Nikola Pepelishev
23.3K posts



@monsterhunter45 Iran <loses utterly in confrontation> Also Iran - "we made America do things. That's a win."


Unpopular Opinion: das neue Cockpit im VW ID.3 steht symbolisch für den Niedergang der deutschen Autoindustrie. Rückwärtsgewandt (mit LCD Uhr!), gestaltet für 55 jährige, die dem Golf 2 nachtrauern. "If I had asked people what they wanted, they would have said faster horses."



A Russian hacker made $5 MILLION A DAY faking ad views from his apartment Aleksandr Zhukov ran a company called Media Methane out of a Bulgarian apartment On paper it was a real ad agency that placed video ads for companies like Nestle, Comcast, and The New York Times Except he wasn’t placing them anywhere real He built 6,000 fake websites that looked exactly like ESPN, CNN, Vogue, and Fox News Then rented 2,000 servers in Dallas and Amsterdam, bought 650,000 IP addresses, and registered them to Verizon and Comcast so the traffic looked like regular Americans He coded a fake web browser that scrolled pages, clicked ads, moved the mouse and solved CAPTCHAs like a real person His bots watched 300 million video ads a day Advertisers paid $13 per thousand views At peak he was pulling $5 million a day while he slept Got caught because he got into a fight with a client and spammed their inventory so hard it tripped every fraud alarm at a cybersecurity firm FBI arrested him in Bulgaria, extradited him to the US, 10 years in federal prison When he got to court he told the judge: “I’m a weaponless soldier in front of a tank with name FBI”

.@vonderleyen "The European #AgeVerification app is technically ready. It respects the highest privacy standards in the world. It's open-source, so anyone can check the code..." I did. It didn't take long to find what looks like a serious #privacy issue. The app goes to great lengths to protect the AV data AFTER collection (is_over_18: true is AES-GCM'd); it does so pretty well. But, the source image used to collect that data is written to disk without encryption and not deleted correctly. For NFC biometric data: It pulls DG2 and writes a lossless PNG to the filesystem. It's only deleted on success. If it fails for any reason (user clicks back, scan fails & retries, app crashes etc), the full biometric image remains on the device in cache. This is protected with CE keys at the Android level, but the app makes no attempt to encrypt/protect them. For selfie pictures: Different scenario. These images are written to external storage in lossless PNG format, but they're never deleted. Not a cache... long-term storage. These are protected with DE keys at the Android level, but again, the app makes no attempt to encrypt/protect them. This is akin to taking a picture of your passport/government ID using the camera app and keeping it just in case. You can encrypt data taken from it until you're blue in the face... leaving the original image on disk is crazy & unnecessary. From a #GDPR standpoint: Biometric data collected is special category data. If there's no lawful basis to retain it after processing, that's potentially a material breach. youtube.com/watch?v=4VRRri…





SOMEONE BUILT A MAP THAT SHOWS EXACTLY WHERE EVERY POWER PLANT, TRANSMISSION LINE, SUBSTATION & DATA CENTER SITS ON THE US GRID all on one interactive map. all free you can see how the grid is laid out... where the datacenters cluster... which transmission corridors carry the load... where the high-capacity connection points are opengridworks.com/power-plants zoom into any region and the whole picture comes into focus why energy costs what it costs, why data centers go where they go, why some states are power exporters and others aren't this is the kind of infrastructure visibility that used to require expensive industry reports now it's one tab







