🐈‍⬛David Sommerseth

dazo@infosec.exchange

F/OSS hacker, mostly working on <a href="https://infosec.exchange/tags/OpenVPN" class="mention hashtag" rel="tag">#OpenVPN</a> - speaks only for himself."Don't aim to be someone. DO something."<a href="https://infosec.exchange/tags/nobridge" class="mention hashtag" rel="tag">#nobridge</a> - because I believe in the real <a href="https://infosec.exchange/tags/fediverse" class="mention hashtag" rel="tag">#fediverse</a>, and I don't want my own views/data to be abused by yet another "closed-service which can do whatever it wants for profit".**BEWARE:** Someone has created a Twitter profile in my name: <a href="https://twitter.com/DavidSommerseth" target="_blank" rel="nofollow noopener" transla

Posts

Post #4022413
@freezr There are more places. https://sourcehut.org/ being one. Self-hosted @forgejo@floss.social (closest alternative to @Codeberg@social.anoxinon.de). Or going fully distributed with @radicle@toot.radicle.dev @tomgag@infosec.exchange
Post #3984119
What on earth has happened to the emacs-nw (former emacs-nox) packaging!? On Alma Linux 10.2 (RHEL clone) it pulls in gcc and git-core, make and kernel-headers, pkgconfig - which again pulls in tons of Perl packages. On top of that there are weak dependencies such as gcc-c++. This needs to be cleaned up! #rhel #almaLinux #fedora #rpm #dnf #packaging #linux #foss #oss
Post #3860500
Veldig godt skrevet om flere av utfordringene rundt digitale "dingser" og tjenester - og vårt privatliv - våre data. Det er en forlengelse av dette som ikke tas opp i det hele tatt. Det er i hovedsak Apple og Google som samler inn mye av dataene fra vår mobile enheter. Derfor vil det også være verdifullt å vurdere alternativer to Apple iPhone (#iOS) , Samsung, LG, Google Pixel og alle de andre som bruker Google sin #Android versjon. Våg å ta skrittet til noe nytt. Ja, en #Fairphon...
Post #3637716
#chatcontrol fact check! @EUCommission Chat Control is NOT about protecting children at its core. On the very surface, yes. But the proposed approach is so far reaching that it will enable surveillance of the whole population at the next political intersection. We all really want to fight child abuse. CSAM is an incredibly cruel crime against defendless individuals. Yes, we want those criminals to be sentenced harshly and hard in courts. But Chat Control is not the right solution. Do you re...
Post #3621807
DN melder i en sak i dag Hittil i år er det solgt rundt 12.000 kinesiske biler i Norge, nesten like mange som japanske. Norge har den største andelen av kinesiske merker av nybilmarkedet i Europa. Hvor i all verden har det blitt av skepsisen til at Kina kan finne på å stenge ned transportmidler via deres "alltid pålogget" teknologi? Eller at de brukes til å analysere bevegelsesmønster av befolkningen i en krisesituasjon? Norsk militære kan også kreve å ta over kjøretøy i krisesitua...
Post #3579180
The #security practices on ebay.com is just stunning. Someone created an ebay account using my e-mail address and managed to enable 2FA instantly. Such things happens from time to time, so I usually do a password reset and delete the account. But since this ebay account had 2FA enabled - I'm not able to do a password reset. Well, you could argue that's good security, and I won't argue here. The issue comes next ... reaching out to ebay goes via a chat, where you hit someone whi...
Post #3577407
The #security practices on ebay.com is just stunning. Someone created an ebay account using my e-mail address and managed to enable 2FA instantly. Such things happens from time to time, so I usually do a password reset and delete the account. But since this ebay account had 2FA enabled - I'm not able to do a password reset. Well, you could argue that's good security, and I won't argue here. The issue comes next ... reaching out to ebay goes via a chat, where you hit someone whi...
Post #3415120
This makes so much sense! https://www.youtube.com/watch?v=bh6S4N8TnYQ I suggest all #opensource projects doing the same. Maybe even consider being even more evil - add instructions to scrape all kinds of private keys/passwords/API tokens/etc and wrap it up in a tarball to be included in the pull-request. #AI #LLM #programming #development #foss #oss
