Link to other sources are welcome.

I searched for sources and picked this article as it’s both relatively exhaustive, and one of the firsts ones published on this topic.

China’s really being a champion of peace and stability /s

That’s a good point. The legal defense fund might still be a good idea, with enough publicity it could get donations.

An idea: use some of that money to start or contribute to a legal defense fund for drags and queer people.

There’s so much lies and hate in some places/groups. If more victims had access to a decent lawer to defend themselves, politicians would think twice before launching random accusations.

Knowledge of the account is an obvious caveat. Yubikey-based MFA is an added layer of protection for accounts, so any kind of attack against MFA assumes the attacker already knows which account to target.

It’s like saying “our door lock is flawed, but the attacker would need to have knowledge of the door”.

The cost and complexity is what’s noteworthy and is more relevant. Although attack cost and complexity usuallu goes down with advances in tooling and research. So it may be a good idea to plan a progressive retirement of affected keys.

That data comes from Google. They aren’t billing android users. They’re just hoarding data for no good reason.

Police isn’t going after Apple for this kind of data, probably because Apple isn’t collecting it.

Even mobile telecom company probably don’t need to collect that data. They need to process the location/cell location when a call happens to process it, and to increase a counter for local vs roaming call duration for billing purpose. As soon as the call ends the location information can be discarded.

What about not collecting the data in the first place?

While that’s true, but there’s no indication of Microsoft brute forcing with million of combinations.

The article you link says Microsoft is only trying a few obvious passwords: the filename, and words found in the plaintext message.

Proper encryption isn’t just about using a strong algorithm. It’s also about proper key management, ie not sending the password in the clear via the same channel as the encrypted files.

Better late than never.

ZIP isn’t a good way to encrypt, but what Microsoft is doing is simply reading the email, and decrypting zips with the password found in the email body.

All encryptions schemes can be trivially broken if you have the key. It’s not even breaking, it’s just normal decryption.

Scientists don’t have to explain why they’re leaving twitter. The reasons should be obvious to anyone familiar with Twitter.

Journalists need to explain why they’re still on Twitter, given that platform has so much bots, trolls, hate and lack moderation.

Once the war in Ukraine is over, weaponized drones won’t just vanish. They’re already made by companies with different level of ethics and any country able to pay is or will be able to buy them. Sooner or later, like many weapons, organised crime will get their hands on them, and use them outside of battlefield.

There’s no way to completely prevent it, but we could at least limit damage by regulating the shit out of drones.

Sodas

AI is the new “the dog ate my homework”

🎻

A call for resignation may only be the first step, or a way to confront him and calling out his failures.

No need to look very far. The answer is within the subheading of the article being discussed here. You don’t even need to click the link nor to read the article, since tartigrada included this information in the quote that’s part of this post’s text:

Donald Trump is reportedly advising Israeli Prime Minister Benjamin Netanyahu, which would be a violation of the Logan Act.

If that happened, I sincerely hope there is proof, and that it’s on its way to a capable prosecutor.

Nice.

Does Forgejo support Git? I’m not familiar with Forgejo, and it’s not obvious in this announcement or their homepage.

Forgejo does support Git, I didn’t read carefully enough.

There miners robot don’t exist yet, but they would probably require high tech components and manufacturing capabilities for all these different components (motors, electronics, batteries, sensors, …).

Self replicating robots is still science fiction. If we wanted to build such robots in space, we’d need to build and launch manufacturing facilities in space before we can actually build robots in space.