A system’s purpose is what it does. The purpose is to keep it all within the house of the university where it’s hidden away so rich fail-sons don’t have a real record tainted by their crimes at school like rape or being drunk and disorderly.
a man grabbed one of them by the hair as the other picked the bathroom lock, according to the report.
I’m sorry they were carrying lockpicks with them? That is some next level prepared to defend your friends against rapists. These girls are heroes.
My not very nice opinion is that frat guys do not provide free alcohol just for socializing with women and discussing philosophy while drunk. If you’re a woman and they’re spending all this money on booze it’s to get you drunk so they can have sex with you while drunk, aka rape you. That’s the only reason. All this talk of relaxing, yeah that’s for the guys, they’ll spend money on booze among themselves so THEY can relax but they’re not paying for your relaxation, they’re paying to put you in a state where there’s a chance one of them can rape you.
Frats themselves I think exist for that, sharing homework answers, and nepotistically giving their fellow former rapists jobs later in life as well as perpetuating an upper class hierarchy and caste system at universities. Big surprise they continue to exist under capitalism.
Do not go to rape houses. Tell your friends not to go to rape houses. Call them rape houses. Bully other guys and girls who want to go to rape houses by pointing out what they are. Paint the whole thing as the ugly monster it is. Abolish the frat aka rape house system.
This is another way they’ll lock out Linux as an OS. It won’t pass passkey attestation or age check attestation so it just won’t be allowed to access the web because clearly you’re a bot or some other bad actor for failing those.
That or they’ll create a special government backdoored and approved Linux that has attestation in among a bunch of other blackbox modules that you have to trust aren’t an NSAKEY right into your system.
The future looks so bleak with all this online, Flock, Axon, etc cameras IRL controlling all movement and all fed into Palantir for one online and offline profile of you for the police state.
Ah good that way US sanctions cut off designated bad guys from encryption that much faster.
Also good because heavy automation means larger opportunities for the NSA and eyes countries to hack you, change that automation slightly and compromise your infrastructure to their liking and you won’t even notice because things are changing so often you as a human cannot possibly keep up and review these things.
Centralized trust is already experiencing a massive crisis as it’s entirely under the control of very untrustworthy, abusive western authorities centralized within the US and subject to subterfuge by spy agencies, political machinations, sanctions laws, etc.
Attackers really don’t need more than a few days to exploit stolen private keys anyway. Assuming they’re using an attack kit with good zero days in tandem with it (pretty likely with AI assisted exploit finding) so all this will result in is attackers adapting IMO.
Let’s be clear that not just any state actor can do this. We’re talking about the US, UK, rest of the eyes alliance. Snowden revealed they are the threat who operates like this and we shouldn’t forget it.
India can’t likely do this, China, Russia, Brazil, South Africa cannot do it.
I even ensured I refused survey data on my Windows machine but that it ran on my Linux machine to help game the numbers as I’m sure other Linux users do.
I’m convinced Microsoft would have to mandate sticking a probe up your ass when creating a user account/setting up a computer before significant switching among average users would take place and even then a huge 50% of the population would say it’s not that big a deal and switching is a larger hassle and they have no choice, blah, blah.
Linux is kind of still stuck in the doldrums of tech and privacy enthusiasts and a few of their friends and I’m just not sure what if anything can change that in terms of individual actions and markets. Now sure if China or the EU made it harder to sell Windows computers and really pushed people onto a version of Linux that could bump the numbers but in both cases they’re just trying to gain some sovereignty by putting government systems on Linux and that transition alone will probably run for a good part of a decade.
Yeah just be oblique. Refuse to elaborate as is so often done in the security field. (How many times have you seen a generic “you’ve been blocked by security” block page on a website? It rarely states the actual reason, just vague “security” when the reason is VPN, not allowing enough spying javascript to run, blocklisted IP address, or an actual manual ban)
This is silly. You’re approaching this with wrong-headed thinking. Just use makemkv.
