０７６萌ＳＮＳ
  • Login

  • Public

    • Public
    • Network
    • Groups
    • Popular
    • People

Conversation

Notices

  1. billiam :4chan: (billiam@shitposter.club)'s status on Sunday, 16-Jul-2023 00:04:44 JST billiam :4chan: billiam :4chan:
    Interesting privacy vulnerability: javascript can be used to scan the ports and IP addresses of your local network.
    https://blog.nem.ec/2020/05/24/ebay-port-scanning/

    can be mitigated by enabling the
    >Block Outsider Intrusion into LAN
    blocklist in ublock origin (it's off by default)
    In conversation Sunday, 16-Jul-2023 00:04:44 JST from shitposter.club permalink

    Attachments

    1. eBay is port scanning visitors to their website - and they aren't the only ones - nem.ec
      from @djnemec
      Websites are scanning for open ports on your PC to help fight fraud, but this data also flows into a massive, global tracking database.
    • xianc78 and Kerokeronim like this.
    • Machismo repeated this.
    • Kerokeronim (mk2boogaloo@freespeechextremist.com)'s status on Sunday, 16-Jul-2023 00:05:19 JST Kerokeronim Kerokeronim
      in reply to
      • Machismo
      • احمدابن محمد الخيام
      @billiam cc @Zerglingman @sysrq Javascript is showing its superiority again. What language can do this except JS?
      In conversation Sunday, 16-Jul-2023 00:05:19 JST permalink
      Machismo likes this.
    • billiam :4chan: (billiam@shitposter.club)'s status on Sunday, 16-Jul-2023 00:06:59 JST billiam :4chan: billiam :4chan:
      in reply to
      • d
      @deprecated_ii found it from this article:
      >Brute-forcing a macOS user’s real name from a browser using mDNS
      https://news.ycombinator.com/item?id=36712788
      In conversation Sunday, 16-Jul-2023 00:06:59 JST permalink

      Attachments

      1. Brute-forcing a macOS user’s real name from a browser using mDNS | Hacker News
      Kerokeronim likes this.
    • d (deprecated_ii@poa.st)'s status on Sunday, 16-Jul-2023 00:07:00 JST d d
      in reply to
      @billiam what the fuck
      In conversation Sunday, 16-Jul-2023 00:07:00 JST permalink
      Machismo repeated this.
    • Machismo (zerglingman@freespeechextremist.com)'s status on Sunday, 16-Jul-2023 00:11:29 JST Machismo Machismo
      in reply to
      @billiam Bonus round:
      yun-wuxin:[wisknort]:~/tinker/fedi/TheDesk/app$ curl -sI https://blog.nem.ec/2020/05/24/ebay-port-scanning/ | grep -i server
      server: cloudflare
      In conversation Sunday, 16-Jul-2023 00:11:29 JST permalink

      Attachments

      1. eBay is port scanning visitors to their website - and they aren't the only ones - nem.ec
        from @djnemec
        Websites are scanning for open ports on your PC to help fight fraud, but this data also flows into a massive, global tracking database.
      Kerokeronim likes this.
    • Machismo (zerglingman@freespeechextremist.com)'s status on Sunday, 16-Jul-2023 00:22:22 JST Machismo Machismo
      in reply to
      • Machismo
      @billiam This is actually terrifying.
      In conversation Sunday, 16-Jul-2023 00:22:22 JST permalink
    • billiam :4chan: (billiam@shitposter.club)'s status on Sunday, 16-Jul-2023 00:30:47 JST billiam :4chan: billiam :4chan:
      in reply to
      • Machismo
      @Zerglingman it seems like the local network stuff can be blocked by ublock origin (although it's not blocked by default so 99.9% of internet users are vulnerable to it (I heard brave recently added some protections too, so there's that)).

      Cloudflare MIMT is obviously more difficult to avoid.
      In conversation Sunday, 16-Jul-2023 00:30:47 JST permalink
      Machismo likes this.
    • Machismo (zerglingman@freespeechextremist.com)'s status on Sunday, 16-Jul-2023 00:32:49 JST Machismo Machismo
      in reply to
      @billiam They're both pretty straightforward to avoid, but cucks will cope and seethe when you tell them the solutions.
      I haven't bothered to blacklist cuckflare's IPs because I want them to see traffic going to sites that shit on them.
      In conversation Sunday, 16-Jul-2023 00:32:49 JST permalink
    • Machismo (zerglingman@freespeechextremist.com)'s status on Sunday, 16-Jul-2023 00:33:45 JST Machismo Machismo
      in reply to
      • Machismo
      @billiam Actually fuck it I'm gonna recommend that guy gtfo the botnet.
      In conversation Sunday, 16-Jul-2023 00:33:45 JST permalink
    • m0xEE (m0xee@social.librem.one)'s status on Sunday, 16-Jul-2023 09:24:56 JST m0xEE m0xEE
      in reply to
      • Machismo

      @Zerglingman Most even have WebRTC enabled 🤷
      @billiam

      In conversation Sunday, 16-Jul-2023 09:24:56 JST permalink
      Machismo likes this.
    • احمدابن محمد الخيام (sysrq@freespeechextremist.com)'s status on Sunday, 16-Jul-2023 10:34:40 JST احمدابن محمد الخيام احمدابن محمد الخيام
      in reply to
      • Machismo
      • Kerokeronim
      @MK2boogaloo @billiam @Zerglingman
      shut UP SHUT UP
      In conversation Sunday, 16-Jul-2023 10:34:40 JST permalink
      Machismo and Kerokeronim like this.
    • mia (mia@freespeechextremist.com)'s status on Sunday, 16-Jul-2023 10:34:40 JST mia mia
      in reply to
      • Machismo
      • Kerokeronim
      • احمدابن محمد الخيام
      @sysrq @MK2boogaloo @Zerglingman @billiam

