Dan

https://infosec.exchange/@dko

He/him
No spoons, only knives

Lapsed craftsperson
Too-earnest chronic illness fuckup

Header image is a church sign that reads:
THOSE PREVENTING HISTORY
FROM BEING TAUGHT
INTEND TO REPEAT IT

Profile image by @heyheymomo.
A smiling amorphous cartoon blob gleefully riding a bicycle.
It has swept back handlebars and the back tire is kicking up a modest cloud of dust.

note to prospective followers:
new accounts with no posts or few interactions will be blocked
mastodon.social and any .de users are suspect by default
will follow any jortser almost uncritically

:donor:

Public Key

npub1k6ae7kh4yu2ya4cut8jeuc4wm05n4xd7fzdycrqk9rns7jl0xhtqh6lxrv

NIP-05 Address

[email protected]

Profile Code

nprofile1qqstdwultt6jw9zw6uw9nev7v2hdh6f6nxly3xjvpstz3ec0f0hnt4sprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmnt3efnzp

Publishing to

relay.momostr.pink

Author Public Key

npub1k6ae7kh4yu2ya4cut8jeuc4wm05n4xd7fzdycrqk9rns7jl0xhtqh6lxrv

Show more details

Last Notes

2024-05-25 18:41:58 GMT

- reply

👍 Cunningham's Law 👍
> Cunningham's Law states "the best way to get the right answer on the internet is not to ask a question; it's to post the wrong answer."
> The concept is named after Ward Cunningham, the inventor of wiki software. According to Steven McGeady,[1] the law's author, Wikipedia may be the most well-known demonstration of this law.[2]
> Cunningham's Law can be considered the Internet equivalent of the French saying "prêcher le faux pour savoir le vrai" ("preach the falsehood to know the truth"). Sherlock Holmes has been known to use the principle at times (for example, in The Sign of the Four.[3]) In "Duty Calls" ("Someone is wrong on the Internet"), xkcd references a similar concept.[4] The Chinese idiom 拋磚引玉 "tossing a brick to attract jade" expresses a similar concept.
https://meta.wikimedia.org/wiki/Cunningham%27s_Law

2024-05-25 18:16:57 GMT

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/503/083/652/216/923/original/a02ca917001f9624.jpg

2024-05-21 19:08:16 GMT

- reply

that's the thing that really terrifies me. not that it will eventually become impossible to disable, but the fact that it being baked in to the OS means an attacker or abuser can just re-enable it. probably with a single PS command.
it's making a keylogger and half the functionality of a RAT with full history into a LOLbin. and it won't be flagged or disabled by any security tools.
the *productivity measurement* tools MS has already been marketing for years were bad enough, how long until recall becomes a part of the legal hold workflow? how long until your boss watches every single thing you do because let's be honest, plenty of shitty bosses are just petty cops deep down. what about the creepy sysadmin with a crush on someone, who then harvests their email password with recall? how much damage could someone do with those credentials?
the possibility for abuse is so intensely, wildly outsized with any actual utility that anyone can imagine, you would have to be completely out of touch with even basic human decency to think this is a good idea.