What you will have if you used hacked firmware to bypass physical anti-copying methods present on BluRay discs to actually get a bit for bit copy of your disc is a useless blob of encrypted data that you have no way of verifying for accuracy (that it was copied correct or that the disc itself didn’t have subtle physical damage which gave you something damaged because you can’t play it to verify) and which you have no way of using. You’ll have no way of ripping it or turning it into usable data in future if your disc does go bad because no one else uses this method so there’s no software that will allow you to turn this encrypted blob easily back into a playable movie and to burn it to a new BluRay writable disc would break laws anyway because you’re engaging in duplication and secondly all BluRay authoring (burning) programs are built around building and burning unencrypted video files to a disc not around burning an encrypted blob to a disc (often specific sectors containing specific data must be written to specific parts of the disc to make it playable, something no public program will help you with when trying to bit for bit copy in reverse and which blindly bit for bit copying at low level isn’t likely to achieve).
Everyone else breaks the encryption and dumps a copy of the disc including the AACS keys and certs to prove ownership and you should do the same rather than thinking you’re particularly special or vulnerable. If you’re that much an enemy of the state or media companies they’ll do you just as much for having the encrypted copies and state you had INTENT to break it (and indeed defeated DRM mechanisms on the drive firmware itself first which may be a violation of law in order to get that copy) if they’re trying to make an example out of you because you’ve pissed them off.
In practice no media company is likely to go after someone breaking the encryption while retaining the discs and keeping the copies only for themselves. There’s simply no incentive to harassing paying customers in that way if you’re not uploading the contents or hosting a for-profit Plex or Jellyfin server of the contents or burning bootleg copies of the films. You’d have to go around publicly bragging in your own name about breaking the encryption and pretty much dare them to get you for them to know or care enough to do anything about it short of you otherwise breaking the law as I outlined above.
Yes. Certs can expire after whatever time the issuer wants to set for them. That could be six months or 20 years. Some infrastructure has limits on max and min lengths (more max than min usually) but not all and there are best practices as well.
More importantly the certs could have been five years old by the time this person got the TV for a total age of 8 years.
You don’t understand.
The alternative to device based private attestation which is what this is or could be part of is constant online verification by Palantir.
Is every time you want to view porn or adult content you have to verify your real identity so evil corporations and the government who pays them know exactly what your fetishes are and can blackmail you. So they know exactly what you’re posting online because you have to face-scan and ID-scan to set up an email account, a social media account, any account with anything that allows posting content online. Is training the population not to enter a date for their kids or themselves when setting up a computer or device account for the first time, once but upon demand scan their face, scan their ID, comply, sit meekly in fear because everything they do online is known.
What does this know? Your birthday. That’s nothing. As it stands it you can enter anything you want. Fight them when they come to add a verification system to this and point out parents would be in a position to set this up for their kids anyways and its just spying. Fight on stronger ground.
We’ve already lost the maximalist position. The internet scanning and ID verification has already been enacted in several states and countries and we risk a world where it becomes the norm and hosting companies drop anyone who doesn’t implement it because they’re made liable as well. This stuff won’t be repealed. People don’t live in democracies. They live in a dictatorship of the wealthy and the corporations. Your dissent doesn’t matter and it cannot reach most tech illiterate people who have far more pressing concerns than to riot over this.
This is a compromise solution and I wish more people would see it. If you can bend you don’t break. If you don’t bend and your enemy is the government they are stronger than you and they will snap you like a twig.
Linux desktop market share is too small to matter. And if you make this push fail then the only alternative, the only viable solution these politicians who are being cajoled and urged to implement this will see is online live-scan face and ID verification and it’ll sweep everything. You’ll have destroyed the internet and having saved Linux won’t matter. After that it’ll be a quick move to ban encryption that the government cannot break and ISPs will block traffic they can’t inspect. Game over. A simple maneuver from the place you force them to by refusing to cooperate and enact this compromise, privacy-preserving solution. We need strong defensible positions to protect privacy and the internet and free software and to understand that the old ways have been lost, they’ve died, they’ve been strangled and a compromise position must be taken up to endure and avoid a total loss.
