TOS that it’s not worth considering?
In technical terms you mean doing an incremental or differential back up to a local network storage location, correct?
This alongside using Backblaze is what I would suggest assuming you are thinking online. Cheap and reliable, also relatively easy via a cron job. https://help.backblaze.com/hc/en-us/articles/1260804565710-Quickstart-Guide-for-Rclone-and-B2-Cloud-Storage
Anyone have the unwalled content?
Looks like industry got what they wanted.
I think they dodged that as well… https://arstechnica.com/?p=1989111
“Android users’ hopes that Apple’s iMessage would be forced to open up in the European Union have been dashed. Bloomberg reports that iMessage won’t qualify for the EU’s new “Digital Markets Act,” allowing Apple to keep iMessage exclusive to Apple users. …”
What’s the privacy criteria you are thinking about?