Lawsuits against banks with Epstein ties may shed new light on financier’s crimes
Meanwhile, banks who had done business with Epstein, although not admitting wrongdoing, paid hundreds of millions in settlements to victims. Donald Trump even made releasing the Epstein investigative files part of his campaign platform, and doubled down on his promise to do so early this year.
In the end, Trump’s justice department did not release these files, and his administration has become embroiled in reports about social ties between him and Epstein. Congressional promises to release files have lagged, due to political jockeying and justice department foot-dragging.
But two new lawsuits could shed light on Epstein’s activities amid the stalemate – regardless of their outcome.
These lawsuits, filed by an anonymous plaintiff against Bank of America and the Bank of New York Mellon (BNY), allege that these financial powerhouses illicitly enabled Epstein’s sex trafficking. The suits are helmed by Sigrid S McCawley, of Boies Schiller Flexner, and Brad Edwards of Edwards Henderson, who have long represented Epstein victims.
Lawsuits against banks with Epstein ties may shed new light on financier’s crimes
Experts say claim banks enabled Epstein will be difficult to prove but other outcomes could provide solace to victimsVictoria Bekiempis (The Guardian)
U.S. Postal Service Cuts Funding for a Phoenix Mail Room Assisting Homeless People
He and thousands of others have received mail here for years. They use the address for job applications, for medication, to receive benefits like food stamp cards and even to vote. And for 20 years, the U.S. Postal Service provided at least 20% of the mail room’s budget.
But last month, the postal service ended its support of $24,000 a year because a nearby post office is “able to fully serve the community,” a spokesperson said in a statement to ProPublica.
Unlike a standard post office, Keys to Change allows people to receive mail without a government ID, a common problem for some who are homeless.
Phoenix Mail Room for Homeless People Loses Funding
The loss of support comes at a time of uncertainty for one of Arizona’s largest homeless services providers as the Trump administration calls for reducing and restructuring homelessness assistance grants.ProPublica
10M people watched a YouTuber shim a lock; the lock company sued him. Bad idea.
Yeah, it's the Streisand Effect.
“Opening locks” might not sound like scintillating social media content, but Trevor McNally has turned lock-busting into online gold. A former US Marine Staff Sergeant, McNally today has more than 7 million followers and has amassed more than 2 billion views just by showing how easy it is to open many common locks by slapping, picking, or shimming them.This does not always endear him to the companies that make the locks.
On March 3, 2025, a Florida lock company called Proven Industries released a social media promo video just begging for the McNally treatment. The video was called, somewhat improbably, “YOU GUYS KEEP SAYING YOU CAN EASILY BREAK OFF OUR LATCH PIN LOCK.” In it, an enthusiastic man in a ball cap says he will “prove a lot of you haters wrong.” He then goes hard at Proven’s $130 model 651 trailer hitch lock with a sledgehammer, bolt cutters, and a crowbar.
Naturally, the lock hangs tough.
An Instagram user brought the lock to McNally’s attention by commenting, “Let’s introduce it to the @mcnallyofficial poke.” Someone from Proven responded, saying that McNally only likes “the cheap locks lol because they are easy and fast.” Proven locks were said to be made of sterner stuff.
But on April 3, McNally posted a saucy little video to social media platforms. In it, he watches the Proven promo video while swinging his legs and drinking a Juicy Juice. He then hops down from his seat, goes over to a Proven trailer hitch lock, and opens it in a matter of seconds using nothing but a shim cut from a can of Liquid Death. He says nothing during the entire video, which has been viewed nearly 10 million times on YouTube alone.
What happens next won't surprise you!
10M people watched a YouTuber shim a lock; the lock company sued him. Bad idea.
It’s still legal to pick locks, even when you swing your legs.Nate Anderson (Ars Technica)
like this
reshared this
Republicans post notice that no federal food aid will go out Nov. 1
The new notice comes after the Trump administration said it would not tap roughly $5 billion in contingency funds to keep benefits through the Supplemental Nutrition Assistance Program, commonly referred to as SNAP, flowing into November. That program helps about 1 in 8 Americans buy groceries.
“Bottom line, the well has run dry,” the USDA notice says. “At this time, there will be no benefits issued November 01. We are approaching an inflection point for Senate Democrats.”
