I've got an ad blocker and had no problems. But thanks for a cleaner link.

Me too. All I have to do is reload the page a few times until it gets through.

 

Me too. All I have to do is reload the page a few times until it gets through.

Yeah those Ad blocker blockers have become really annoying. Now we need an Ad blocker blocker blocker. Then once they catch on and use an Ad blocker blocker blocker blocker, we will need an Ad blocker blocker blocker blocker blocker, etc., etc, etc.
Reminds me of those Mad Magazine cartoons "Spy vs Spy".

 

Yeah those Ad blocker blockers have become really annoying. Now we need an Ad blocker blocker blocker. Then once they catch on and use an Ad blocker blocker blocker blocker, we will need an Ad blocker blocker blocker blocker blocker, etc., etc, etc.
Reminds me of those Mad Magazine cartoons "Spy vs Spy".

You should write a rap song called "Block the blocker" ... or somet'n

 

Yeah those Ad blocker blockers have become really annoying. Now we need an Ad blocker blocker blocker. Then once they catch on and use an Ad blocker blocker blocker blocker, we will need an Ad blocker blocker blocker blocker blocker, etc., etc, etc.
Reminds me of those Mad Magazine cartoons "Spy vs Spy".

I see this as a freedom thing:

I can choose to watch ads or not.

They can choose to require me to watch ads or not.

Neither of us is forcing the other. They want me to watch ads? I go elsewhere.

There are no monopolies on the internet.

Edit: if their content is compelling, I turn off the ad blocker.

 

I see this as a freedom thing:

I can choose to watch ads or not.

They can choose to require me to watch ads or not.

Neither of us is forcing the other. They want me to watch ads? I go elsewhere.

There are no monopolies on the internet.

Edit: if their content is compelling, I turn off the ad blocker.

Congratulations

 

Congratulations

It's nice to be occasionally recognized for one's achievements. Thanks.

 

It's nice to be occasionally recognized for one's achievements. Thanks.

Oh you are certainly welcome

 

!!

 

!!

IMO, Not a mistake.

 

!!

Have any brief description of what that video is saying?

 

Have any brief description of what that video is saying?

I only watched a small portion of it, but from that it appears that what he is saying is that these cameras have such poor security features that if they are online in almost any way that it is pretty easy to access their feed without any kind of authentication at all.

Sadly, this is all too common with a large fraction of electronics. The people designing them have no grasp and no clue about what security is, let alone how to implement it. Or, worse, they think they do and so they roll there own. As a result, not only can a large fraction of things hanging on the Internet be compromised, but they often act as gateways into the networks they are a part of.

 

I only watched a small portion of it, but from that it appears that what he is saying is that these cameras have such poor security features that if they are online in almost any way that it is pretty easy to access their feed without any kind of authentication at all.

Sadly, this is all too common with a large fraction of electronics. The people designing them have no grasp and no clue about what security is, let alone how to implement it. Or, worse, they think they do and so they roll there own. As a result, not only can a large fraction of things hanging on the Internet be compromised, but they often act as gateways into the networks they are a part of.

The problem is not really the actual cameras as they are hardwired (via non-public networking) to the concentrator that sends the combined video streams to the host for processing over public networks. The typical IPCAM has RTSP auth user/password capabilities and usually the ability to encrypt base64 encoded passwords but it's not very secure.
https://www.wowza.com/blog/rtsp-the-real-time-streaming-protocol-explained
Some IPCAMs do have SRTSP (useful if the direct camera feed is on a public network) but it's a mixed bag in most cases.
https://www.ipcamlive.com/secure-rtsp-streaming

The concentrator could possibly encrypt the data stream but there is no expectation of privacy to cars on the public street as anyone could setup a camera or drive with a camera and record cars and their plates. What's protected is the database that matches plates to a person and their private information from the DMV but that data not being transmitted here and is normally protected by people who have a clue, in most cases.

 

https://www.hackster.io/news/aedan-...0-s-security-subsystem-wide-open-a500925c7b35
Aedan Cullen Cracks the Raspberry Pi RP2350's Security Subsystem Wide Open
Voltage-glitch attack, demonstrated at the 38C3 event, seems to be in with a shot at winning Raspberry Pi's $20,000 CTF contest.
"I think one notable thing about this [is] it's not a very difficult attack at all," Cullen claims during his presentation. "It's just a normal power glitch. Just dropUSB_OTP_VDDfor 50μs or so across theCRIT0andCRIT1OTP PSMreads, which on my chips are around 220-250μs from the characteristic current spike that marks the beginning of the OTP PSM sequence."

The old school voltage glitching is back in fashion as it seems lessons from the past are being forgotten with some new hardware.

 

https://www.texasattorneygeneral.gov/sites/default/files/images/press/Allstate and Arity Petition Filed.pdf

Plaintiff, the State of Texas (“Plaintiff” or the “State”), acting by and through the Attorney
General of Texas, Ken Paxton (“Attorney General”), brings this action against Defendant The
Allstate Corporation, Defendant Allstate Insurance Company, Defendant Allstate Vehicle and
Property Insurance Company (collectively, “Allstate Defendants”), Defendant Arity, LLC,
Defendant Arity 875, LLC, and Defendant Arity Services, LLC (collectively, “Arity Defendants,”
and collectively with Allstate Defendants, “Defendants”) for violating the Texas Data Privacy and
Security Act, Tex. Bus. & Com. Code §§ 541.001 et seq. (“TDPSA”); Tex. Bus. & Com. Code §§
509.001 et seq. (“Data Broker Law”); and Tex. Ins. Code §§ 541.001 et seq. (“Texas Insurance
Code”).

