deceiver

u/deceiver@infosec.pub
0 posts · 43 comments

Recent posts

No posts.

Recent comments

I noticed all the dev/publisher’s games are free and wondered what the catch was, so looked into it and apparently this is actually a school and each game is a student graduation project - pretty cool

on Jucika likes beer · c/comicstrips · 3 pts · 71d

Yeah, I’m thinking it probably made more sense in socialist Hungary at the time, and also that she’s supposed to have gone directly to a brewery to get the keg, which is the absurdity of it.

on Jucika likes beer · c/comicstrips · 12 pts · 71d

Panel 1: Jucika goes to the shop to buy bottled beer, but there’s a sign reading “Palackozott SÖR ELFOGYOTT” — “Bottled BEER SOLD OUT.” Dead end.

Panel 2: Undeterred, she strides off confidently, rolling a whole barrel like it’s nothing.

Panel 3: She’s back home, and she’s set up the keg and is bottling the beer herself, with a row of filled bottles already lined up on the floor.

The joke is the escalation: she doesn’t accept defeat, she just bypasses the whole supply chain entirely. Very resourceful. Classic mid-century Eastern European humor, kind of dry and absurdist.

The standard isn’t ‘proven illegal’, it’s ‘proven legitimate’ — those aren’t the same bar. The court doesn’t need to prove the money is dirty to block it, the defense needs to prove it’s legitimate. Unverified anonymous internet donations fail that test not because they’re criminal but because they’re unverifiable. Seizure is a separate legal action with a completely different evidentiary standard.

The procedure is codified in state law with defined standards, not made up on the spot. Bond rulings in Tennessee can be challenged through higher courts, so the ‘no appeal’ claim doesn’t hold up either.

And if you think bail is an unjust wealth-based system, the crowdfunding situation illustrates that perfectly: his supporters are collectively buying his freedom, which is exactly what bail abolitionists object to. That’s an argument for the judge’s skepticism, not against it.

Here are the facts: Tennessee explicitly authorizes courts to conduct bond source hearings to prevent defendants from using the proceeds of illegal activity to secure their release. These hearings are required by state law for any bond set at $75,000 or higher — Eatherly’s $1 million bond clears that threshold by a significant margin, making this procedure entirely standard and not specific to his case. The burden lies completely on the party seeking to post the bond. Whoever is paying must prove that the money is derived from legitimate sources rather than illegal activities. Defense attorneys generally have to present bank statements, pay stubs, tax returns, or other financial records to satisfy the judge. If the judge is not satisfied with the legitimacy of the funds, the defendant will not be allowed to post bond and will remain in custody, regardless of whether they have the physical cash on hand.

on barely works · c/microblogmemes · 12 pts · 111d

even if this were true, the group doing this isn’t rewarding sympathizers, they’re just carpet-bombing high-visibility Western targets - they’ve hit Truth Social, Reddit, Internet Archive, Microsoft 365, and now Bluesky. these guys aren’t sitting there reading Bluesky’s moderation policy like “hmm, actually, their stance on Palestinian content is nuanced, let’s move on”

on *Permanently Deleted* · c/asklemmy · 14 pts · 118d

Valve set Steam’s regional pricing recommendations for Poland in October 2022, right when the złoty was at its weakest. The złoty has since recovered significantly, but Valve never updated the recommendations. Since most devs just lazily accept Steam’s defaults, Polish gamers end up with the second-highest game prices in the world - often 20-30% above USD - despite having roughly a third of the average American salary. So they flee to key resellers, which is exactly the outcome regional pricing was supposed to prevent.​​​​​​​​​​​​​​​​

She found worms, a French fry, broken glass, and a mostly undigested shrew

really does paint a vivid picture of the opossum’s whole vibe - just an absolute gremlin waddling through life eating whatever, completely unbothered

you’re not wrong, and it’s not really a conspiracy, it’s fairly well-documented at this point

there’s a whole industry of companies called ‘exploit brokers’ and surveillance vendors that sell smartphone compromise capabilities to governments. the most famous is NSO Group, an Israeli firm whose product Pegasus was used by governments worldwide to silently compromise iPhones and Android devices, including targeting journalists, activists, and political opponents. Amnesty International and Citizen Lab have forensically confirmed infections on real devices. this isn’t speculation; it’s documented in court filings and peer-reviewed technical research

the way it works is through what are called zero-days: software vulnerabilities that even the phone manufacturers don’t know about yet. these can be worth millions of dollars on the open market. governments and their contractors hoard them, sometimes for years, to maintain access capabilities. Apple and Google are constantly patching these when they discover them, which is why you see urgent security updates

so the ‘we can’t break into it’ statements from agencies like the FBI are more nuanced than they appear. what they often mean is they can’t break into it cheaply, at scale, without vendor cooperation, not that it’s impossible. they’re usually pushing for backdoors built into the software so they don’t have to rely on expensive zero-days or third-party vendors like Cellebrite

the problem is that any backdoor you build for the “good guys” is also a vulnerability that adversaries can find and exploit. security researchers largely agree you can’t have a backdoor only the right people can use, it doesn’t work that way technically

so your instinct is right. the public debate is somewhat theater. the real capabilities exist, they’re just expensive, targeted, and something governments don’t want to fully disclose because it would reveal sources and methods

it absolutely can! there’s Bypass Paywalls Clean developed by magnolia1234. the reason you don’t see them shared often is that they’re repeatedly taken down from official extension stores like the Chrome Web Store and Firefox Add-ons, and platforms like GitHub, due to legal and political pressure from publishers, which pushes them to increasingly obscure and/or questionable hosting platforms that most normal users wouldn’t touch - case in point, Bypass Paywalls Clean itself is currently hosted on GitFlic, a Russian code hosting platform, as it’s been pushed outside the reach of Western legal frameworks

soft paywalls are enforced by JavaScript running in your browser - the server sends the full article content regardless, and then the JavaScript checks if you’re a subscriber and hides or blocks it if not. when archive.today or a self-hosted tool like ArchiveBox fetches the page, it gets the full content directly from the server before any of that JavaScript enforcement runs. the server doesn’t know or care whether you’re a subscriber, it just responds to the request