‘Our work has only just begun’: Mamdani, Sanders and AOC rally the faithful ahead of NYC mayoral election
Marina Dunbar in Forest Hills
Mon 27 Oct 2025 06.00 EDT
For Mitch, the key issues facing NYC right now are “safety, the trains being safe, and affordability”, adding that while he’s skeptical about whether Mamdani can deliver on all his promises, he’s open-minded. “I don’t know who’s going to pay for all this stuff he wants done … but I’m going in open-minded, and just hoping somebody is offering some alternatives.”Brooklyn, 30, also from Astoria, said their top priorities were protecting LGBTQ rights and tackling the city’s affordability crisis. “I think Mamdani is doing a great job of addressing everything I’m concerned about,” they said.
Nicole, 30, echoed that sentiment, praising Mamdani’s authenticity: “I feel like Mamdani is very genuine in his responses in a way that isn’t typically seen in most politicians. He’s a little less lip service-y than usual.”
‘Our work has only just begun’: Mamdani, Sanders and AOC rally the faithful ahead of NYC mayoral election
Thousands pack Forest Hills stadium on Sunday night, voicing their excitement and hope for changeMarina Dunbar (The Guardian)
‘Our work has only just begun’: Mamdani, Sanders and AOC rally the faithful ahead of NYC mayoral election
cross-posted from: lemmy.ml/post/38142040
Marina Dunbar in Forest Hills
Mon 27 Oct 2025 06.00 EDT
For Mitch, the key issues facing NYC right now are “safety, the trains being safe, and affordability”, adding that while he’s skeptical about whether Mamdani can deliver on all his promises, he’s open-minded. “I don’t know who’s going to pay for all this stuff he wants done … but I’m going in open-minded, and just hoping somebody is offering some alternatives.”Brooklyn, 30, also from Astoria, said their top priorities were protecting LGBTQ rights and tackling the city’s affordability crisis. “I think Mamdani is doing a great job of addressing everything I’m concerned about,” they said.
Nicole, 30, echoed that sentiment, praising Mamdani’s authenticity: “I feel like Mamdani is very genuine in his responses in a way that isn’t typically seen in most politicians. He’s a little less lip service-y than usual.”
New image-generating AIs are being used for fake expense reports
The fact that workers with expense accounts still feel they're getting paid so little that they deserve to commit fraud says something about that stratum of employee.
Businesses are increasingly being deceived by employees using artificial intelligence for an age-old scam: faking expense receipts.The launch of new image-generation models by top AI groups such as OpenAI and Google in recent months has sparked an influx of AI-generated receipts submitted internally within companies, according to leading expense software platforms.
Software provider AppZen said fake AI receipts accounted for about 14 percent of fraudulent documents submitted in September, compared with none last year. Fintech group Ramp said its new software flagged more than $1 million in fraudulent invoices within 90 days.
About 30 percent of US and UK financial professionals surveyed by expense management platform Medius reported they had seen a rise in falsified receipts following the launch of OpenAI’s GPT-4o last year.
New image-generating AIs are being used for fake expense reports
Software provider AppZen said fake AI receipts accounted for about 14% of fraud attempts.Financial Times (Ars Technica)
Threads adds 'ghost posts' that disappear after 24 hours
Threads adds 'ghost posts' that disappear after 24 hours | TechCrunch
Instagram Threads is launching “ghost posts,” a new disappearing-posts feature that lets users share updates that automatically archive after 24 hours.Sarah Perez (TechCrunch)
I got infected like an idiot
I downloaded a cracked install from tpb (haxnode). It was a loader exe that loaded the original exe and supposedly removed the drm in RAM. It required admin permissions, I didn't trust it, but i ran in a vm and nothing happened.
Then i told myself "i have microsoft defender and windows firewall control, they will warn me" and I ran it in my main laptop, and still nothing happened. Like, literally nothing happened. The original program would not start. It would simply exit. Nothing. The other 6 almost identical torrents from the same uploader but with a different program version had a similar result. I gave up.
Then i reboot, and firstly i notice a couple DOS prompts flashing on the screen, and windows firewall control asking me if "aspnet_compiler.exe" is allowed to access the internet or not.
Suspicious, i go to check that "aspnet_compiler.exe" and it's located in the .net system folder, i scan it with microsoft defender and it doesn't report as a virus. I do not pay attention to the fact that it doesn't have a valid Microsoft signature, and i tell myself "probably just a windows update" and i whitelist it on the firewall.
After a few hours I realize "wait a minute: it's impossible that an official windows exe isn't signed by microsoft!" I go back to scan it, not infected... or it looks like, defender says "ignored because in whitelist". What? The "loader" put c:* in the whitelist!
