🦣 stegodon

Jun 11, 2026

Very happy to be in a room with the excellent @bert_hubert - an expert whose work I've followed for several years now. Lots to learn here.

Jun 11, 2026

🐛 Media tego tematu nie podjęły, następuje coś w stylu "ciszej nad tą trumną". O co chodzi?Przez lata w ZUS, krócej w innych instytucjach, można było zalogować się do systemu niemal każdej (z małymi wyjątkami) instytucji państwowej, odpowiednio preparując dokument do "Logowania podpisem kwalifikowanym".Wystarczyło znać imię, nazwisko i pesel.Na czym polegał błąd?Na złej interpretacji struktury zwracanej przez SDK.W skrócie: ignorowano pole zawierające informację, czy przesłany podpis jest zaufany, ograniczając się do sprawdzenia, czy proces przetwarzania zakończył się bez błędów.Tak, przy spreparowanych kluczach i dokumencie proces przetwarzania kończył się bez błędów...Wnioski? Państwo nie dowozi w software. Nie dowozi w audyty (jeśli były?).Dodatkowy smaczek?Od zgłoszenia, naprawa potrafiła trwać miesiące!Co by się stało, gdyby kod był otwarty?Poddany audytowi społeczności, która jest bardzo zainteresowana systemami udostępnianymi przez państwo? Zapewne problem zostałby wyłapany, bo to jakby podstawa podstaw...No ale systemy są zamknięte, bo wg decydentów tak jest bezpieczniej... To błąd i myślenie "odwrotne".CVE-2026-9058Prezentacja Michała Leszczyńskiego, który odkrył, odpowiedzialnie zgłosił i PRZYPILNOWAŁ naprawienia podatności (44 minuty):https://www.youtube.com/watch?v=pMdnS8I18TsInvidious:https://inv.nadeko.net/watch?v=pMdnS8I18Ts#bezpieczeństwo #zaufanie #KluczPubliczny #CERT #PKI #MinisterstwoCyfryzacji #Państwo #systemy

Jun 11, 2026

Putin umiera i trafia do piekła. Za dobre sprawowanie dostaje kilka dni urlopu w Moskwie. Zamawia wódkę w barze i pyta barmana:- A powiedz, Krym to do nas należy?- Tak, Krym nasz.- A Donbas? Nasz?- Tak, cały Donbas nasz.- A Kijów powiedz? Już nasz?- Kijów też nasz.Wychyla wódkę i mówi:- Idealnie.A barman:- To będzie 7 euro.

Jun 11, 2026

That blows my mind.

Jun 11, 2026

You can become an EFF member for as little as $10/month! With your donation, you'll get exclusive member updates, access to discounts on EFF swag, and receive our new Claw Back t-shirt as a thank you gift 🐈 https://eff.org/spring

Jun 10, 2026

EFF’s @aaronmackey joined WBUR's “Here & Now” today to discuss how the U.S. Supreme Court recently upheld fines that the Federal Communications Commission issued against some telecom companies for failure to protect user data. https://www.wbur.org/hereandnow/2026/06/10/scotus-fcc

Jun 10, 2026

Tonight's Low Quality Ad is for this 64x64 Pixel Art LED Display. 64 pixels across and down might not sound like much, but with a little imagination you can create almost anything. You could even make a... (think of something other than a shark. Think, think.) ...shark.https://collabs.shop/9rx6nm

Jun 10, 2026

Big Tech can endure the legal uncertainties of the NO FAKES Act, but it would be totally destabilizing for smaller companies, nonprofits, and archivists. Tell Congress we deserve solutions that don't further entrench monopolists. https://www.eff.org/deeplinks/2026/06/tell-congress-just-say-no-no-fakes

Jun 10, 2026

Oh, that's what that is?

Jun 10, 2026

We carry the movement for digital rights together. Will you help us spotlight folks who are helping us protect our digital privacy and free expression? Nominate your internet freedom heroes for an EFF Award by June 24. https://www.eff.org/EFFAwardsNomination

Jun 10, 2026

Poor tungsten.

Jun 10, 2026

There are billions of reasons not to turn Meta’s customers into a distributed surveillance machine. This whiplash behavior proves exactly why we cannot rely on the "good will" of Big Tech to protect our digital rights. https://www.eff.org/deeplinks/2026/06/victory-meta-strips-facial-recognition-code-smart-glasses-app-after-public-outcry

Jun 10, 2026

I'm surprised that so many people don't know this.

