No, I believe this specific attack is one that used iMessage link previews as another user posted about in this thread. That behavior is stopped by iOS lockdown mode.

Android lockdown mode functions much differently and doesn’t turn off as much stuff internally. It wouldn’t have stopped the recent sms of death attack, for example.

This attack is one of the ones stopped by iOS’ lockdown mode.

Okay, so are you making reference to the dual elliptic curve nsa backdoor? I need to know exactly what you’re claiming Snowden called a backdoor because if you’re talking about that particular thing it’s pretty wildly different in form, execution and presentation than the topic of the article you posted.

Usually when people talk about Snowden and backdoors they’re talking about that because it’s an incredibly well known thing, so I’m trying to get a little clarification from you instead of making assumptions. I’m gonna go ahead as if you are talking about the most famous Snowden backdoor thing but right here up front is me saying it’s possible you’re talking about something else.

Anyway, it’s a real pain in the butt to copy and paste from the page you linked because it uses graphs and inline notes so liberally, but towards the end there’s a whole section about how the phones database can tell when you sleep. I’ll paste in a sentence from that section so you can search for it and read what seemed so silly to me:

Weekday against hour of day - when this person is reachable, and when they are asleep

So what’s stupid to me about this is how much of a big fat “duh, of course it can do that. Any computer can do that” moment it is. Take a look at your dmesg or journalctl -r if you partake. You’ll see login attempts, authentication, apparmor or selinux messages, network connections and disconnections, device connections and disconnections, cpu state changes and power supply changes.

If you filter for things like authentication or cpu state changes you can easily put together a picture of when the system is in use or asleep, plugged up or running on battery, actively sending and receiving data or just sitting there plugged into the wall. A long time ago when I was in college we reconstructed a class schedule like that using a semesters worth of log files. And showed that I lied to a professor about a dead aunt when I was actually out drinking.

If it were a computer that spent its time being carried around in your pocket it stands to reason that it would have all kinds of data that could be tilted, pivoted and twisted to give an accurate picture of how long and when you’re sleeping.

So when I wrote that that part “gives the lie up” I was referring to how the entire article takes a feature of the os operating as advertised and system logs existing and says “isnt that creepy and scary!”

And to be honest it was a little spooky to realize that if a computer is truly personal then it’s completely bog standard diagnostic information can tell you things that are deeply revealing… twenty years ago when that was made public in a dang boing boing link.

Which isn’t to say it’s not worthwhile to inform people that their devices give up more than they directly record. It’s important for people to understand that. What I generally take issue with is the presentation and tone, presenting the fundamental function of a modern smartphone as something that could only be malicious and surreptitious and itself as serious security research that should be treated with the gravity of something less clickbaity.

The whole thing comes across as an attempt to scare the reader. I hesitate to say they, because the formatting, language used and meandering flow without strong argumentation screams llm, but the text is very clearly meant to alarm. But what are they supposed to be alarmed about? That their computer knows which pictures have which pets in them? That the computer stores and manages that information and offers it to the user? that’s the point.

The point is that the computer comes with a canned function that disables certain types of messaging and notifications when you’re asleep and if you want will even surface that to people so they know you’re not gonna get to them till morning. The point is that you can type “pictures of Duane” into the search doodad and it’ll bring up all the pictures of your dead cat so you can look through them. It’s in the ads. It’s the product.

And even if the product as advertised is scary to you it’s telling that youd (I’m going out on a limb here as I stated in the very start of this comment, apologies if I’m in the wrong) compare that to an nsa operation to control and secretly insert weakness into a cryptographic algorithm. Because they’re the exact opposite thing! Literally the exact opposite!

And I beg your pardon for going in reverse order but one stupid thing I saw in the beginning of the page was the most classico style buried lede ever:

We stress that this goes beyond the specific Apple personal knowledge graph, but it generally applies to any such personalized ML / assistant systems (Muse, Dot, etc.)

“Uh, we said you should be scared of what the fruit company knows about you, ~but actually this is true for literally any assistant software or ai thing~ .”

Come on! It’s obvious clickbait that should be read with a skeptical eye.

Thank you, it was the only one they had in my size but it’s quite nice indeed.

I’m gonna respond to your requests that I copy and paste parts of the article you linked to me and respond directly to them in a way that’s clearer later on when I have a little more time.