The "crack loader" wasn't a virus per se. It dropped an obfuscated batch in startup, which had a base64 encoded attachment of the actual malware, that was copied in the .net framework directory with unassuming names...
And this for a $60 perpetual license program that i should buy anyway because it's for work
like this
‘Tax the Rich!’: Packed Mamdani Rally Features Sanders, AOC, and Hochul Ahead of Election Day
“Ordinary people get one vote. Billionaires get the opportunity to spend as much as they want to elect the candidates they want,” [Senator Bernie] Sanders said, decrying the influence of super PACs that can accept unlimited political donations. “That is the context in which this election is taking place.”
[Alexandria] Ocasio-Cortez (D-N.Y.), meanwhile, cast the race as one that “mirrors what we are up against nationally, both an authoritarian criminal presidency, fueled by corruption and bigotry and an ascendant right-wing extremist movement,” as well as the “insufficient, eroded, bygone political establishment, this time in the form of Andrew Cuomo.”
'Tax the Rich!': Packed Mamdani Rally Features Sanders, AOC, and Hochul Ahead of Election Day
"While Donald Trump's billionaire donors think that they have the money to buy this election, we have a movement of the masses," Zohran Mamdani said during the sold-out rally in Queens.jake-johnson (Common Dreams)
Rozaŭtuno likes this.
Automattic accuses WP Engine of misleading practices
Automattic has filed new counterclaims against hosting company WP Engine in a long-running dispute over the use of the WordPress and WooCommerce brands.
Case file: automattic.com/wp-content/uplo…
Automattic accuses WP Engine of misleading practices - Techzine Global
Automattic files claims against hosting company WP Engine in a long-running dispute over the use of the WordPress and WooCommerce brandsMels Dees (Techzine)
Here’s what ads on your $2,000 Samsung smart fridge will look like
Here’s how to opt out.
Archived version: archive.is/20251027141201/thev…
Here’s what ads on your $2,000 Samsung smart fridge will look like
A new widget coming to the built-in screen will show ‘curated advertisements’ starting next month. But you can opt out.Jennifer Pattison Tuohy (The Verge)
Opt out is not real.
This will remove the widget entirely. If you think you might actually like the widget’s other features (calendar, weather, and news), you can “X” out a particular ad, and it won’t pop up again. But then you’ll get another ad.
Hundreds of People With ‘Top Secret’ Clearance Exposed by House Democrats’ Website
A database containing information on people who applied for jobs with Democrats in the US House of Representatives was left accessible on the open web.
10M people watched a YouTuber shim a lock; the lock company sued him. Bad idea.
It’s still legal to pick locks, even when you swing your legs.
RRF Sport. La testa nel pallone. Con Pino e Albino . Polemiche Napoli Inter. Tennis. F1 e Moto GP. Casertana e Juve Caserta
Amazon announces massive €1.4 billion investment in the Netherlands
Amazon has decided to invest €1.4 billion in the Netherlands between 2025 and 2027 to boost AWS and its retail business.
https://www.neowin.net/news/amazon-announces-massive-14-billion-investment-in-the-netherlands/
Microsoft's OpenAI losses hidden as part of $4.7 billion 'other' expense — stake in AI company still doesn't turn a profit as companies grapple with ongoing contract negotiation
Microsoft’s filings obscure the cost of OpenAI, but Wednesday’s earnings may offer clarity.
https://www.tomshardware.com/tech-industry/microsofts-openai-math-is-still-a-black-box
Technology Channel reshared this.
Twitter says passkey reset isn't about a security issue – it's to finally kill off twitter.com
Social media site dispatches crucial clarification days after curious announcement
X says passkey reset isn't about a security issue – it's to finally kill off twitter.com
: Social media site dispatches crucial clarification days after curious announcementConnor Jones (The Register)
Researchers create world's smallest pixel measuring just 300 nanometers across — could be used to create a 1080p display measuring 1mm across
Could unlock ultra-detailed, miniature displays for smart glasses and other wearables.
Technology Channel reshared this.
EU sovereignty plan accused of helping US cloud giants
Brussels' framework muddies the waters and could hand advantage to foreign hyperscalers, says trade body
EU sovereignty plan accused of helping US cloud giants
: Brussels' framework muddies the waters and could hand advantage to foreign hyperscalers, says trade bodyDan Robinson (The Register)
[Announcement] Path of Exile: Keepers of The Flame - Bloodline Ascendancy Classes
In this expansion, you will be able to absorb the abilities of the certain bosses you defeat, in the form of additional Bloodline Ascendancy Classes.
