Show Navigation

Public
- Public
- Network
- Groups
- Popular
- People

Notices by fenarinarsa🍙 (fenarinarsa@shelter.moe)

fenarinarsa🍙 (fenarinarsa@shelter.moe)'s status on Wednesday, 10-Jul-2019 02:18:24 EDT fenarinarsa🍙
- fenarinarsa🍙
2019, avec 15 ans de retard donc (Unicode 4 date de 2004), release de glibc 2.28 dans Debian 10.
Un grand merci à Mike Fabian qui a pris le sujet au sérieux.
Rendez-vous dans 20 ans...
(y’a déjà eu deux mises à jour de la norme depuis 2016 🙃)

In conversation Wednesday, 10-Jul-2019 02:18:24 EDT from shelter.moe permalink
fenarinarsa🍙 (fenarinarsa@shelter.moe)'s status on Wednesday, 14-Feb-2018 11:06:23 EST fenarinarsa🍙

Ils sont trop forts.
Facebook lance "Protect", une appli iOS qui vous protège en... redirigeant tout votre trafic dans un VPN géré par Facebook qui analyse tout ce que vous faites pour "améliorer Facebook" 🙃
https://9to5mac.com/2018/02/13/facebook-protect-spyware-ios/
In conversation Wednesday, 14-Feb-2018 11:06:23 EST from shelter.moe permalink
Attachments
1. Facebook’s ‘Protect’ feature on iOS essentially installs spyware on iPhone and iPad
  
  By Michael Potuck from 9to5Mac
  
  Facebook is rolling out a new security feature called Protect to many users of its iOS app. While the name might make unknowing users feel good about installing the associated free app, the Facebook owned VPN is designed to collect and analyze user data to “improve Facebook products and services.”
  
  As reported by TechCrunch, Facebook purchased the security software company Onavo back in 2013. It is the Facebook owned Onavo Protect iOS app that is linked to in the Facebook iOS app settings under the “Protect” label.
  
  While the VPN app is designed to give users “peace of mind” and “an added layer of security” by routing your web browsing through its servers, the company also analyzes and collects users data to improve its services as well as Facebook’s products and services.
  
  After a paragraph about the protection that Onavo provides and some bullet points on how the service works, the company states that it is essentially spyware, which is buried beneath the read more link on both the iOS App Store and the web.
  
  To provide this layer of protection, Onavo uses a VPN to establish a secure connection to direct all of your network communications through Onavo’s servers. As part of this process, Onavo collects your mobile data traffic. This helps us improve and operate the Onavo service by analyzing your use of websites, apps and data. Because we’re part of Facebook, we also use this info to improve Facebook products and services, gain insights into the products and services people value, and build better experiences.
  
  While some users may feel okay about trading their privacy for a free VPN client, many users are likely unaware that Onavo Protect is specialized spyware for Facebook, and may feel misled by the marketing of the app in Facebook’s settings and on the App Store.
  
  TechCrunch reports that there are an estimated 33 million users who have Onavo Protect installed, with 38% being on iOS and the remaining 62% on Android.
  
  Check out 9to5Mac on YouTube for more Apple news:
fenarinarsa🍙 (fenarinarsa@shelter.moe)'s status on Wednesday, 03-Jan-2018 20:24:35 EST fenarinarsa🍙

Communiqué d'AMD indiquant que leurs CPU sont vulnérables à la variante 1 de Spectre et pas aux deux autres failles.
https://www.amd.com/en/corporate/speculative-execution

In conversation Wednesday, 03-Jan-2018 20:24:35 EST from shelter.moe permalink
fenarinarsa🍙 (fenarinarsa@shelter.moe)'s status on Wednesday, 03-Jan-2018 18:31:13 EST fenarinarsa🍙
in reply to

Par conte Spectre, autant vous dire que c’est la porte ouverte de l’enfer. Ça permet de lire les données en mémoire d’un autre processus tranquilou. Il y a un exemple en *JAVASCRIPT* pour dumper le processus du navigateur.
Et sur les core en hyperthreading ou virtuels, ça permet même de lire les données entre vCore. Oui oui.
Y’a pas de patch en vue. Pour l’instant c’est pas fixable sans bousiller toutes les perfs des CPU.
Bonne année 2018 ! 👻
https://spectreattack.com

In conversation Wednesday, 03-Jan-2018 18:31:13 EST from shelter.moe permalink
fenarinarsa🍙 (fenarinarsa@shelter.moe)'s status on Wednesday, 03-Jan-2018 18:30:26 EST fenarinarsa🍙

Bon ben j’ai rapidement parcouru les papiers sur Meltdown et Spectre et coucou c’est le caca.
Meltdown permet de lire le kernel en mode kikoulol comme prévu. Ça passe les containers donc Docker l’a dans le baba.
Ça ne concerne apparemment que les x64 (mais les auteurs n’en mettent pas leur main à couper). Les patchs à venir pour les OS annulent l’attaque au prix d’une perte de perfs, on en a parlé.

In conversation Wednesday, 03-Jan-2018 18:30:26 EST from shelter.moe permalink

Jonkman Microblog is a social network, courtesy of SOBAC Microcomputer Services. It runs on GNU social, version 1.2.0-beta5, available under the GNU Affero General Public License.

All Jonkman Microblog content and data are available under the Creative Commons Attribution 3.0 license.

Switch to desktop site layout.