• 2 Posts
  • 20 Comments
Joined 1 year ago
cake
Cake day: July 2nd, 2023

help-circle










  • For some reason I have a hard time with which knob goes to which burner on a range. Couldn’t tell you why. Got home from a 12 hour shift at work and my wife, who didn’t work that day, told me she expected me to make dinner. I go into the kitchen and it is a much bigger mess then how I left it the night before. So with my last bit of mental capacity I put things away enough so I can cook. But apparently there were some plastic lids under a glass lid on the back of the stove. Started a pot of water and went to the other side of the kitchen to chop some veg. The kitchen started to smell weird, and I’m looking around trying to figure what it is, and figure out I had turned on the wrong burner. Picked up the glass lid and my lungs were assaulted with plastic fumes. I’m coughing and hacking and wheezing and almost passing out on the floor. It was so hard for me to breath I felt like I was dying. This brings my wife in and she steps over my body and finishes making dinner. Serves herself some, and takes it into the bedroom just as I’m barely able to stand again. That’s when I realized, I had fucked up. Shouldn’t have married her. Been divorced 2 years today.











  • The Nice: This is possible because the original web protocol allows sites with CORS disabled to be able to still access 127.0.0.1 This allows for websites to assist in setting up installed programs, and plugged in devices. (Long before the days of Electron) or registering warranty. It can also allow locally installed software to communicate with their web counterparts. Your local Steam website could potentially host a site on 127.0.0.1 and tell steampowered.com what games are installed. It can also be used to see if someone is remoting into your computer (or similarly acting malware) and thusly increasing fraud likelihood score, or asking for 2FA. Think grandmas getting scammed over the phone. This is why it is so prevalent on banking sites.

    The Naughty: This can also be used as part of a larger scheme to uniquely Identify users and help detect fraud. Identifying users speeds up login and can reduce local storage duplication even in the case of cookie clearing. They scan as much data about you as they possibly can: 1rdt and 3rd party cookies, local storage, browser size, screen size, operating system, browser, what extensions do you have installed, what ports you have open, etc etc. Faster login and fraud detection sound like noble goals, but in reality these are used to generate an ad profile about you. The more data they collect on you the higher a price ad agencies will pay to advertise. In some cases they will have your name and DOB (think Google and Facebook) but modern systems are complex enough that they don’t need that anymore. In many cases their match of you is more accurate then a literal fingerprint. Now most people don’t have ports open so I don’t know of, off hand, any websites that are doing this but it’s entirely possible. Did you open a port for World of Warcraft? If so we can target WoW and RPG ads to you, etc.

    The evil However you feel about large corporations fingerprinting your online presence this is a reconnaissance technique used by bad actors to find insecurities on your network and device so they can identify ones to hack.

    Consider this analogy: imagine if a corporation went around door to door checking to see if your door is unlocked. They tell you and the government that the reason they are doing that is to see who is liable to get broken into. They also take this data and use it to send you advertisements for door locks. Now someone else goes around door to door dressed like the corporation and actually breaks into your house. The robber definitely broke the law, but was facilitated by the corporation that was borderline breaking the law.

    If you implement a system where they have to ask before testing your lock (like Brave is) you can get the best of both worlds, but you alone are responsible for identifying bad actors.