Bloodline Classes are a new means of further character customisation. In the endgame, defeating certain powerful bosses lets you gain that boss' Bloodline as your own, learning their ways and adopting their powers for yourself.
They can be paired with any Ascendancy Class and require Ascendancy skill points to allocate, so you can mix and match Bloodline passives and Ascendancy passives as you see fit.
There are countless possible combinations with this system, and we're excited to see what crazy and interesting build that you will come up with!
Here are some of the Bloodline Ascendancy classes that you can acquire in this expansion.
Farrul Bloodline
Lycia Bloodline
Delirious Bloodline
Catarina Bloodline
Aul Bloodline
Olroth Bloodline
Announcements - Path of Exile: Keepers of The Flame - Bloodline Ascendancy Classes - Forum - Path of Exile
Path of Exile is a free online-only action RPG under development by Grinding Gear Games in New Zealand.Path of Exile
MyVidster Leak Exposes 4M User Records (Emails, Usernames); Phishing Risk
Meta Description: Alleged MyVidster data leak exposes ~4M users (emails, IDs, usernames). Brinztech: High risk of targeted phishing & credential stuffing attacks. Occurred Oct 2025.
MyVidster Leak Exposes 4M User Records (Emails, Usernames); Phishing Risk
Meta Description: Alleged MyVidster data leak exposes ~4M users (emails, IDs, usernames). Brinztech: High risk of targeted phishing & credential stuffing attacks. Occurred Oct 2025.Threat Alert (Brinztech Brinztech)
IBM Unveils Digital Asset Platform as Demand for Tokenization, Stablecoins Grows
The IBM Digital Asset Haven, developed with Dfns, aims to offer banks, governments and enterprises a full-stack platform for token custody, governance and compliance.
RRF Sport. La testa nel pallone. Con Pino e Albino 27 10 25
Plymouth scientists win £2m to use AI in deep-sea mapping
Plymouth scientists win £2m to use AI in deep-sea mapping
The Deep Vision project aims to help shape legal protections for the habitats.Jonathan Morris (BBC News)
Fitik likes this.
A single point of failure triggered the Amazon outage affecting millions
A single point of failure triggered the Amazon outage affecting millions
A DNS manager in a single region of Amazon’s sprawling network touched off a 16-hour debacle.Dan Goodin (Ars Technica)
like this
Sora might have a 'pervert' problem on its hands
In the last week or so, 10 out of the 25 most popular cameos using my face are various fetishes, including one where I'm a centaur-woman pregnant with octoplets. It's not just me, either. I've seen this kind of content made with cameos of other women: female creators, another woman tech reporter, and a female employee of a prominent venture-capital firm.
**I don't get why anyone is surprised **
Sora allows people to make 'fetish' content using other people's faces
Sora lets you make videos using other people's faces. Great! Except when your face is used in a "fetish" video, like one about feet or pregnancy.Katie Notopoulos (Business Insider)
Cranberry Farmers Consider Turning Bogs into Wetlands in Massachusetts As Temperatures Rise
Cranberry Farmers Consider Turning Bogs into Wetlands in Massachusetts As Temperatures Rise - Inside Climate News
The state is helping to transform cranberry bogs to into habitats that broaden conservation and climate change resilience.Inside Climate News
New Hampshire officials looking for feedback on new state climate action plan
New Hampshire officials looking for feedback on new state climate action plan
The plan is the first large-scale coordinated effort to address climate-warming emissions in New Hampshire since 2009. It includes strategies like supporting small-scale public transportation, protecting forest land, and improving energy efficiency.Mara Hoplamazian (NHPR)
like this
NHDES will accept comments on its draft comprehensive measures until 4 pm, November 15, 2025. Only written
comments will be accepted. Comments may be sent by email (preferred) or postal mail. Please include your name,
organization, mailing address, email address and telephone number with your submittal.
The quality of stakeholder input matters more than quantity when it comes to public comments. NHDES prioritizes
specific, well-reasoned feedback supported by evidence over broad opinions. Please provide data and information,
understand the CCAP requirements, be innovative and constructive, include your background, clarify representation and
avoid form letters.
