Jump to content

acbluflame

Member
  • Posts

    26
  • Joined

  • Last visited

Awards

This user doesn't have any awards

About acbluflame

  • Birthday Jan 28, 1993

Profile Information

  • Gender
    Male
  • Location
    UK

Recent Profile Visitors

1,006 profile views

acbluflame's Achievements

  1. I would be highly interested if you are able to find sources. The best, recent article related to this that google english returns is: https://www.bahnhof.se/press/press-releases/2019/10/08/bahnhof-avslojar-operatorerna-som-lamnar-ut-dina-uppgifter-till-utpressare-2019 which links to: https://www.regeringen.se/pressmeddelanden/2019/10/nu-trader-de-nya-datalagringsreglerna-i-kraft/ Looking through a google translation, it looks like IPRED still only targets "operators" (I assume this translates as an ISP) which aligns with Mullvad's articles where they "are not regarded as an electronic communications network nor an electronic communications service". Additionally, it seems that IPRED is only useful if the operator has data stored on their customers. Mullvad maintains that they store very limited information, so any request or extortion would reveal very little. As for LEK, I'm sure it's quite a vast and nuanced law covering many aspects, but not sure where to find a good translation for this. Presuming this is a typical electronic communications law which governs privacy, data retention length, and exceptions (law enforcement)? There seems to be contention between national law and EU law on data retention, so assuming that this applies: https://en.wikipedia.org/wiki/Primacy_of_European_Union_law However, I'm a little concerned of the following from the governing press release: Roughly translated as: Don't think the translation is nuanced enough to know if this would start to apply to VPN service providers, or to close loop-holes exploited by Swedish ISPs. Further articles of interest: https://torrentfreak.com/isp-bahnhof-must-log-subscriber-data-but-copyright-mafia-wont-get-any-191001/
  2. https://mullvad.net/en/help/swedish-legislation/ Time to back up your armchair legalese. Which bit of their article is incorrect or missing information? If you know something, then please help the community and submit it to: https://github.com/privacytoolsIO/privacytools.io/issues
  3. Consider the following options for alternative VPNs: https://www.privacytools.io/providers/vpn/
  4. If this wasn't intention as OP is suggesting, then this is gross incompetence. You shouldn't need to hire a security expert/auditor/pentester to follow due diligence in regards to basic security.
  5. What's the source for AWS also being affected? Which of those businesses are hosted on AWS? Asking because I haven't heard of any AWS problems outside of GCP elsewhere, AWS' status page is all green, and nothing in my business' AWS dashboard.
  6. 1Password's thoughts on this: https://discussions.agilebits.com/discussion/101551/article-just-published-in-washington-post-is-saying-1password-and-others-have-security-flaws
  7. I just can't imagine the incompetence occurring within either the dev or devops team for TMobile Austria. It's not as if it is a bug: - it's just bad security principles (i.e. not secure by design), and unfortunately bad principles normally begets more bad principles. If you did this within the NHS and were breached, you're getting carpet bombed by the ICO. If you left this until May whereupon GDPR comes into effect, you're getting nuked from low orbit.
  8. Between the delay/lack of communication for mitigating KRACK, and now this, I'll definitely be going Ubiquiti in the future.
  9. The Daily Clickbait. On behalf of the UK, please accept our apologies that our news paper wasted your finger-click and time with this trash.
  10. This is getting a bit meta, but you have three posts in this discussion, therefore three quotes. I've only cut points 1 & 2 from your first post because I focussed on AdoredTV and your apparent dislike for him/them. Nothing else has been touched. I never cut the 'credit' portion of the second post - you'll see that it is there in the quote, so that's false. Other than that, the rest of your content is filled with AdoredTV. Remember that this topic is regarding PCPer's mistake, however you chose to spend your time (and draw attention) commenting on this chap (and now I'm doing it, heaven forbid). Normally you post down-to-earth and accurate posts without any of the fluff nonsense, so I was a bit surprised, but ultimately glad we are in agreement. Regardless, think we've exhausted this line of discussion. I'm still holding my breath that a consistently high-standard publication like PCPer will comment on this.
  11. A bit surprised by some vets here that normally have upstanding and thoughtful posts. I haven't heard of AdoredTV before this topic, but you really do seem have a chip on your shoulder. You appear to be caught up in a continuous flow of ad-hominem diarrhoea that's unbecoming of an "adult". Why don't you post about it some more. Frankly, this situation seems fairly cut and dried with a few side quirks IMO. Conflict of interest - Allyn Malventano produces a review of the Intel Optane drive. Intel pays Shrout Research (that employs Allyn Malventano) to produce a white paper on the aforementioned drive - alarm bells should be ringing regardless of the outcome of the paper. Systematically, this should have been nipped in the butt before any writing took place. Publicised - AdoredTV shines light on the glaring omission of any disclaimer of point 1. Morality - AdoredTV should have given PCPer a chance to rectify this on the off-chance this was an honest mistake. Indeed, he may have posted the video knowing full-well that he should have contacted PCPer beforehand - there could have been an ulterior motive, but this is tin-foil hat territory hearsay at best. He recognised/admitted his mistake, and hid the damning video during talks, so I'm willing to say he had the better of intentions here. Hindsight - the lack of disclaimer could either be: an honest fault or oversight; lack of integrity or thought-out journalistic processes within PCPer Clawback of integrity - PCPer has since stuck a disclaimer on the last page of an eleven page article. I would've missed it to be honest. Morally, I would've expected them to be confident or willing to show that they made an honest mistake and place this at the start of the first article, i.e. go above and beyond normal practices. They have instead actioned the bare minimum to cover their ass, and as such I lean towards the latter bullet point in point 5. Aftermath - if/when PCPer decides to create PR about this, I'd be willing to draw a line depending on its sincerity.
  12. This is fixed in the developer beta for 11.2 iirc, so the fix is coming to the masses soon.
  13. If above didn't help, then: - Can you check that apache knows how to handle php files with modphp in your apache config: #Add PHP 7 directives <IfModule php7_module> AddType application/x-httpd-php .php AddType application/x-httpd-php-source .phps <IfModule dir_module> DirectoryIndex index.html index.php </IfModule> </IfModule> - You also need to make sure that you're loading modphp, e.g. (you'll need to find the path to your PHP7 module) #Enable PHP 7 module LoadModule php7_module /usr/local/opt/php71/libexec/apache2/libphp7.so - On ubuntu, you'll probably find your apache config at /etc/apache2/httpd.conf
  14. Some good ol' memories there - still play Halo PC every week actually. Random, but I always wondered what happened to PowerDVD and the other competing software. Seems PowerDVD is still going strong, though I'm not quite sure why anyone would pay for it it over using MPC-HC or VLC.
×