• 7 Posts
  • 596 Comments
Joined 2 years ago
cake
Cake day: June 13th, 2023

help-circle
  • In the US.

    • Shirts/hoodies/etc: I like Bayside Apparel. Good price, good quality, long lasting, union made. Please buy from them so they continue to exist.
    • Sneakers: New Balance has some assembled in the USA shoes. Very limited selection, but options in general are minimal. The only other Made in USA shoes I could find were like bare feet nonsense or moccasins.
    • Boots: There’s a bunch of Made in USA boot makers. Redwing, Danner, and I’m sure I’m missing some good options. These will be easy to find with a Web search.
    • Underwear/undershirts: I got nothin. If anyone has found anything, I’d love to know about it.
    • Socks: Recently learned about Wide Open. Socks seem pretty high quality but I’ve only had them for a few months so far. I think there’s some other Made in USA sock makers as well that I’m not remembering.

    I mostly look for Made in USA just because I’m happy to support my country’s workers, and the labor laws are known to me. I’ve run across some Made in EU stuff but it always seems like a hassle to get it shipped out.

    Wish there was any real visibility into supply chains so we could feel more confident buying from other places. Can’t even trust companies that say they have ethical suppliers in SE Asia because they probably have no idea what their contractors are actually doing.



  • Upon execution, ShortLeash generates a self-signed, TLS certificate that presents as if signed by the City of Los Angeles Police Department (LAPD). That name suggests those behind the campaign are attempting to spoof the police department to appear legitimate. It also gave the ORB network its name: LapDogs.

    So it’s a self-signed cert with LAPD in the metadata.

    The purpose of the malware itself is not known - it’s encrypted, and Security Scorecard said it requires further analysis.

    But who knows, maybe there’s a reason it uses that other than obfuscation or a joke. Though anything doing authentication via a self-signed cert’s metadata is completely broken anyway.