Please note the greenhouse gas reductions are preliminary estimates, which are still being reviewed and refined. We will
be revising the reductions as our modeling is finalized. We welcome comments on calculation approaches. There will be
an additional opportunity for comments on the final CCAP draft in spring 2026.
By email: cprg@des.nh.gov. Please include the following text in the subject line: “Draft CCAP Measures - Public Notice -
for New Hampshire’s Comprehensive Climate Action Plan.”
Chikungunya on Long Island: A Warning Sign of Our Changing Climate
Chikungunya on Long Island: A Warning Sign of Our Changing Climate - NYAS
The recent suspected case of Chikungunya virus on Long Island is important to monitor both in terms of public health and climate change.The New York Academy of Sciences (NYAS Dev)
like this
Nissan pools carbon emissions with electric vehicle maker BYD to avoid EU penalties
Nissan pools carbon emissions with electric vehicle maker BYD to avoid EU penalties
Japanese carmaker’s deal with Chinese rival part of EU-sanctioned offsetting scheme to help head off £13bn in finesLisa O’Carroll (The Guardian)
like this
Novità Netflix a novembre 2025: calendario completo di film e serie TV
Tra grandi ritorni, miniserie inedite e cinema d’autore, il catalogo delle novità di Netflix per Novembre 2025 si aggiorna con numerosi titoli. A novembre spiccano la parte 1 di Stranger Things 5, la miniserie storica Death by Lightning, la serie spagnola Il cuculo di cristallo dal romanzo di Javier Castillo, e il nuovo Frankenstein di Guillermo del Toro. In agenda anche la rom-com Buon Natal-ex! e il dramma Train Dreams.
SCOPRILI TUTTI QUI: Novità Netflix a novembre 2025: calendario completo di film e serie TV
Netflix: tutte le novità di novembre 2025 - calendario film e serie TV
Novità Netflix novembre 2025: Stranger Things 5 (Parte 1), Frankenstein, Death by Lightning, Il cuculo di cristallo, Buon Natal-ex! e Train Dreams.Redazione (Atom Heart Magazine)
Docker Alternative: Podman on Linux
Docker Alternative: Podman on Linux
This article is inspired by our LinuxCommunity.io forum discussion thread (thanks to users @tmick and @shybry747 for the feedback). Let's walk throughHayden James (linuxblog.io)
Fitik likes this.
Monday, October 27, 2025
Share
The Kyiv Independent [unofficial]
Millions read the Kyiv Independent, but only one in 1,000 supports us financially
Russia’s war against Ukraine
Psychologists aid residents in a yard of an apartment building hit by a Russian drone strike on Oct. 26, 2025 in Kyiv. A nighttime Russian drone attack on Kyiv damaged apartment buildings, injured residents, including children, and killed three people. (Vitalii Nosach/Global Images Ukraine via Getty Images)
Russian drone attack targets residential buildings in Kyiv, killing civilians. Russia launched a drone attack on Kyiv overnight Oct. 26, killing three people and injuring at least 32, including seven children, in strikes on residential buildings.
Ukraine retakes 2 villages in Donetsk Oblast near Dobropillia. Ukrainian forces liberated two villages in eastern Donetsk Oblast about 30 kilometers (19 miles) north of embattled Pokrovsk, the General Staff of Ukraine’s Armed Forces said on Oct. 26.
Ukrainian drones target Moscow in overnight attack, mayor says. Moscow’s Domodedovo and Zhukovsky airports temporarily suspended operations in response to the drone threat.
Your contribution helps keep the Kyiv Independent going. Become a member today.
‘More to come,’ HUR says, as sabotage fires spread across Russia. Russia faces an increase in the arson and “spontaneous combustion” of electrical panels, railway relay cabinets, and other infrastructure helping Moscow wage its war against Ukraine over the past week, a source at Ukraine’s military intelligence told the Kyiv Independent.
Russia says it tested nuclear-powered Burevestnik cruise missile. “It’s a unique product that no one else in the world possesses,” Russian President Vladimir Putin claimed.
Ukraine destroys Russian Buk air defense system worth $45 million, military says. Ukraine’s “Black Forest” brigade detected and struck a Russian Buk-M3 anti-aircraft missile system at an unspecified location.
YOU MAY ALSO BE INTERESTED IN…
War Notes
Get the latest news from the front lines in your inbox every Friday
Read our exclusives
Ukraine war latest: 3 killed, 32 injured in Kyiv amid Russian drone attack on residential buildings
President Volodymyr Zelensky said on Oct. 26 that Russia had launched more than 50 missiles, nearly 1,200 strike drones, and more than 1,360 guided bombs against Ukraine this week.
