[-] SirHaxalot@nord.pub 5 points 23 hours ago

Seen a bunch of theories on this but the most likely one is that the washer ended up in a loop of failing firmware updates, downloading the same thing over and over again. It fits with the graph showing that it’s downloaded data. Could also straight up be a reporting bug in the router as someone else said.

[-] SirHaxalot@nord.pub 9 points 2 days ago

It’s absolutely legal for a power company to know where their services are delivered, lol. Pretty sure they at the minimum absolutely need to know the connection ID that would uniquely identify your house and apartment. Not so sure that a generic info like rooms and square footage would even be considered personal data.

Also, based on the other thread I think you would have an aneurysm if you knew how much info is publicly available in Sweden.

1

Experience Warhammer like you’ve never heard it before.

397
submitted 2 weeks ago by SirHaxalot@nord.pub to c/aww@lemmy.world
474
Cast (thelemmy.club)
632
Tavern’s Closed (thelemmy.club)
10
submitted 1 month ago by SirHaxalot@nord.pub to c/teknik@feddit.nu

The source code of Swedish e-government services from CGI's "E-plattform" has been leaked.

A threat actor sent us samples.

Our initial analysis shows the breached repositories originate from an internal CGI GitLab instance. The leak exposes architecture, microservices, and configurations for Sweden's digital public infrastructure.

Leaked files:

  • Database passwords
  • Email/SMTP passwords
  • Keystore/truststore passwords & key passwords
  • SHS credentials / keystore details
  • Signe portal credentials/config
  • Embedded Git credentials
  • CGI staff data

Key components exposed:

  • Mina Engagemang: Frontend and backend code (me-portals) for citizen-facing apps and case management.
  • Signe & e-ID: E-signature portal configs, SAML/OpenSAML metadata (keyservice), and signing workflow templates.
  • Företrädarregister: Authorization registry services (foreg) governing who can legally represent organizations.
  • SHS Integration: Routing and config files (eintegration3) for secure inter-agency data exchange.

The leaked repos contain .git/config files with embedded credentials, severely elevating the risk of lateral movement or further supply chain compromise.

[-] SirHaxalot@nord.pub 18 points 1 month ago

Spooky fact: There is a skeleton inside you right now.

321
🦋🧈 (thelemmy.club)
[-] SirHaxalot@nord.pub 16 points 1 month ago

Jesus Christ this is such a toxic attitude…. If you want people to take you seriously I don’t think being an ass about it and rage-baiting people is the right strategy.

61
[-] SirHaxalot@nord.pub 46 points 1 month ago

I'm like 90% sure that this post is AI Slop, and I just love the irony.

First of all, the writing style reads a lot like AI.. but that is not the biggest problem. None of the mitigations mentioned has anything to do with the Huntarr problem. Sure, they have their uses, but the problem with Huntarr was that it was a vibe coded piece of shit. Using immutable references, image signing or checking the Dockerfile would do fuck-all about the problem that the code itself was missing authentication on some important sensitive API Endpoints.

Also, Huntarr does not appear to be a Verified Publisher at all. Did their status get revoked, or was that a hallucination to begin with?

To be fair though the last paragraph does have a point,, but for a homelab I don't think it's feasible to fully review the source code of everything you install. It would rather come down to being careful with things that are new and doesn't have an established reputation, which is especially a problem in the era of AI coding. Like the rest of the *arr stack is probably much safer because it's open source projects that have been around for a long time and had had a lot of eyes on it.

1
submitted 2 months ago* (last edited 2 weeks ago) by SirHaxalot@nord.pub to c/fediverse@piefed.social

The past weeks I have worked on setting up a new Piefed based Fediverse instance: https://nord.pub/.

The main "selling points" of this instance is:

  • Operated and hosted in Northern Europe
  • Committed to avoiding US-based infrastructure and cloud products
  • Powered by Piefed

It is open to the world; the Nordic focus is quite loose and is mainly about geographic hosting and having a few Topics with communities in the Nordic languages. The main language will be English since that is the language of the vast majority of the Fediverse.

Community creation is open but I will not be creating any local communities that would "compete" with communities on other existing instances. However anyone who wants to create a community on this instance is free to do so, as long as it follows the rules.

[-] SirHaxalot@nord.pub 63 points 2 months ago

Don’t touch that, it’s a load bearing 100Mbit switch.

780
[-] SirHaxalot@nord.pub 15 points 2 months ago

Is there really a lot of AI generated doorbell camera videos out there? I can’t remember anything posted but then again maybe that just proves the point.

Then again the low resolution does make it much easier to hide typical artefacts and issues so I don’t think it proves anything.

[-] SirHaxalot@nord.pub 25 points 2 months ago

That's not all, though; some users are also unhappy not just with the age verification process itself and the security of their data, but also the people bankrolling Persona, which includes the investment fund of Palantir founder, Peter Thiel. Palantir is the data and surveillance company currently used by US federal agencies, including ICE, and Thiel's name appears 2000+ times in the Epstein files.

I used to think that people were massively overreacting about all this, but this is some pretty fucking suspicious connections.

78
submitted 2 months ago by SirHaxalot@nord.pub to c/aww@lemmy.world
557
submitted 2 months ago by SirHaxalot@nord.pub to c/memes@lemmy.world
353
Am full of gas (thelemmy.club)
[-] SirHaxalot@nord.pub 14 points 2 months ago

Is this actually practically achievable or mostly theoretical in a lab? Is it confirmed that the cops have actually managed to do this?

[-] SirHaxalot@nord.pub 38 points 2 months ago

It's probably what has surprised me the most about all this, how much has happened on free hosted email accounts.

I guess it means that privacy from human eyes (i.e. not automated scanning) is pretty good. Or Google/Yahoo is in on a conspiracy but I can't imagine regular operations staff being made aware of it.

[-] SirHaxalot@nord.pub 63 points 2 months ago

I like that the article excerpt clearly says that it’s simply about files not being removed when the trash bin is emptied, and it’s a problem specific to the Canonical snap system.. Yet every single other comment in here rants about Microsoft spyware. Not many people read beyond the headline, lol.

view more: next ›

SirHaxalot

0 post score
0 comment score
joined 2 months ago