      And he wonders why he gets banned. Maybe he can have 5 guys explain IRC to him so he can have opinions about that.
      In conversation Sunday, 16-Jul-2023 10:34:40 JST permalink
      Machismo and Kerokeronim like this.
    • Kerokeronim (mk2boogaloo@freespeechextremist.com)'s status on Sunday, 16-Jul-2023 10:38:42 JST Kerokeronim Kerokeronim
      in reply to
      • Machismo
      • احمدابن محمد الخيام
      • mia
      @mia @sysrq @Zerglingman @billiam I was being ironic, retard.
      In conversation Sunday, 16-Jul-2023 10:38:42 JST permalink
      Machismo likes this.
    • احمدابن محمد الخيام (sysrq@freespeechextremist.com)'s status on Sunday, 16-Jul-2023 10:42:20 JST احمدابن محمد الخيام احمدابن محمد الخيام
      in reply to
      • Machismo
      • Kerokeronim
      • mia
      @MK2boogaloo @mia @Zerglingman @billiam
      you weren't being ironic when you failed at irc for an hour, run my command please
      In conversation Sunday, 16-Jul-2023 10:42:20 JST permalink
      Machismo and Kerokeronim like this.
    • mia (mia@freespeechextremist.com)'s status on Sunday, 16-Jul-2023 11:17:21 JST mia mia
      in reply to
      • Machismo
      • Kerokeronim
      • احمدابن محمد الخيام
      @MK2boogaloo @Zerglingman @billiam @sysrq

      "I was only pretending to be retarded."

      You can't pull off Pernia posting, don't even try, chedophile.
      In conversation Sunday, 16-Jul-2023 11:17:21 JST permalink
      Machismo and Kerokeronim like this.
    • Kerokeronim (mk2boogaloo@freespeechextremist.com)'s status on Sunday, 16-Jul-2023 11:18:16 JST Kerokeronim Kerokeronim
      in reply to
      • Machismo
      • احمدابن محمد الخيام
      • mia
      @mia @Zerglingman @billiam @sysrq wtf is a Chedophile even?
      In conversation Sunday, 16-Jul-2023 11:18:16 JST permalink
      Machismo likes this.
    • mia (mia@freespeechextremist.com)'s status on Sunday, 16-Jul-2023 18:25:03 JST mia mia
      in reply to
      • Machismo
      @Zerglingman @billiam

      Wait, you guys weren't already running no-script blocking all js?
      In conversation Sunday, 16-Jul-2023 18:25:03 JST permalink
      Machismo likes this.
    • Machismo (zerglingman@freespeechextremist.com)'s status on Sunday, 16-Jul-2023 18:25:35 JST Machismo Machismo
      in reply to
      • mia
      @mia @billiam I just use lynx, much simpler solution.
      But like, how many people here use webfes for fedi? How many of them aren't bloatfe?
      In conversation Sunday, 16-Jul-2023 18:25:35 JST permalink
    • gh0st (gh0st@freespeechextremist.com)'s status on Sunday, 16-Jul-2023 18:26:43 JST gh0st gh0st
      in reply to
      • Machismo
      • Kerokeronim
      • احمدابن محمد الخيام
      • mia
      @MK2boogaloo @mia @Zerglingman @billiam @sysrq chug on dis dik
      In conversation Sunday, 16-Jul-2023 18:26:43 JST permalink
      Machismo likes this.
    • :niggy: (niggy@poa.st)'s status on Sunday, 16-Jul-2023 19:33:19 JST :niggy: :niggy:
      in reply to
      @billiam yes friend I believe this only scanned localhost, but for many years threat actors have similarly attacked vulnerable routers on target networks. generally these reconfigure the router's DNS to a malicious server
      most browsers have hardened cross-origin policies over the last few years though, so these are less viable now
      decoded.avast.io/threatintel/router-exploit-kits-an-overview-of-routercsrf-attacks-and-dns-hijacking-in-brazil/
      In conversation Sunday, 16-Jul-2023 19:33:19 JST permalink
    • billiam :4chan: (billiam@shitposter.club)'s status on Monday, 17-Jul-2023 07:31:52 JST billiam :4chan: billiam :4chan:
      in reply to
      • Dig Deeper
      • Machismo
      • mia
      @Zerglingman @mia it's difficult/grating to use the internet without first party js.

      I use umatrix to disable 3rd party js. [ublock advanced mode doesn't replace umatric - @digdeeper has a nice article on the subject https://digdeeper.club/articles/addons.xhtml#umatrix ]
      In conversation Monday, 17-Jul-2023 07:31:52 JST permalink

      Attachments

      1. Essential privacy (and other) addons
      Machismo likes this.
    • þernia (pernia@cum.salon)'s status on Tuesday, 18-Jul-2023 18:13:22 JST þernia þernia
      in reply to
      • Machismo
      • Kerokeronim
      • احمدابن محمد الخيام
      • mia
      @MK2boogaloo @Zerglingman @mia @sysrq @billiam its when u rape a pray mantis
      In conversation Tuesday, 18-Jul-2023 18:13:22 JST permalink
      Machismo and Kerokeronim like this.

Feeds

  • Activity Streams
  • RSS 2.0
  • Atom
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

０７６萌ＳＮＳ is a social network, courtesy of ０７６. It runs on GNU social, version 2.0.2-beta0, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All ０７６萌ＳＮＳ content and data are available under the Creative Commons Attribution 3.0 license.