• 1 Post
  • 532 Comments
Joined 1 year ago
cake
Cake day: June 18th, 2023

help-circle

  • NaibofTabr@infosec.pubtoMicroblog Memes@lemmy.worldMozilla is a sinking ship.
    link
    fedilink
    English
    arrow-up
    25
    arrow-down
    4
    ·
    9 hours ago

    Here’s the problem: there are three web browsers.

    Chromium, WebKit, and Gecko - that’s it.

    A “fork” that depends on the same browser engine and rendering engine is not really a fork, it is just a UI flavor. For the sake of security, privacy and data handling, this choice is as meaningful as changing your desktop environment on Linux.

    If you access anything financial or personally identifying (taxes, banking, credit cards, medical services, driver’s license, an email that is linked to any of those accounts, etc) you should use the browser distributed by the engine’s primary developer (Chrome, Safari, Firefox). If you use something else, you are dependent on a downstream third-party developer to properly implement the engine and ensure that its data handling is properly integrated with the browser application and the OS, and you are dependent on their keeping the engine in their knockoff version up to date. You will always be behind the security patches of the main branch, even if the downstream developer is doing everything correctly. On the internet, this is an extreme risk.



  • Someone else has mentioned M-Disc and I want to second that. The benefit of using a storage format like this is that the actual storage media is designed to last a long time, and it is separate from the drive mechanism. This is a very important feature - the data is safe from mechanical, electrical and electronic failure because the storage is independent of the drive. If your drive dies, you can replace it with no risk to the data. Every serious form of archival data storage is the same - the storage media is separate from the reading device.

    An M-Disc drive is required to write data, but any DVD or BD drive can read the data. It should be possible to acquire a replacement DVD drive to recover the data from secondary markets (eBay) for a very long time if necessary, even after they’re no longer manufactured.




  • As always with attacks of this kind, it requires the air-gapped network to be first compromised through other means – such as a rogue insider, poisoned USB drives, or a supply chain attack – thereby allowing the malware to trigger the covert data exfiltration channel.

    This goes on the list with other attacks that are interesting in an academic sense but highly impractical for real-world attacks, like Van Eck phreaking.

    You have to deploy the malware that manipulates the RAM to get it to create the radio signal on the target system, and since we’re talking about an air-gapped system that means you have to be in the room with it already.

    This article is light on specifics, but a RAM board is not an efficient radio antenna and it operates at 3-5v, so the transmission can’t be very strong. The receiver will have to be nearby, and in a relatively noise-free radio environment. Electrical wiring in the walls would mess with the signal transmission, the wall material might just block it, and if the target system is in a metal case that’s electrically grounded (which is normal for desktops and servers) I doubt the signal would get out of it. My guess is that the receiving antenna would need to be in the same room.


  • Yeah, basically you’re trying to force some circulation through the brain by manually pumping the heart - which is as much about clearing the waste buildup out of the brain as it is getting fresh oxygen to the brain, and also about preventing clots (which will later cause aneurysms when the blood starts flowing normally). Everything else is essentially expendable/repairable/replaceable.

    Even the breathing part isn’t very important, though the initial check to make sure the airway is clear is very important. If you’re doing the chest compressions right, you’ll force some airflow through the lungs anyway. The important part is getting the blood to circulate. Having stagnant blood sitting in the brain is really bad.

    The current CPR procedure recommends 100-120 chest compressions of at least 2" (5cm) per minute. You are going to hurt them. You may crack their ribs. You need to compress the heart through their ribs and muscle and other tissue that’s in the way. Even if you’re in good physical shape, it is an exhausting thing to do. It’s definitely something worth learning to do correctly - take a class if you can! You can absolutely save someone’s life if their heart stops.










  • Absolutely, a single hospital for an entire country would not work. But also, small clinics on every street corner would not work because none of them would be able to support more complex/expensive functions like surgical wards, FMRI or biochem labs. The hospital needs to be scaled so that it can support those things, but then it only makes sense for it to serve a larger community because it’s going to need a large staff and a substantial budget - so it needs to be at least locally centralized.

    As you said, there’s a critical size.