Photo: State Emergency Service/Telegram
Learn more
More than Tomahawks: what Ukraine’s soldiers say they actually need
Though Ukraine has been hoping the U.S. will finally greenlight the supply of long-range Tomahawk missiles, those on the ground say the lack of more basic needs is a more pressing issue.
Photo: Roman Pilipey/AFP via Getty Images
YOU MAY ALSO BE INTERESTED IN…
One story from Ukraine
Monday to Friday, get an email with our most important story of the day
Russia’s war on civilians | Ukraine This Week
Human cost of war
At least 9 killed, 45 injured in Russian strikes across Ukraine over the past day. At least nine civilians were killed and 44 others injured in Russian attacks across Ukraine over the past day, regional authorities reported on Oct. 26.
Millions read the Kyiv Independent, but only one in 1,000 supports us financially. One membership might not seem like much, but to us, it makes a real difference. If you value our reporting, consider becoming a member — your support makes us stronger.
International response
Lithuania closes border with Belarus indefinitely after balloons violate airspace for 3rd night in row. “Contraband” balloons launched from Belarus have disrupted air traffic four times in the last week. Lithuania has closed border crossings with Belarus for “an indefinite period” in response.
Ukraine Action Summit meets in Washington, calls for return of abducted children, security guarantees. “We bring people together to learn… to educate themselves and to use their voices to speak to their elected officials to support Ukraine,” Marianna Tretiak, Chair of the American Coalition for Ukraine (ACU) Board, told the Kyiv Independent.
YOU MAY ALSO BE INTERESTED IN…
WTF is wrong with Russia?
A weekly newsletter about Russian politics, history, and culture
This newsletter is open for sponsorship. Boost your brand’s visibility by reaching thousands of engaged subscribers. Click here for more details.
Today’s Ukraine Daily was brought to you by Jared Goyette, Asami Terajima, Tymur Zadorozhnyy, Volodymyr Ivanyshyn, and Abbey Fenbert.
If you’re enjoying this newsletter, consider joining our membership program. Start supporting independent journalism today.
Share
Ukraine Action Summit meets in Washington, calls for return of abducted children, security guarantees
"We bring people together to learn... to educate themselves and to use their voices to speak to their elected officials to support Ukraine," Marianna Tretiak, Chair of the American Coalition for Ukraine (ACU) Board, told the Kyiv Independent.Volodymyr Ivanyshyn (The Kyiv Independent)
Giovedì 6 novembre torniamo con il Logout di TWC Roma, il ritrovo per tech workers che vogliono incontrarsi dopo lavoro: un'occasione per socializzare, conoscersi, parlare del nostro lavoro e come organizzarci nei prossimi mesi!
Ci vediamo giovedì 6 novembre, alle 18.30, da 568 Public House a Garbatella!
Unisciti al Gruppo telegram!
reshared this
Ken Thompson Recalls Unix's Rowdy, Lock-Picking Origins
Ken Thompson Recalls Unix's Rowdy, Lock-Picking Origins - The New Stack
Ken Thompson's vivid recollection of the rowdy roomful of geeks at Bell Labs who built the digital world in a spirit of open play.David Cassel (The New Stack)
copymyjalopy likes this.
Auster
in reply to Moonrise2473 • • •Depending on what you work on, maybe there's an alternative FOSS or at least paid DRM free software?
Or, if you work for a company and it demands this tool, maybe you could ask them to provide the software for you?
On a 3rd point, I've seen official softwares detect when they're being run in VMs or similar, so maybe that's what happened.
On a 4th point, if you must use a crack, maybe do so on a less usual Linux system, so if it's a functional one but packaged with virus, the virus breaks either because it runs under Wine or similar, or because the less usual system lacks some needed dependency for the virus if it can run on Linux as well?
RedSnt 👓♂️🖥️
in reply to Moonrise2473 • • •I literally just watched this video yesterday which, as you mention yourself, talks about how modern malware will add itself to the exclusion list aka whitelist.
~Anyway~ ~this~ ~is~ ~a~ ~good~ ~reason~ ~to~ ~try~ ~linux...~
- YouTube
youtu.belike this
Damage likes this.
weirdo_from_space
in reply to RedSnt 👓♂️🖥️ • • •like this
HarkMahlberg likes this.
