exceptione

  > The malware ships preinstalled in the device firmware, and we found multiple system packages involved, depending on the device. It’s on the phone before the owner switches it on for the first time, and it can’t be uninstalled.

  > The malware runs with system-level privileges that allow it to silently install and remove apps, grant permissions, and load arbitrary code supplied remotely. This essentially means its operators could install and delete apps at will, tuning each device to their needs, including making them part of large botnets.

  > This scheme is likely designed mainly to generate revenue. The operators carry out ad and click fraud, collect device and installed-app information, and turn infected devices into residential-proxy relay nodes, making them zombies in botnets. This creates an additional revenue stream, as access to botnets for DDoS attacks is a hot commodity. The larger the botnet, the more money they can charge.

Phone was compromised before the user turned it on: the rise of Midnight Mimosa bitdefender.com

4 exceptione 2 days ago 1 comments

Comment · 7 days ago

Agreed that a website should be fine, but (Dutch) banks require the app as a second factor to log into the website. Fido2 hardware tokens could replace the bullshit requirement of "choose Apple or Google to be your overlord in order to use our service".

Comment · 7 days ago

  > Only 5% of code will ever need to be hand typed if that.

You are talking about the 'vibing' demografic. Not all of them would use JetBrains, as not all programmers did before the advent of LLMs. But for the time they do have to be in the code, JetBrains could be their best option. They are in a unique position to cover their existing offerings in a gold finish.

  > Pretty sure following this advice would kill them really fast.

I don't think so. There is no money to be made in llm wrappers. Their market might have shrunk, sure, but on the other hand they should be able to bring down their expenses significantly while at the same time bringing their backlog to zero. If not, they have nothing to fear from AI and the hype will be over some day.

Comment · 7 days ago

JetBrains should focus on the artisanal engineers and the 'vibing' engineers who need to code by hand from time to time. They have a big moat already. I imagine they try to keep the user base from fleeing their platform, but I think they have already covered prompt integration. There is imho no value in yet another LLM wrapper that seems to be totally unrelated to the existing offering, at least no monetary value.

I would urge JetBrains to put all their LLM power and human brains at work to slash their IDEs backlog and deliver the GOAT of all IDEs. Building IDEs is their strength and there will always be a market for that category.

Comment · 8 days ago

  > that it was the Russians who hacked the phone and the Dutch got a copy of the contents

The Russian spy gave access to the GROe server, where a copy of the contents lived. Later on, in the beginning of 2018, the MIVD got direct access to the phone.

Comment · 10 days ago

You are over-complicating things; you can be gay without a barbell on your chest.

Comment · 10 days ago

Those websites can easily run in a php5 container, whilst the host os is up to date.

Websites depending on an older framework like Zend Framework or libraries like Doctrine 1 do not have a clear upgrade path and are stuck at php5 or have to basically start from scratch. php5 to the latest php8 is just a jump too big.

Comment · 11 days ago

  > The paradox of tolerance is a philosophical concept suggesting that if a society extends tolerance to those who are intolerant, it risks enabling the eventual dominance of intolerance, thereby undermining the very principle of tolerance. This paradox was articulated by philosopher Karl Popper in The Open Society and Its Enemies (1945),[1] where he argued that a truly tolerant society must retain the right to deny tolerance to those who promote intolerance. Popper posited that if intolerant ideologies are allowed unchecked expression, they could exploit open society values to erode or destroy tolerance itself through authoritarian or oppressive practices.

https://en.wikipedia.org/wiki/Paradox_of_tolerance

Comment · 13 days ago

Do you have an un-walled version? Content is not accessible.

Comment · 15 days ago

  > "All SDKs, runtimes, and metadata live entirely within your user directory."

Make sure your user directory has enough space then. I am not sure when I need this when Arch packages work so flawlessly, but I guess that users of slacking distro's would welcome this option to install an up to date version of the .net runtime/sdk.

Comment · 15 days ago

Let me introduce you to sports. (table tennis and curling should get a free pass though)

exceptione

Recent submissions

Phone was compromised before the user turned it on: the rise of Midnight Mimosa b bitdefender.com

Phone was compromised before the user turned it on: the rise of Midnight Mimosa bitdefender.com