But lay off the personal attacks. I haven’t said a single negative thing about you and it only makes people reading this exchange take your ideas less seriously. Which I think does them a disservice because there’s a level of ears pricked up awareness you clearly exhibit that people ought to emulate.

It’s generally held that you can license code that comes from tools and even though this particular example is untested it’s… unlikely that any court would strip the protection of law from companies that use llms as part of their development process.

Tbh you’re better off making a moral or ethical argument.

Transmission wasn’t bound or if bound was going around the port forwarding because it didn’t have the ports configured.

Airvpn doesn’t have that limit if you’re looking to bypass that problem.

Also when you’re ready for it, rtorrent is ready for you.

You might be referring to something else, but we learned mathematical notation in high school.

Do you mean he used Leibniz notation? At the time I was learning calculus teachers would switch between that and whatever didn’t wear out the “d” key willy nilly so it got confusing.

He definitely chose to be put out before the company has to deal with the half trillion in liabilities it has taken on backstopping the whole industry Enron style.

The long and the short is that those blocklists were unmaintained for years and one of them was tied to a person nextdns doesn’t like (I don’t know, I didn’t read it because I don’t care).

That’s the real problem with set-and-forget dns blocklisting, it has to be someone’s job to keep the lists up to date. That person could become compromised, change their guiding principles or just stop working on the thing you rely on.

Okay. Plug your new routers wan port into the Ethernet from the isp fiber box, plug your new routers lan port to the Ethernet wire that goes to your d-link, unplug power from your bell home box and it ought to work. You may need to factory reset your new router.

It doesn’t have to be the right term. When you get a chance post the model number of that d-link box. It’s probably either a switch or hub.

Okay, so your fiber service comes into the house, then to your ISPs media converter (fiber box), then to your bell home hub router using an Ethernet wire from the fiber box and a d-link thingy is in there somewhere.

What you want is fiber box -> new router wan port and d-link -> new router lan port

What kind of service do you have? Possible answers are cable, dsl and fiber.

What services do you get from your isp? Possible answers are internet, phone, tv, security and maybe more.

You have a bell home hub 3000, but you said you also have an Ethernet box. What is that? Does it have a model number?

People who never handled phone tech support calls have entered the chat.

Probably you can just go to the local second hand store, see if they have a router that’s supported by the software packages openwrt or freshtomato and pick that up.

Install your custom firmware on your new router and away you go!

The main factor for being able to do a drop in replacement is if you get any other service from your isp like tv or phone. If you do, and the boxes for those plug into the extant router you will probably need to call them and get someone to set that up.

Otherwise it’s drop in.

You can verify it’s a drop in by plugging your computer directly into the wire your routers wan port is using. Don’t do this for very long. Make sure you call the isp and return their router, they’re likely renting it to you and might get three dollars off your bill.

From their git closed tickets:

NSA: https://github.com/nextdns/blocklists/pull/105

Google and Facebook:

https://github.com/nextdns/blocklists/issues/235

From the git activity (diff linked in case anyone wants to copy and paste):

Google and Facebook: https://github.com/nextdns/blocklists/compare/8e36cfa267930a7dba8e27b0501e199c8a02b0b3...439d8b5a053aab0f93a7ad4341798ebfd1f17a0b

You’re not so bad yourself 😉

Okay now stop calling names too and you’ll be doing good.

The big difference I notice when I look back at our conversation is that your replies use wildly exaggerated comparisons like pointing a hair dryer or a 100c oven while mine stay rooted in the actual conditions the op describes.

I’d like to refute one that you threw out there earlier using the conditions the op described.

We already know the forumula for conductance is kaTd/l so let’s see what coupling the package of their ssd nand chip to an aluminum heatsink does for that:

Air has a k value of .025 or so. Aluminum has a thermal conductivity of 237. Even with the worst thermal pad or goop imaginable that’s several orders of magnitude better. Just for the sake of completeness, let’s assume the nand chip is about 2cm on a side for an area of 4cm square, we’re only working with a miniscule 20c gradient and we’re measuring one centimeter away. You could pick any numbers you want here for comparison, we’re literally multiplying them all together so it doesn’t matter for the purposes of determining how much of an improvement a heatsink would make.

