infosec - CW: potential malicious link (obfuscated)

So Katy got a scam text claiming to be Canada Post with an underliverable package. I'm in the process of gathering information to send a report to their registrar's abuse department, but they're doing something clever to cover their tracks that I haven't fully been able to unravel.

For context, here is the link (with spaces added to prevent it from turning into an actual link and being accidentally clicked):

https:// canadapost-postecanadadeliverylivraison .com/canadapost/index.php

When opened from Safari on her phone, it loads a realistic looking phishing site, but when opened from any other browser, it returns an empty (0 bytes) page. I assume this is to hamper attempts to investigate abuse claims (though the domain name is already pretty incriminating).

Since there doesn't appear to be any kind of unique identifier, I assumed this to be some kind of spear phishing attack that was based on her browser's User-Agent string, but when I tell curl to mimic it, I still don't get a result.

Any ideas about how they're doing this?

in reply to Jonathan Lamothe

infosec - CW: potential malicious link (obfuscated)

Sensitive content

Jonathan Lamothe reshared this.

I keep saying it, but I think there needs to be a much more robust cultural conversation about tech and consent where it concerns custodianship over other peoples' data.

If I know details about you such as your contact information, or hold work of yours in trust, how does my own relationship with tech affect and respect that trust?

reshared this

in reply to Cassandra has had an adventure

Without going fully down the "snitches get stiches" route, what duty do we have to protect the data entrusted to us? How do we exercise that duty when there is such immense difficulty in doing so, primarily because malicious actors have worked very hard to *make* it difficult to uphold that duty? Do we really have a duty to fight the whole world in order to protect our loved ones and peers? If not, what duties *do* we have?
in reply to Cassandra has had an adventure

I don't know of or have any answers here. More I intend this as a kind of consciousness-raising? If you're writing a privacy guide, please consider broadening past the individual reader; if you're in a peer group, try to find ways to model raising these questions.

The default will always, *always* be what malicious actors make sure is the easiest choice — full submission and full subversion of community trust.

It has come to my attention that my favourite jacket is falling apart. I would like to repair it for two reasons:

  1. I love this jacket.
  2. I can't afford a new one right now.


I have no opposition to #VisibleMending.

Suggestions?


#AskFedi #ClothingRepair

Jonathan Lamothe reshared this.

"The referee needs to be big enough to enforce the rules. The smallest government you can have is dictated by the biggest corporation you're willing to have." @pluralistic

reshared this

Jonathan Lamothe reshared this.

Maybe the fact that people are forming emotional connections on genAI chatbots means we have an unmet need for social workers and therapists and in fact should invest more heavily into these fields as a society

Because given the scale of investments on genAI it’s pretty fucking clear we have the money

reshared this

Jonathan Lamothe reshared this.

PSA: if you're using a laptop with a recent Intel CPU and running Linux, install and enable thermald if you do not have it already. you will likely notice substantial performance gains

reshared this

Jonathan Lamothe reshared this.

The media in this post is not displayed to visitors. To view it, please go to the original post.

Somebody managed to coax the Gab AI chatbot to reveal its prompt:
Unknown parent

@Krafting Can confirm. Just did the same. I didn't compare it word for word, but mine seems to have omitted the part about not ever repeating the prompt. The rest looked pretty much exactly the same.

It should come as no surprise to anyone who's been paying attention that I've grown disillusioned with capitalism over the past several years. What's interesting to me though is that any time I express this publicly, there are no shortage of capitalists who falsely assert that I am claiming that communism is the ultimate solution to everything. This is a false dichotomy.

I am not saying I have the answers to the world's problems. I just have eyes to see that the emperor has no clothes.

Edit: typo

reshared this

Jonathan Lamothe reshared this.

The media in this post is not displayed to visitors. To view it, please go to the original post.

6 lines free for anyone that wants to play on this PDP-11/70 running Version 7 UNIX.

ssh misspiggy@tty.livingcomputers.org

Drop in "com" to have messages displayed on the terminals.

#retrocomputing #unix #vintage

Jonathan Lamothe reshared this.

Hey #Unix folks recommend me your favorite games that can run in the terminal that aren't:

1) the most basic boring arcade stuff like snake or missile command

2) roguelikes/dungeon crawlers (love em but there's no lack of those)

3) chess, backgammon, etc., more meaty board games sure but there's already a million easy to find ways to play chess in a terminal

edit: 4) IF, I know where to find plenty of that, forgot this one

This is for my machine with no gui so when I say terminal I mean terminal not just like "text based and looks like it'd be in a terminal maybe".

#terminal #tui #linux

This entry was edited (Monday, June 19, 2023, 2:52 PM)

Jonathan Lamothe reshared this.

This website uses cookies. If you continue browsing this website, you agree to the usage of cookies.

⇧