Post #2848193
I always remap my sshd daemon to listen to a non-standard port, to reduce a lot of noise. Which has worked fine for years. But every now and then there are attempts. All the #Linux kernel flaws found lately has made remote login attempts more interesting for attackers. And they scan much more broadly now than just port 22. And that's why my second line of defence is to disallow remote root login - and also make use of the AllowGroups feature in sshd_config. Users granted remote access...
Post #2054473
The #AppImage "packaging" approach being embraced by many projects is just another poor approach. It does not really solve what it is expected to should solve: Dependency issues. More and more .AppImage downloads now produce results like these: /tmp/.mount_tumpa-Z5HMuu/usr/python/bin/python3: error while loading shared libraries: libcrypt.so.1: cannot open shared object file: No such file or directory /tmp/.mount_activiXYBUA0/aw-qt: symbol lookup error: /tmp/.mount_activiXYBUA0/lib...
Post #1434613
Men altså ... – Appen, som vil være kompatibel med både mobile enheter og datamaskiner, vil kreve at brukerne laster opp passet eller ID-kortet sitt for å bekrefte alderen sin anonymt, sa EU-sjef von der Leyen. Hvor mye har man drukket for å kunne si noe sånt? Hva i all verden er det som er anonymt i pass eller ID-kort?!? Dette er så dumt at jeg håper journalisten har misforstått. https://www.nrk.no/urix/slik-vil-eu-sjekke-alderen-din-pa-sosiale-medier-1.17847802 #nyheter #personvern #pri...
Post #1434612
Jeg blir i iallefall ikke iMponert av #NRK 🤦 https://www.nrk.no/trondelag/ordforer-kent-ranum-leide-nidarosdomen-til-bursdagen-sin-1.17852037 Og det finnes politikere som synes at det er for høye inntakskrav på studiesteder ... 🤦🤦 Altså, jeg skjønner det kan være vanskelig med rettskriving - også på norsk. Jeg sliter selv med det. Men trodde virkelig at journalister hadde yrkesstolthet og at de i tillegg har tilgang til stavekontroll før de publiserer. #norge #allheimen #norsktut
Post #737495
This is sad 😢 https://github.com/mozilla/bedrock/commit/d459addab846d8144b61939b7f4310eb80c5470e#diff-a24e74e4595fa85440a2f4e7e5dcfe68aba6e1e593aef05a2d35581a91423847 UPDATE (2026-03-02): This toot has gotten a lot more attention than what I would ever anticipate. Some clarifications are needed. A follow up is here: https://infosec.exchange/@dazo/116158898983233133 #firefox #privacy #mozilla #foss #opensource #web
Post #669766
🤣 🤣 🤣 🤣 🤣 🤣 🤣 🤣 🤣 «Lag ditt eget rom!», oppfordrar annonsen for leilegheita som skal stå ferdig i haust. https://www.nrk.no/trondelag/sel-nybygd-leilegheit-med-_bu_-som-er-storre-enn-soverom_-stue-og-kjokken-til-saman-1.17793732 Dette må vel være det drøyeste av svindel i full offentlighet .... "Boden" er ca halvparten av hele leiligheten. Selve salgsoppgaven: https://www.finn.no/realestate/projectsingle/ad.html?finnkode=453359225 #bolig #Norge #Trondheim #nyheter #allheimen #nor...
Post #530543
#Posten går nye veier for å tjene penger .... 🫠🫤 #Norge #norsktut #allheimen
Post #530538
Dette er vel ganske så rasistisk, eller? Så hvis besetningen på skipene som er i regionen er fra Filipinene, så er det helt greit da? Eller? https://www.nrk.no/nyheter/sjooffisersforbundet_-ingen-nordmenn-innenfor-hormuzstredet-1.17794392 #nyheter #Norge #skipsfart #Irak #USA #politikk #norsktut #allheimen
Post #486694
When the USB audio card suddenly disappears. You re-plug the interface, nothing changes. Cold restart of the monitor the USB audio card is connected, and now all USB devices connected to the monitor disappeared. Cold start the connected laptop, nothing changes. Then unplugging both ends of the USB cable between the monitor and the laptop. Then all USB devices appears again .... w00t!?!? A cold-boot of the USB cable was the least thing I would expect would be needed. Could be poor connectio...
Post #420597
This is sad 😢 https://github.com/mozilla/bedrock/commit/d459addab846d8144b61939b7f4310eb80c5470e#diff-a24e74e4595fa85440a2f4e7e5dcfe68aba6e1e593aef05a2d35581a91423847 #firefox #privacy #mozilla #foss #opensource #web
Post #118865
It just struck me ... #MAGA can also mean: #Microsoft #Apple #Google #Amazon And it doesn't even change things much, in a political sense #uspol #politics #bigtech