permabrisa รีทวีตแล้ว
permabrisa
18.2K posts
permabrisa
@anotherfodido
involved and detached.
São Paulo, Brasil เข้าร่วม Ekim 2012
2.4K กำลังติดตาม324 ผู้ติดตาม
permabrisa รีทวีตแล้ว
permabrisa รีทวีตแล้ว
permabrisa รีทวีตแล้ว
permabrisa รีทวีตแล้ว
permabrisa รีทวีตแล้ว
Esse tipo de post só prova o que eu já disse, a direita não é contra bandido, é contra um estereótipo do que é um bandido.
Rafael Gloves@rafaelgloves
Olha essa família bicho. Quem é o fdp que tem coragem de dizer que são “golpistas”? Que este cara merece 16 anos de cana por um “golpe” provado apenas por uma delação atrapalhada de um milico desesperado?
Português
permabrisa รีทวีตแล้ว
we are going to love each other without scruples or fear or restraint.
— Franz Kafka, Letters to Milena
English
permabrisa รีทวีตแล้ว
O cara teve mais contato com a cultura brasileira do que 99% dos brasileiros
Português
permabrisa รีทวีตแล้ว
permabrisa รีทวีตแล้ว
permabrisa รีทวีตแล้ว
Hacking the #EU #AgeVerification app in under 2 minutes.
During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory.
1. It shouldn't be encrypted at all - that's a really poor design.
2. It's not cryptographically tied to the vault which contains the identity data.
So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app.
After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid.
Other issues:
1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying.
2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step.
Seriously @vonderleyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.
Paul Moore - Security Consultant @Paul_Reviews
.@vonderleyen "The European #AgeVerification app is technically ready. It respects the highest privacy standards in the world. It's open-source, so anyone can check the code..." I did. It didn't take long to find what looks like a serious #privacy issue. The app goes to great lengths to protect the AV data AFTER collection (is_over_18: true is AES-GCM'd); it does so pretty well. But, the source image used to collect that data is written to disk without encryption and not deleted correctly. For NFC biometric data: It pulls DG2 and writes a lossless PNG to the filesystem. It's only deleted on success. If it fails for any reason (user clicks back, scan fails & retries, app crashes etc), the full biometric image remains on the device in cache. This is protected with CE keys at the Android level, but the app makes no attempt to encrypt/protect them. For selfie pictures: Different scenario. These images are written to external storage in lossless PNG format, but they're never deleted. Not a cache... long-term storage. These are protected with DE keys at the Android level, but again, the app makes no attempt to encrypt/protect them. This is akin to taking a picture of your passport/government ID using the camera app and keeping it just in case. You can encrypt data taken from it until you're blue in the face... leaving the original image on disk is crazy & unnecessary. From a #GDPR standpoint: Biometric data collected is special category data. If there's no lawful basis to retain it after processing, that's potentially a material breach. youtube.com/watch?v=4VRRri…
English
permabrisa รีทวีตแล้ว
permabrisa รีทวีตแล้ว
permabrisa รีทวีตแล้ว
permabrisa รีทวีตแล้ว
this tweet may have single-handedly taken down Live Nation and Ticketmaster
Trung Phan@TrungTPhan
A federal jury just found Live Nation has operated as a monopoly and broken antitrust rules. Potential remedy is divesture of Ticketmaster (argument is Live Nation forces venues to use its ticketing service or else lose concert tours). Ticketing is cash cow: while only 12% of sales ($3B of $25.2B), it is 37% of operating profits ($1.1B) in 2025. Conversely, the concert division — which is world’s largest promoter and producer of live events (booking, marketing, logistics etc.) — does 83% revenue ($20.9B) but operating margin is tiny at 3% ($687m). The company dominates right now. In 2025, it put on 55,000 events and sold 646 million tickets (Ticketmaster sold 10x more than #2 service AEG). Live Nation will try to fight the breakup but industry will almost certainly end up more free-flowing. Fewer exclusive events and concert venues can shop other ticketing services. Just chill on the fees, dude. *** NYT on court case: nytimes.com/2026/04/15/art… Sherwood on business model: sherwood.news/business/the-d…
English
permabrisa รีทวีตแล้ว
permabrisa รีทวีตแล้ว
After he won the Nobel Prize in Literature in 1957, Albert Camus wrote a letter of thanks to his favorite childhood teacher, whom he'd never forgotten. It's beautiful.
English
permabrisa รีทวีตแล้ว
permabrisa รีทวีตแล้ว
Quando chegarem para você dizendo que a "Justiça do trabalho é pró-empregado" lembrem que o TST já reconheceu demissão por justa causa nesses dois casos:
1. Empregada doméstica gestante que usou o hidratante da patroa
2. Empregado que postou uma foto sorrindo em rede social uma vez que, pasmem, estava afastado por depressão.
Português
permabrisa รีทวีตแล้ว
- Meet Salvatore Sanfilippo
- Founder of Redis
- started redis as a side project
- made it open source
- Built it Mostly Alone
- written in pure C language
- made it extremely fast
- initially people didn’t take it seriously
- he proved them all wrong
- Millions of developers started using it
- Companies like Twitter, GitHub, Stack Overflow, Netflix depend on it daily
- used in almost every modern backend system design
- Stepped down from active development
- Left Redis to protect his mental peace
- Avoids the spotlight
- don't stay very active on social media
What a legend 🔥
English