anonymousnotme (u/anonymousnotme)

anonymousnotme commented on Carmakers Will Give Your Location to Police Without a Warrant, Senators Say thedrive.com/news/automak... · Posted by u/PaulHoule

nrdgrrrl · a year ago

Surely you can find the GPS antenna and disconnect it?

anonymousnotme · a year ago

Is the GPS two way or one way? I had the impression that the GPS signals went from satellite to earth, but the receivers did not send a signal to the GPS satellite. I thought onstar connected the cellular network. If I have the wrong information and somebody has more specifics about this, I would really like to know. From reading the wikipedia page: https://en.wikipedia.org/wiki/OnStar Looks like the cellular network is used. Is the cellular antenna and the GPS antenna the same or are there two physical antenna? If so, then I assume one can just disconnect it. Since according to the article it says 4g. Normally cellular providers discontinue old network, 2G and 3G network have been taken down in recent years. Does anybody know when 4g network will be removed/disabled? I did find: https://www.corvetteforum.com/forums/c8-general-discussion/4...https://www.silveradosierra.com/threads/disable-on-star.7196... If the 4g network is taken down at some point, then whatever functionality that uses it will be disabled as well. So, one would think that perhaps that part of the system should be able to be replaced. If so, can't one just remove that part of the system? It is probably hard to remove, because if it is easy, then theft system is not as good.

One more thought, in California one can request a copy of one's data and also request that it be deleted. Has anybody in CA requested a copy of all the data that has been collected? How much data per month or day does it collected? Has anybody requested that their data be deleted? Would this make it difficult the manufacturer to train the driving assistance AI if enough people requested that their data be deleted?

anonymousnotme commented on WTF Ubiquiti blog.imraniqbal.org/wtf-u... · Posted by u/imran-iq

imran-iq · 2 years ago

Anyone know any alternatives in the prosumer space? Mikrotik?

anonymousnotme · 2 years ago

I have have lanner tech router that I installed a as internet gateway. I have been very happy with it. Works well, lower power, small has multiple ports. Can use SSD for storage.

https://www.lannerinc.com/products/network-appliances/x86-de...

One must install the OS; whether that is OpenWRT, OpenBSD or whatever OS. This means that one needs to be quite familiar with the OS install. So, one probably needs to be a technical person. The one I got had x64 intel based CPU, so it should run just about any linux or BSD distribution. The one that I got has a serial port for the console (no VGA, HDMI, display port etc).

anonymousnotme commented on Gene therapy allows an 11-year-old boy to hear nytimes.com/2024/01/23/he... · Posted by u/mikhael

twostorytower · 2 years ago

But no matter how well the gene therapy works, the researchers recognize that Aissam may never be able to understand or speak a language, Dr. Germiller said. The brain has a narrow window for learning to speak beginning around ages 2 to 3, he explained. After age 5, the window for learning spoken language is permanently shut.

Wow that's incredibly sad, but I am glad that this will eventually get into the ears of thousands of deaf newborns. Incredible medical advancement. Gives me hope that one day my tinnitus may have a cure.

anonymousnotme · 2 years ago

It is my understanding that psychedelics can open up that learning window. I wonder if that could be used to benefit in this case. (I imagine a lot of people might be opposed to having a minor take psychedelics; but if it works, does it matter?)

anonymousnotme commented on Reddit must share IP addresses of piracy-discussing users, film studios say arstechnica.com/tech-poli... · Posted by u/isaacfrond

wkat4242 · 2 years ago

VPN.

anonymousnotme · 2 years ago

Tor can also be used and does not cost anything.

anonymousnotme commented on Inside the Booming Business of Cutting Babies' Tongues nytimes.com/2023/12/18/he... · Posted by u/pseudolus

anonymousnotme · 2 years ago

I can't read the article, but if one has a tongue tie there can be serious life-long consequences. Basically if one is tongue tied, one's tongue will rest on the bottom of one's mouth. The mouth does not develop normally. The nasal passage way will be narrow. One will likely breath through one's mouth instead of the nose. This will lead to problems of the nasal passage not developing as it should. For one's health it is import to breath through the nose and not the mouth; read James Nestors book Breath. One will have breathing issues and likely sleep apnea. The tongue is supposed to rest on the root of the mouth and not on the floor of the mouth for it to develop properly. The sleep apnea normally gets worse; likely during midlife the sleep problem will effect job performance... Just from a speech impediment problem, it is worth it. I had a tongue tie release surgery (lingual frenectomy) as an adult. I had a release as a baby, but it only release the very front part so that it was barely enough to breast feed and I had speech problems because it was not fully released. After the surgery as an adult my pronounciation improved according to friends. It feels like my tongue can move as it should move. My mouth and nasal passage way did not develop as it should as a child and I am considering major surgery (MMA, EASE procedure, functional rhinoplasy) to correct; not something that one wants to do if one can correct it early with a lingual frenectomy and oral myofunctional Therapy. That being said, one should have it done by somebody that is competent is airway focused and not somebody trying to make extra money. It is normally paired with myofunctional therapy for about 6 weeks before and after the surgery. On another note, I have tuned into myofunctional podcast run by dental hygenist; they said that the can usually determine whether one is a mouth breather or a nasal breather by the hygene of the mouth...

anonymousnotme · 2 years ago

Forgot to mention that a sign of underdevelopment is the need for braces. I was borderline needing braces as a kid and I will be getting them as an adult to help fit my tongue in my mouth better. Much better to not need braces (at any age) or major surgery as an adult.

