spydum

Wow, that isn't clear. Is there an incident, or did they just become aware about MPTCP vuln? Details on the mptcp are also pretty scarce as well right?

My first exposure to networking was a 10base2 setup I got from a closing business. Setting that up to run an ipx/spx network which I could run doom/descent/quake on was my very first intro to networking. Was so cool to see computers across the room communicate back then. Something very satisfying about the way those coax connectors twist in and click.

yes different, but as with any fruit there is variety. muscadine grapes are huge and taste like candy

thats okay, probably was engineered by an llm, who thought GETs were always read only

I think you could actually look at this via the OPPOSITE lense: OpenSource was good for companies before, because they got free code/bugfix/labor, which would have been expensive to produce themselves.

Now with LLM and agentic factories pumping out bugfixes/code, does the equation on opensource still look attractive to a for-profit company? Why give away that sweet source code?

BitchX from a shell with a vanity hostname was a hard flex for sure

Don't worry, we will fork and just repeat the pattern with new names! See you next time!

I know people seem to think nsa and other gov threat actors live in a land of zero days and advanced techniques... And to some degree, they sure do develop those and are able to leverage them.

However, from my point of view most targets are able to be compromised by poor configs, hygiene, well known and patchable vulns, or the more likely avenue: the humans operating the system.

nielsen's ACR method is embedded into millions of devices and vendors. No need for a microphone, it's processing the audio signal being sent out. A microphone would be a wasted conversion..

(your car infotainment also likely has nielsen tech in it most likely, as they bought arbitron and gracenote)

Exactly, go look at Lucid/Tesla and a few others for examples of how the car is a brick without the manufacturers sekret unlock codes and calibration software. If they decide not to help, you are out of luck.

isn't this just malicious compliance? not clear how this would violate GPLv2?

That was mostly Bayesian probability filters, followed by SPF and more recently DKIM.. Maybe you could consider the Bayesian filter databases being trained as ML, but I feel it's a far way from our typical AI/LLM surge

I have bad news if you think banks are the pinnacle of cyber security practices...

Maybe some rare few are, but by and large they generally stink.

They tend to give that impression because they hire tons of auditors and panjandrum, to hassle their suppliers, but internally they are winging it like the rest of us.

this is all fine and good, if you are okay broadcasting your internal hostnames. I suppose it's a trade off some might make.