Draft title is "Most intense week in a while", detailing everything I did last week, as well as what happened that week that was later discovered this week
Search
15 results for “rollerozxa”
-
When life gives you lemons, write a blog post about lemons
-
Said security incident has now been made public: https://blog.luanti.org/2026/10/27/contentdb-security-incident/
-
The alternative proposed was to use a special thumbnailed BBCode image tag when embedding an image in your post, constraining the image to a certain size. So it doesn't blow up your post and the user can click on the image to enlarge it.
-
Growing up, I always thought the "don't put big images inside of spoilers" advice repeated on several forums I used to frequent many years ago was universal Internet forum netiquette. But I'm not sure if this was ever actually the case outside of a very niche space of "spoiler conservatives" who reject the use of it for anything other than actual spoilers.
-
> Board2 randomly goes up again right in the aftermath of two serious PHP RCE CVEs, still running the same version of Apache from 2014
Getting ready for the haunted halloween board huh
-
TIL that Cloudflare offers a throwaway accountless tunnel service to make anything running on your machine publicly accessible on the Internet on a subdomain under trycloudflare.com - which AI agents can quickly spin up to offer malicious payloads, attempt to download to a victim server, and then immediately kill the daemon to make the subdomain under permanently inaccessible.
They call it "Quick Tunnels" but it feels more like C&C-Server-As-A-Service. Thank you Cloudflare, very cool.
-
Waking up to yet another security incident is just how things will be from now on isn't it
-
Hmm, apparently 1875.0–1880.0 MHz is exempt from requiring a license here and that is right in GSM-1800... Well, that takes one concern out of the picture, I will likely not be broadcasting a signal anywhere strong enough to exceed the power limit of the exemption.
-
I'm just rambling about this on fedi in the hopes that maybe someone else has thought about or have tried doing something like this. We've done some reading and it seems like there is Osmocom to implement the GSM protocol, but we have no SDR equipment to try it out with. Supposedly LimeSDR is good for GSM, but holy shit are they expensive. Then we are also not 100% sure how to isolate the phone and the cell tower from the rest of the environment, I on't know if the wiring up to the RF receiver really works or if you do need a full-on Faraday cage to put it all in.
-
A while back I was talking to someone about whether it was possible to set up your own GSM cell tower for 2G connectivity to try to revive old feature phones now that 2G is dead in many parts of the world. The idea would be to have something that would broadcast on the GSM wavelengths and communicate with the phone, then have it act as a proxy to allow for browsing the internet and sending SMS or making phone calls, which would be proxied to some kind of Internet service.
Of course, just broadcasting a tower on the GSM spectrum is highly illegal because of how it can cause surrounding phones that still listen in on old 2G networks to connect to that and mess up emergency services and whatever else.
However this would still be really interesting to do in a controlled environment where it won't leak signals into the background. Supposedly there are SDRs that can broadcast on GSM frequencies, and apparently you can target it such that you basically wire it up to the RF receiver on the phone, though I'm not sure where that is on my phone and I assume I'd need to disassemble it to get to it.
-
To be clear, it was never true that a phone with no security patches for half a decade is more secure than a fully up to date Linux or even Windows computer. I just hoped that this would mean reconsidering the requirement for an Android/iOS smartphone to act as trust anchor for existing in modern society, not accelerating the churn of smartphone consumption for arbitrary reasons.
I have a naive hope that someone might take AI and crack these apps wide open one day and you won't be the beholden to the whims of the official apps. But it should have all been public APIs with verifiable cryptography to begin with anyway.
But of course all of this is irrelevant since Google solved Android version fragmentation in 2016 and we have been living happy ever since then, I'm just being delusional again.
-
I have a feeling that the Android update treadmill will speed up now that the increased rate at which vulnerabilities are discovered in anything imaginable is the perfect excuse to drop older versions quicker now
-
> [...] Android 12 (API level 31) or later [...]
concern
-
It's unfortunate that while I did a full export of my old school Google account, a lot of assignments in Google Classroom that gets transferred ownership to the teacher did not show up in the export, and I did not bother to pull all of that manually