floralhangnail

Oklahoma hasn't threatened to nuke anyone.....yet.

As it should be.

`IMO, !$ is most useful of them all (it is the one that gets replaced with the last argument of the last command).`

I've been liking Esc+. for this. It doesn't usually work in browser sessions though, have to do Ctrl+[+. which is a strange feeling 3 finger salute. For some reason I'm able to remember that one rather than !$

Edit: apparently Alt+. does the same, wow.

Optional today, mandatory tomorrow.

Every time I hear about an agent escaping it's sandbox, I just think it must not have been much of a sandbox. Like how hard are they really trying to contain it? Is it just a container host with unpatched flaws, or is it a container, nested in a VM, behind a firewall with no ports open in an air gapped environment? I think they'd prefer it can get out so they can announce it and hype their stock.

Is this a dig at IPv6?

I bought one of their travel routers to play with and even though it's OpenWRT based, I consider it Chinese firmware because they add their own stuff on top of it. The fact that it's even possible that it can be enrolled in their GoodCloud remote access....no thanks. I consider it an untrusted device except when I have stock OpenWRT on it. I know it's paranoia but companies like that marketing to the tech crowd/devs especially now with their KVM's just seems slightly fishy.

I do it with an hourly cronjob and haven't noticed any ill effects.

Think I may have to give USBKill and BusKill a try.

Excellent info, thank you.

I still think with laptops that have 2 RAM sticks under the bottom cover and the other 2 sticks underneath the keyboard, the spray can attack would be trickier. I assume though it's possible the attacker can keep the laptop running while the palmrest and keyboard are being disassembled. If the attacker cannot freeze all sticks of RAM though, would the attack be less likely to be successful? Would the disk encryption key be spread across all RAM sticks, or possibly just one?

I will look more into the hardware memory encryption as suggested.

Are there any tricks or guides out there to protect from this attack? Obviously not leaving hardware running and unattended, but what else can help protect you if your running laptop is stolen out of your hands? Workstations can be configured to shutdown upon intrusion switch being activated but what about laptops? I guess hot gluing the RAM in would be a physical obstacle. What about a BIOS password being required for booting from external media or having secure boot enabled? There are exploits to bypass those things, but to an attacker not finding out they are up against that until they reboot, I would hope that would slow them down enough that they fail. If half of or all of the RAM is mounted under the keyboard, I think they would have difficulty getting it out in time. Besides spraying the RAM directly, can you freeze an entire laptop while it's still running? Won't condensation cause problems pretty quickly?

Anecdotally, it seems to me that most Europeans aren't as consumed by their dopamine delivery devices in day to day activities as most Americans are.