RedSnt 👓♂️🖥️
in reply to weirdo_from_space • • •weirdo_from_space
in reply to RedSnt 👓♂️🖥️ • • •RedSnt 👓♂️🖥️
in reply to weirdo_from_space • • •Xubuntu Website Hacked to Spread Malware Via Downloads: What You Need to Know
Hot for SecurityNuXCOM_90Percent
in reply to weirdo_from_space • • •There are two layers to this (actually a lot more but)
What you are describing is mostly supply chain. It is the idea that the package manager's inventory should be safe. And that is already a nigh impossible task simply because so many of the packages themselves can be compromised. It seems like every other year there is a story of bad actors infiltrating a project either as an attack or as a "research paper". But the end result is you have core libraries that may be compromised.
But the other side is what impacted OP and will still be an issue even if said supply chain is somehow 100% vetted. People are inherently going to need things that aren't in a package manager. Sometimes that is for nefarious reasons and sometimes it is just because the project they are interested in isn't at the point where it is using a massive build farm to deploy everywhere. Maybe it involves running blind scripts as root (don't fucking do that... even though we all do at some point) and sometimes it involves questionable code.
And THAT is a very much unsolved problem no matter what distro. Because, historically, you would run an anti-virus scan on that. How many people even know what solutions there are for linux? And how many have even a single nice thing to say about the ones that do?
fuckwit_mcbumcrumble
in reply to RedSnt 👓♂️🖥️ • • •RedSnt 👓♂️🖥️
in reply to fuckwit_mcbumcrumble • • •I guess in theory you're right. If you're executing code, you're executing code. But usually when executing EXE files it tends to target Windows machines, but yeah, there's no way of telling if it'll recognize it's in a linux environment and do it's thing there as well.
Especially because OP mentioned he just clicked "Yes"/"Allow" to all the super user prompts.
Now personally I don't run an Arch system and only install software from my distro + flatpak; So I feel pretty secure for now. But I can see that trend buckling as the AUR is already under attack.
cmnybo
in reply to RedSnt 👓♂️🖥️ • • •NuXCOM_90Percent
in reply to Moonrise2473 • • •Just to pile on: NEVER pirate stuff you use for work. Audits are a thing (especially if said software company gets suspicious for whatever reason) and you WILL be thrown under the bus at a moment's notice and put on an industry wide shitlist because you are just too much of a liability after you get caught once.
Pirate for fun and hobbyist use. The moment you are getting paid, go legit.
like this
HeerlijkeDrop, HarkMahlberg e toothpaste_sandwich like this.
Lka1988
in reply to NuXCOM_90Percent • • •Cevilia (she/they/…)
in reply to Moonrise2473 • • •Moonrise2473
in reply to Cevilia (she/they/…) • • •probably i would have ran it outside as the crack just silently "crashed" (while successfully dropped the malware as admin in the right spot, ready to be ran as admin at the next boot via the task scheduler) and i would have thought "maybe it doesn't run in a sandbox/vm".
But yes, in a hindsight, if i ran in sandboxie then i might have noticed that it had dropped suspiciously named files in common:startup with that nice file transfer GUI (unless if the malware detected sandboxie and did not run the malicious routines)
Cevilia (she/they/…)
in reply to Moonrise2473 • • •If it didn't run the malicious routines, problem solved 😀
Not a silver bullet, just something to remember exists.
frongt
in reply to Cevilia (she/they/…) • • •Cevilia (she/they/…)
in reply to frongt • • •Zorsith
in reply to frongt • • •HarkMahlberg
in reply to Moonrise2473 • • •like this
metaStatic likes this.
pop [he/him]
in reply to Moonrise2473 • • •If you work for someone, they should be providing the license for you.
If you're a freelancer, it should be part of the costs that you get back as you work. $60 for a perpetual license is honestly not that steep and shouldn't impact your prices much.
This is one of the main reasons I don't pirate anything but audio and video anymore (and even then I'm cautious). It's really not worth it.
like this
Damage e HarkMahlberg like this.
shittydwarf
in reply to Moonrise2473 • • •like this
Damage, HarkMahlberg e metaStatic like this.
omgboom
in reply to Moonrise2473 • • •like this
HarkMahlberg e metaStatic like this.
nivellian
in reply to Moonrise2473 • • •SaharaMaleikuhm
in reply to Moonrise2473 • • •like this
metaStatic likes this.