I just want a real security solution for Linux that’s privacy respecting and not the NSA in a trenchcoat (aka M$) but that’s too much to ask. The offerings for advanced security on Windows are better than those on Linux for desktop use (we’re not talking server) and it’s not even close. Secure enough for most people is nice. But it’s not enough for the paranoid like me and I desperately want it to be.
Defender has a very good thing in its configurable hard mode that simply blocks new executables that have never been seen before by M$'s cloud data. That stops pretty hard and fast a lot of new in the wild malware including campaigns by sophisticated actors. Combine with good management of LOLbins and a lockdown on those and you have a pretty hardened machine. The issue is it isn’t private because it’s sending M$ a complete list of hashes of every file on your machine which they pass to the NSA I’m sure. That and Windows itself being NSA-malware you know.
Rant warning
I’m not talking definition detections or clamAV (which is shit and has long had the lowest scores in comparative testing, it’s for use on email servers to prevent known old malware from being passed around or stored on a file share, that’s it, it’s not end-point security, it won’t even try to stop the most amateur hacker out there to say nothing of nation-state actors).
I’m talking real endpoint security that consumers can access without slapping down $400 a year for a corporate security license from Palantir (NSA in a trenchcoat warning) for 8 machines when only half that is needed.
I’m talking access controls, comprehensive exploit prevention, attack chain interruption and mitigation, scripting control, prompt to allow execution warnings, IPS/IDS in a software package for the desktop.
“Just do this deranged thing where you totally lock your Linux machine down and break tons of things you need and then spend dozens of hours every 3 months fixing it because an update badly broke your whole OS again” yeah no thanks I have a life and troubleshooting my own machine due to trouble I made isn’t part of it. On Windows machines I can click and deploy after a short audit period software that does all I outlined, it’s easy, it works, it comes with default allowlists of essential OS executables and libraries so it doesn’t break the OS itself and the most trouble I have is needing to occasionally click a prompt to allow or block something which takes all of a few seconds, maybe a few minutes if I need to look up what’s going on. And I can find free, pay once, and cheap annual subscriptions for under $200 annual from multiple providers for at least parts if not the whole thing. It’s frustrating!
Due to advances in AI driven exploit finding the cost for zero-days is due to plummet and the access to such abilities with some money has come within the reach of even small criminal/hacker groups. So saying zero days are expensive and unlikely is a variant of the obscurity argument and not valid to rebut the points nor increasing relevant with AI driven exploit fears which may allow mass campaigns with brand new zero days for cheap.
And you can hmm and haw about security through obscurity but that doesn’t really help your argument or my situation and we both know it.
-Signed someone who likes Linux and desperately wants the same security options and capabilities as a properly configured Windows machine running properly configured security software (you can’t do it on Linux if it doesn’t exist and that’s a market size problem to some degree). I fucking hate Windows and I hate Micro$lop even more but I’m not going to bury my head in the sand and pretend this isn’t a real problem.
P.S. Please prove me wrong. Point me to software that does most of what I asked, isn’t $60 per machine annual (or a minimum purchase of $300 of licenses due to requiring at least 10 machines), meets the usability requirements of being relatively easy to run and maintain (security that’s relatively easy is security that holds up over time, security that’s hard gets turned off, turned down, ignored, or deferred for ease of use). I desperately want this and I will retract my statements and sing your praises. (No Bitdefender for Linux doesn’t count, they’re an NSA/eyes vacuum and really not a hard-configurator, access control/IPS centered solution anyways. Anything that sends files or file hashes to remote servers whose developers are based in eyes countries is an NSA/eyes vacuum that feeds them data on you.)
P.P.S. I already have network edge defenses and firewalls/IPS/IDS set-up but that’s not really enough by a long-shot as I’m not talking about the low-hanging fruit of known cryptolocker campaigns or known cobaltstrike beaconing but the real big fish bad threat actors who pull out something never before seen and pair it with at least one 0-day exploit.