chik-fil-a…

I’m not surprised… I think people (‘the ones that care at least’) would be horrified to know how much of this stuff slips through, because it’s hard (there are so many other things that are pulling at developers that something falls through the cracks). Most of the time the right answer is to bring it up. Then thank them when they resolve the issue (with beer and pizza money at the very least).

Looks like it’s waiting for approval, https://github.com/signalapp/Signal-Desktop/pull/6933 for anyone else thats interested.

I think the issue that they are trying to make is that there are modern ways of protecting the keys with hardware level security, that aren’t being used. As someone who works in AppSec this is all too common. All it takes is one library in an application to be popped (doesn’t have to be signal), and security keys end up leaked. If it isn’t already, I’m sure that signals keys will be included in exfil scripts.

Tools like TPM and SecureEnclaves (TrustZone,etc) mean that malware, and other nasties have a higher bar that they need to meet.

Found it… https://www1.salary.com/Galen-C-Smith-Salary-Bonus-Stock-Options-for-REDBOX-ENTERTAINMENT-INC.html

i’ve had a lot of luck with the logitech brio which is a 4K WebCam, the only issue that I’ve run into is the fact that you have to make sure that it is plugged in to a USB 3.0 and not 3.1 port.

I think it’s somebody trying to be passive, aggressive, but the fact that I have to say, I think proves the level of thought that went into it.

Falling into the not sure how open source it is because AI is a mess. But it works category…

https://github.com/manzolo/openai-whisper-docker

It took me more than a few seconds to realize that this was in the Memes community, not the anti-work community

I personally would add: • The Nowhere Generation • Wolves

This is fresh… came in early this morning. Not sure if they got all of them or a subset.

With the IMEI and SIM card information they now have the details needed to take over MFA. I share my birthdate with people that I casually know, I try not to do that with MFA codes. Credit card details would be bad, but at this point with the number of people who have leaked it, I would be 100% surprised if you couldn’t find our CC data via a google search.

Yup and that’s the infuriating part. It’s not helpful or useful, it 100% a cya.

These things happen… it’s never pleasant but they happen. Additionally realize that they are going to play up the risk that was out there, why?

Because they are a vendor selling a product.

I think the key take away from this article is:

“The issue has been fixed and there are no signs of in-the-wild exploitation.”

You had best be glad is was unmarked. If he tripped and rolled a 1 no one would have ever seen this picture.