Ah, that kind of passwordless - thanks for the correction.

The passwordless I always use is the one where you turn on the machine and have access to the desktop without entering credentials.

Passwordless is intended to prevent accessing an account using a password, so not as designed.

In some "passwordless" configurations - in other words: working as designed.

*Alpine linux

Packetstormsecurity

My pessimistic self wonders if the owners/users of these freezers even know they are in the internet 😭

These vulnerabilities were present the entire time, and the cost of exploiting them is dropping toward zero. You no longer need to stick out, to be targeted. There doesn't have to be a specific reason.

Don't put infrastructure on the network without a damn good reason and an off switch.

Remembering stuff is for losers. Just go all-in, and hope you've switched jobs before it all comes apart.

different flaw in Lenovo’s TSD303 external SSD. Its data actually was encrypted, but the drive sent the correct password back over USB in plain text for the software to compare,

Are we doing client side verification again already? I thought we had just remembered not to do it recently.

Our problem is that we're using these as boot drives and transferring files to appliances (ie network switches, etc) so we can't use a lot of the software based encryption.

I'll just hope that the iStorage and Apricorn drives use more than smoke & mirrors to protect the contents

They're all likely awful. My advice is to leave that part to well tested and trusted encryption softwares.

Ex: VeraCrypt, LUKS2, Cryptomator, Gocryptfs

So... how good are the rest then?

We've spent a whack on different secure USB drives

Lmao "FU100" is an appropriate model name

Stolen, if you will.

Gonne investigate those, thanks

Difference being: the subsidized copper was actually installed and put to use.

The subsidized fiber is mostly vapor.

Guess how much fiber has been subsidized by now.

Nahhhhh, you cannot reduce it to a single person's threats. Even deadman switches have countermeasures if you know that's how something will go off.

You should read Neuromancer

Funny how?

They probably laughed

If a regular citizen goes against society they get thrown in jail. But it seems like at a global scale, if a country has nukes, it can do whatever it wants aside from invading other countries, and get away with it.

Imagine what society would be like if individuals had access to world-ending powers. They could run around committing crime and if others tried to retaliate, they just threaten to end the world.

I'm not trying to condone North Korea's whole deal, but I do sometimes think about what an amazing job that must be in the abstract sense.

You are paid to use black hat hacking skills to steal money for your country from people you believe to be your enemy, and instead of having to hide or feel guilty you are celebrated by the people you look up to. And you know full well that there will be no repercussions from foreign actors.

That is the absolute dream for a select group of IT people. The rest of the NK experience would not be worth it, but it sounds like such a sweet deal on the surface.

I bet someone is about to go nuts on the next steam sale

Funny how? And why "stolen"?

Funny, because a bunch of the “stolen” money appears to be routed into what looks like political bribes