anonymousnotme commented on Inside the Booming Business of Cutting Babies' Tongues nytimes.com/2023/12/18/he... · Posted by u/pseudolus

anonymousnotme · 2 years ago

I can't read the article, but if one has a tongue tie there can be serious life-long consequences. Basically if one is tongue tied, one's tongue will rest on the bottom of one's mouth. The mouth does not develop normally. The nasal passage way will be narrow. One will likely breath through one's mouth instead of the nose. This will lead to problems of the nasal passage not developing as it should. For one's health it is import to breath through the nose and not the mouth; read James Nestors book Breath. One will have breathing issues and likely sleep apnea. The tongue is supposed to rest on the root of the mouth and not on the floor of the mouth for it to develop properly. The sleep apnea normally gets worse; likely during midlife the sleep problem will effect job performance... Just from a speech impediment problem, it is worth it. I had a tongue tie release surgery (lingual frenectomy) as an adult. I had a release as a baby, but it only release the very front part so that it was barely enough to breast feed and I had speech problems because it was not fully released. After the surgery as an adult my pronounciation improved according to friends. It feels like my tongue can move as it should move. My mouth and nasal passage way did not develop as it should as a child and I am considering major surgery (MMA, EASE procedure, functional rhinoplasy) to correct; not something that one wants to do if one can correct it early with a lingual frenectomy and oral myofunctional Therapy. That being said, one should have it done by somebody that is competent is airway focused and not somebody trying to make extra money. It is normally paired with myofunctional therapy for about 6 weeks before and after the surgery. On another note, I have tuned into myofunctional podcast run by dental hygenist; they said that the can usually determine whether one is a mouth breather or a nasal breather by the hygene of the mouth...

anonymousnotme commented on I Know What You Download on BitTorrent iknowwhatyoudownload.com/... · Posted by u/gjvc

batch12 · 2 years ago

So if you have the same large ISP as me, you can change your IP by changing the MAC of your router and rebooting your modem.

anonymousnotme · 2 years ago

I don't have to reboot my router or modem. I just have an a script that changes the MAC and releases and renews or rather gets an IP address via DHCP. My ISP is slow at handing out an IP address out as it takes several minutes, but it is automated. When the same operation is done for an IP on the LAN, it is a second or or two to get a new IP address. I figure the main reason to get a new IP address is so that web sites can't track one by IP. If carrier grade NAT is used, then is there a point in changing one's IP? If one does not use any peer to peer, then it seems that carrier grade NAT should lower the cost of one's internet service and that should be preferred. If one needs anonymity for bittorrent or other peer to peer, then shouldn't a VPN or i2p be used? I got the impression that i2p might be slow.

anonymousnotme commented on Last Chance to fix eIDAS: Secret EU law threatens Internet security last-chance-for-eidas.org... · Posted by u/mnot

anonymousnotme · 2 years ago

As far as certificate authorities (CAs) build into the browser: One way around this might be that the browsers ship with the CA as required by law, but that one can disable/delete the CA via the UI. I would guess that a law would be passed that says that the browser can't disable/delete certain CAs (perhaps this one also says that). There can be a list of various government CAs that one might want to disable. This does not help if governments can pressure CAs to issue an alernate CA for use in MITM. Does any of the CA transaprency help? What about a way to have people endorse a certficate (i.e. reputation)?

anonymousnotme commented on Microsoft is failing to deliver emails that mention newclimate.org newclimate.org/news/micro... · Posted by u/mritzmann

anonymousnotme · 2 years ago

I have been of the personal opinion that email should be end to end encrypted. This would be another reason why. Think about how much personal information is easily exposed by non-encrypted email. It would be like having the 99.9% of the web sites still using http as opposed https. I have seen more than one doctors office have an agreement that they want you to sign so that they can send one unencrypted email. (Most people don't pay much attention to the agreements that they sign and non-technical users likely don't know that their emails can easily be read by several parties.)

anonymousnotme commented on "<ESC>[31M"? ANSI Terminal security in 2023 and finding 10 CVEs dgl.cx/2023/09/ansi-termi... · Posted by u/patrakov

dgl · 2 years ago

(Author here.)

If there's any takeaway from this, while the worst part is the terminal bugs; I'd like people to be aware that any tool dealing with text (command lines, potentially even websites) should consider sanitizing control characters for defense in depth.

I am amused that for example https://www.osnews.com/story/137552/31m-ansi-terminal-securi... has posted my article with the escape character in the title intact. This means that running:

  curl https://www.osnews.com/story/137552/31m-ansi-terminal-security-in-2023-and-finding-10-cves/

...will turn your screen red because of the embedded "[31m". Obviously this is just harmless fun (would have been more fun to get iTerm2's "]1337;RequestAttention=fireworks", like my curl ip.wtf/moo does, but I couldn't really stick that in the title innocently), but an attacker might be able to find a way to social engineer someone into running "curl" or similar on what looks like a trustworthy site.

edit: Hacker News also doesn't sanitize escape characters, so this very comment will turn your screen red:

  curl 'https://news.ycombinator.com/item?id=37963815'

anonymousnotme · 2 years ago

I have command line program that I use to give me a list of window titles. If there are too many of certain kind (browser windows...), I close some until I get under a certain threshold. Anyway, I was reading the stuff in the articles and well the text in the terminal turned red after I got that list. Some terminal/shell combinations seem better at recovering than others. Firefox (and other browsers that have a similar problem) should sanitize title data. As other have pointed out, perhaps window managers should filter or not allow control/escape characters in the titles.

Just goes to show how important sanitizing data from unknown sources is.

Should curl, w3m, wget and similar sanitize the data? One can argue that some times you want to pipe the raw data and other times one might not be thinking about the escape sequences and get burned. I would be inclined to say that the tools should filter/escape the dangerous stuff and have a flag like "--raw".