Jun 10, 2026

You can now wear the perfect visual representation of the perfect term—enshittification—and all proceeds go to EFF, "the most profound and powerful disenshittifying force on the planet Earth.”  https://www.eff.org/deeplinks/2026/06/enshittification-merch-actually-fights-enshittification

Jun 10, 2026

Hello all! To celebrate Lemmy.zip turning 3 years old, we are once again hosting a small giveaway to say thank you for being here ❤️ We’re giving away 3 prizes to 3 lucky winners. This will be 1 x £25 Steam gifts, and 2 x £10 Steam gifts. The giveaway will be open for 48 hours from 18:00 UTC on the 10th June 2026, to 18:00 UTC on the 12th June 2026. This thread will unlock at 18:00 UTC :) You can enter by making a comment in this very thread! Your comment can say or be absolutely anything you want (within reason!) Once you’ve made a comment, you should get a message back from ZippyBot confirming you’ve entered and a ticket number. For transparency, at the end of this we’ll publish the entry list and ticket numbers. You must be a Lemmy.zip OR a Piefed.zip user to enter (comments from anyone else will be ignored!) and you will need a Steam account and be happy to send me your username so I can gift you the value via Steam. Your Lemmy.zip/Piefed.zip account must have been created before the 9th June 2026. At the end of the giveaway, I’ll lock the thread and Zippy will pull three random entries. The first username pulled will win the first prize (£25), and the other two users will win the other prizes (£10). I’ve put a few FAQs in this spoiler tag if you want to know more: FAQs - PLEASE READ! FAQs- Q) Can anyone enter? - A) You must be a lemmy.zip user or a Piefed.zip user, have a steam account, and your account must have been created before 9th June 2025 — - Q) Can I have a giftcard for a different platform, i.e. xbox or playstation? - A) Unfortunately not. Those platforms (to my knowledge) don’t allow me to purchase a giftcard in the UK and you activate it anywhere in the world. Steam allows currency conversion on gifts. — - Q) How quickly will I get my prize? - A) Steam requires that someone must be on a user’s friend list for 3 days before giftcards can be sent, therefore I will share my Steam profile with the winners (or vice versa) and after 3 days of being friends on Steam, I will send the gift over. (Unless you live in the UK, in which case I can send you a code within 24 hours) — - Q) I think my entry was valid, but I didn’t get a reply from Zippybot with my ticket number. What do I do? - A) Send me a message asap! You can try commenting again too. — - Q) Are user donations funding this? - A) No, just making it clear here that the donations to Lemmy.zip and PIefed.zip only ever go towards the server and Lemmy.zip infrastructure. The funds for this are coming from my wallet :) — - Q) How does Zippy select the winners? - A) Zippy randomly shuffles the list of entrants in the DB. It then randomly shuffles the list again in Python. Then it randomly selects 3 winners from that double shuffled list. — - Q) What if something goes wrong? - A) If for any reason something goes wrong during the giveaway, it will be paused until it can be resumed. If too much time lapses, the giveaway will be restarted.

Jun 10, 2026

Please never mix these deadly ingredients.

Jun 10, 2026

NO FAKES would supercharge copyright's broken takedown system, and will remove lawful speech—parody, criticism, news reporting. We need smarter privacy protections, not more censorship. https://www.eff.org/deeplinks/2026/06/tell-congress-just-say-no-no-fakes

Jun 10, 2026

Do you use EFF's free and open source tool, Privacy Badger? It's helped millions of users stop mass spying in their web browser. You can support Privacy Badger, and even rep the tool, when you become an EFF member and choose this new crewneck as your member gift! https://eff.org/spring

Jun 10, 2026

3 years ago today Lemmy.zip was created, and what a journey it has been! I never thought it would grow beyond a few users, and that it would probably crash and burn after I inevitably broke something. Amazingly, we’re still here and now the 3rd most active Lemmy server! To celebrate, I’ve pulled together a recap of everyone’s time on Lemmy.zip - you can view yours at recap.lemmy.zip! I want to say a big thank you to the admin team v4ld1z, gazby, and INeedMana for helping me to keep things running, and to all the moderators who take take the time to build and foster their communities. I also want to thank you, the reader, for being part of Lemmy.zip. Without you, this would all be rather pointless! Demigodrick