Welcome to November, and welcome to the Stubsack, your first port of call for learning fresh Awful you’ll near-instantly regret.

Any awful.systems sub may be subsneered in this subthread, techtakes or no.

If your sneer seems higher quality than you thought, feel free to cut’n’paste it into its own post — there’s no quota for posting and the bar really isn’t that high.

The post Xitter web has spawned soo many “esoteric” right wing freaks, but there’s no appropriate sneer-space for them. I’m talking redscare-ish, reality challenged “culture critics” who write about everything but understand nothing. I’m talking about reply-guys who make the same 6 tweets about the same 3 subjects. They’re inescapable at this point, yet I don’t see them mocked (as much as they should be)

Like, there was one dude a while back who insisted that women couldn’t be surgeons because they didn’t believe in the moon or in stars? I think each and every one of these guys is uniquely fucked up and if I can’t escape them, I would love to sneer at them.

(Credit and/or blame to David Gerard for starting this.)___

  • nfultz
    link
    fedilink
    English
    arrow-up
    13
    ·
    4 days ago

    todays adexchanger had a lolworthy note that the binance hack began with a search ad.

    If you hadn’t heard, Binance was totally pwned in a $6 billion crypto heist last week, suspected to be a North Korean operation. Well, Binance has now published what amounts to a preliminary autopsy report of the incident.

    The heist began when a Binance Wallet DevOps team member accidentally downloaded a malicious copy of Homebrew – a popular open-source tool – from a mirror site promoted in a search ad. The malware was spotted, but not before the hackers had obtained the real identities of Wallet DevOps team members.

    Using those identities, the North Korean hacking unit spent months targeting Binance’s wallet team with covert schemes. One involved a prolonged fake job interview that lured a Binance DevOps engineer into downloading an “assignment” onto their work device.

    After taking control of the Binance DevOps engineer’s laptop, the hacker used an unnamed internal AI tool to log in to the devices of other engineers. Access to multiple credentials allowed the heist to go through.

    Binance guy fell for “top link is ads”. COME ON.

    Never understood why my employer would drop $30m on Crowdstrike but not add uBlock Origin to their company chrome profile for free.

    • rhamph
      link
      fedilink
      English
      arrow-up
      8
      ·
      4 days ago

      Never understood why my employer would drop $30m on Crowdstrike but not add uBlock Origin to their company chrome profile for free.

      Ugh, using websites on work computers is such a completely different experience from at home. And yeah, it’s such an easy defence against malware!