fr34aky / is on Nostr

"bc17cdad0ef332a75cd55d7447d32f417cde2934cea93f998670f6dce455f1a3971d38b32b35307ba5f3a48269329c41dc108fae629678c2a35798369d871c25"

Last Notes

2024-08-06 22:47:46

- reply

Sorry but you're acting like a drama queen. He explained everything in a few tweets. (I haven't listened to the Podcast)
NO ONE will use this attack vector, if there are better options. If you infiltrate the supply chain you wouldn't try to compromise the signing algorithm, you would directly go to i.e. seed creation. There will never be 100% security and fixing this issue won't change anything, because you open up new attack vectors... I don't understand why you are so focused on this and what you try to prove here...

2024-07-27 00:21:15

- reply

Einer der besten Artikel, die ich bisher zu dem Thema gelesen habe und zudem von der Berliner Zeitung! Ich bin schwer beeindruckt!
https://www.berliner-zeitung.de/gesundheit-oekologie/neue-rki-files-was-ist-los-mit-den-deutschen-leitmedien-li.2238274

2024-07-06 20:07:28

- reply

https://ec.europa.eu/eurostat/statistics-explained/index.php?title=Pensions_in_national_accounts_-_statistics

2024-04-14 16:47:44

Tour zum Chämtner Tobler und zur Rosinli Beiz
https://www.komoot.de/tour/1514726714?ref=aso

2024-02-13 08:46:08

‭Matthäus‬ ‭5:43‭-‬44‬ ‭Hfa‬
[43] Es heißt bei euch: ›Liebe deinen Mitmenschen und hasse deinen Feind!‹ [44] Doch ich sage euch: Liebt eure Feinde und betet für die, die euch verfolgen!
https://bible.com/bible/73/mat.5.43.Hfa

2024-01-24 22:37:31

- reply

Ledger phishing scam was just an ordinary phishing campaign with leaked emails IMO.
This one looks much more sophisticated, because you really cannot tell if phishing or not beside the links inside a mail.
Have seen the same coming from booking.com a week ago that happened to my parents. They received a phishing mail from their servers. (Verify credit card with a phishing link). Seems to be a new schema to compromise the mail infrastructure and to send "real Mails"
Here is an extract of the mail my parents received:
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass [email protected] header.s=bk header.b=qg05XoWJ;
spf=pass (google.com: domain of [email protected] designates 37.10.30.4 as permitted sender) [email protected];
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=booking.com
Return-Path: <[email protected]>
Received: from mailout-202-r3.booking.com (mailout-202-r3.booking.com. [37.10.30.4])
by mx.google.com with ESMTPS id m18-

2024-01-24 21:27:10

- reply

Not if spf=pass, dkim=pass, dmarc=pass. These mails were send from the trezor mail servers.

2024-01-24 21:20:44

- reply

looks like phishing mails from the real trezor mail servers. spf, dkim, dmarc=pass means it's verified that they are send from their own servers.