• 0 Posts
  • 163 Comments
Joined 11 months ago
cake
Cake day: July 25th, 2023

help-circle


  • Not at all what I meant. The premise was that this wouldn’t happen if they were being paid fairly. Supply chain attacks happen with or without fair pay.

    Look at what happened with the XZ backdoor. Whether or not they’re getting paid just means a different door is opened.

    The root of the problem is that we blindly trust anyone based on name-brand and popularity. That has never in the existence of technology been a reliable nor an effective means of authentication.

    If it’s not outright buying out companies it will be vulnerabilities/lack of appropriate management, if it’s not vulns it’ll be insider threat.

    These are problems we’ve known about for at least a decade+ and we’ve done fuck all to address the root of the problem.

    Never trust, always verify. Simple as that.





  • For anyone interested - I’d you are using umatrix to block shit you can punch these lines into a new text file and import as blocklist, then commit it with the tiny arrow that points left toward the permanent list to save it permanently:

    * www[.]googie-anaiytics[.]com * block

    * kuurza[.]com * block

    * cdn[.]polyfill[.]io * block

    * polyfill[.]io * block

    * bootcss[.]com * block

    * bootcdn[.]net * block

    * staticfile[.]org * block

    * polyfill[.]com * block

    * staticfile[.]net * block

    * unionadjs[.]com * block

    * xhsbpza[.]com * block

    * union[.]macoms[.]la * block

    * newcrbpc[.]com * block

    Remove the square brackets before saving the file - these are here to prevent hyperlinks and misclicks.

    Edit: this is not a bulleted list, every line must start with an asterisk, just in case your instance doesn’t update edits made to comments quickly.

    Edit2: added new IOCs

    Edit3: MOAR IOCS FOR THE HOARDE