1. Defendants, a series of companies owned by insurance giant, Defendant The
Allstate Corporation, conspired to secretly collect and sell “trillions of miles” of consumers’
“driving behavior” data from mobile devices, in-car devices, and vehicles.
1 Defendants used the illicitly obtained data to build the “world’s largest driving behavior database,” housing the driving
behavior of over 45 million Americans.
2 Defendants created the database for two main purposes:
(1) to support Allstate Defendants’ car insurance business and (2) profit from selling the driving
behavior data to third parties, including other car insurance carriers (“Insurers”).
3 Millions of Americans, including Texans, were never informed about, nor consented to, Defendants’
continuous collection and sale of their data.
2. Defendants covertly collected much of their “trillions of miles” of data by
maintaining active connections with consumers’ mobile devices and harvesting the data directly
from their phone. Defendants developed and integrated software into third-party apps so that when
a consumer downloaded the third-party app onto their phone, they also unwittingly downloaded
Defendants’ software. Once Defendants’ software was downloaded onto a consumer’s device,
Defendants could monitor the consumer’s location and movement in real-time.
3. Through the software integrated into the third-party apps, Defendants directly
pulled a litany of valuable data directly from consumers’ mobile phones. The data included a
phone’s geolocation data, accelerometer data, magnetometer data, and gyroscopic data, which
monitors details such as the phone’s altitude, longitude, latitude, bearing, GPS time, speed, and
accuracy.

https://gizmodo.com/texas-sues-allstate-for-collecting-driver-data-to-raise-premiums-2000549878
Texas Sues Allstate for Collecting Driver Data to Raise Premiums

 

https://www.texasattorneygeneral.gov/sites/default/files/images/press/Allstate and Arity Petition Filed.pdf




https://gizmodo.com/texas-sues-allstate-for-collecting-driver-data-to-raise-premiums-2000549878
Texas Sues Allstate for Collecting Driver Data to Raise Premiums

SOB's .... I hope they hit them in their pockets ...

 

Fitness app spills secrets of French nuclear submarines to Russia


​

The app’s mapping feature, which allows users to share fitness activities and achievements globally, displayed exercise routes, effectively revealing the presence of the submarine to anyone monitoring the app—including potentially hostile entities like Moscow.

 

Fitness app spills secrets of French nuclear submarines to Russia
View attachment 340518
​

There have been known cases where FitBit tracking has allowed enemies to figure out where concealed posts were located because of soldiers not disabling them.

These kinds of breaches are definitely an issue, but they are far from new with the digital age, it's just that the digital age makes for an additional and much more fertile ground for them.

I remember an article that we had to read in AFJROTC back in the 1980 time frame about an intelligence gathering exercise conducted at a base in California in the 1970s. The operatives were told to determine if anything significant was happening at the base and their ground rules was that they could not enter the base or do anything illegal, such as wiretapping, and had to remain absolutely covert (so no bribing anyone). Essentially, they had to employ means that were effectively passive.

At first, they frequented bars and other places that personnel frequented hoping to overhear or guide conversations to leak information, and that was of limited utility. Then they picked a handful of businesses and had operatives get jobs there. One of these was a storage lot that stored automobiles. A few were places that supplied fresh foods to the base. Another was a department store and yet another at the local post office. There were several others. Since the community around the base was pretty small, a very significant fraction of the business was related to the base. Over another few months they detected changes in activity that let them conclude that the base was likely getting ready to make a major deployment to a cold-climate location that would likely last about two months and were able to predict the kick-off date about a week in advance. This was based on things like an increase in people putting their cars in storage, making purchases of cold-weather clothing, and having their mail held for two months. The time prediction resulted from a significant decrease in the orders of perishables for the base's dining halls. Their analysis was spot on.

 

There have been known cases where FitBit tracking has allowed enemies to figure out where concealed posts were located because of soldiers not disabling them.

These kinds of breaches are definitely an issue, but they are far from new with the digital age, it's just that the digital age makes for an additional and much more fertile ground for them.

I remember an article that we had to read in AFJROTC back in the 1980 time frame about an intelligence gathering exercise conducted at a base in California in the 1970s. The operatives were told to determine if anything significant was happening at the base and their ground rules was that they could not enter the base or do anything illegal, such as wiretapping, and had to remain absolutely covert (so no bribing anyone). Essentially, they had to employ means that were effectively passive.

At first, they frequented bars and other places that personnel frequented hoping to overhear or guide conversations to leak information, and that was of limited utility. Then they picked a handful of businesses and had operatives get jobs there. One of these was a storage lot that stored automobiles. A few were places that supplied fresh foods to the base. Another was a department store and yet another at the local post office. There were several others. Since the community around the base was pretty small, a very significant fraction of the business was related to the base. Over another few months they detected changes in activity that let them conclude that the base was likely getting ready to make a major deployment to a cold-climate location that would likely last about two months and were able to predict the kick-off date about a week in advance. This was based on things like an increase in people putting their cars in storage, making purchases of cold-weather clothing, and having their mail held for two months. The time prediction resulted from a significant decrease in the orders of perishables for the base's dining halls. Their analysis was spot on.

I read about new data breaches almost every day now. Something is not working very well in the security sector.

 

Fitness app spills secrets of French nuclear submarines to Russia
View attachment 340518
​

What will they come up with next

 

Wait. The FBI doesn't encrypt their communications?

https://www.ibtimes.com/fbi-att-hacker-breach-3759795