(.025 x 4 x 20)/1 =2

(237 x 4 x 20)/1 =18,960

That’s a thermal conduction much greater than the 100% improvement you expressed doubt about.

Now will that translate into their ssd reaching absolute zero and levitating the pc a few inches off the desktop as it superconducts SpongeBob futa memes down the bus at near infinite speed? Of course not, but it will be much cooler.

Now let’s compare that math to a fan! Using a fan forces cool air into the system, increasing the temperature gradient. Let’s assume the fan driven air is 80 degrees c cooler than the ssd die.

(.025 x 4 x 80)/1 =8

That’s an improvement but it’s nothing compared to the heatsink.

Now this is obviously a gross oversimplification meant to illustrate the relative importance of coupling to materials with a higher k value as opposed to blowing air across things. If you wanted to pick apart my math you could bring up that I’m comparing bulk conductivity across a block of aluminum as opposed to two dissimilar materials coupled imperfectly by a third material. It would make me actually do the real math for bulk conductivity across a series of different materials and show that while the improvement isn’t over 9000 times better it’s still much, much better — but you could do that.

And to be fair, the k value of a good heatsink acts as a lever that even small increases in temperature gradient can multiply to great effect. Which is why you don’t usually put a fan on something without a heatsink.

The point of this exercise is to make it clear to anyone reading this exchange where each of us is drawing from and how each of us is expressing ourselves. I don’t seek to convince or educate you, but to leave behind a powerful wealth of knowledge that anyone can draw upon in the future.

Oh yeah, for object detection I’ve only used the nvidia cards but you don’t need much.

It signifies that the ssd is in a passively cooled case without a heatsink.

I’d say adding a heatsink to the ssd will drop the idle temperatures down at least ten degrees (more like fifteen or twenty, but it’s important to not overestimate no matter how optimistic someone might be!). During long transfers is where the real benefit comes in, it’s still possible to get the ssd in the 90c zone but it’s gonna take much, much longer because the package will take forever to heat the heatsink up and the heatsink will much more efficiently dump that heat into the air. That flatter curve is gonna be a huge help to the op because most people aren’t running constant data transfers as fast as their equipment can handle them 24/7, 365. It’s likely op is seeing ssds die when they transfer their 200gb futa SpongeBob memes folder and the temperature spikes up into the 90s for a few minutes, not while serving that folder to all their fellow bikini bottom enthusiasts at the 10gbps lan party. A flatter curve keeps the ssd at a safe temperature longer.

It’s possible that the ops combination of pcie version and usbc revision (it’s a 7th or 8th gen intel iirc) can’t even do enough operations to get the heatsinked ssd up into the water messes up your packages seal zone when making transfers onto or off of it. Internal action will still heat it up as fast as possible though because the snappy ssd controller won’t be checking its watch and tapping its foot while some packet takes precious microseconds to come down the bus.

The computer has been fine. It will probably continue to be fine once the op gets a heatsink on their ssd. They did not ask us to help them price out and build a new computer, but to keep their ssds from dying, and not to repeat myself too much but that’s what a heatsink will do.

Now it’s also possible that their power supply is whats periodically killing their disks but the heat is a good first step.

You really gotta ease up. Insults and rudeness couched in flowery language are no shield. If this is your first time on lemmy, people take that kind of stuff much more serious than on Reddit.

There’s uh, also a pretty flagrant degree of classism in your replies that might not go over well on the left wing servers like ml. Just be aware.

Just use whatever cameras and stick em on their own subnet that can’t go outside and only gets to talk to the server. Keeping them from phoning home is only half the battle. Ip cameras are inevitably gonna be riddled with security vulnerabilities no matter which ones you choose because they represent a set of libraries and tools frozen in amber.

There are no open camera brands to look for and you don’t get to harden the firmware.

That’s not entirely true but in terms of accomplishing the goal with a budget it is.

Use frigate or whatever. Consider not using zfs. Make sure to add a video card that can handle as many decode and encode streams as you plan to have. Your cpu will have its hands full shuffling data back and forth and serving the web interface. Something in ddr4 with pcie3 is fine as long as you can slap a 3050 or a380 in there. Consider having a separate physical device as opposed to a virtual machine on your extant server. In the case that you need to turn over footage to the authorities you don’t want to be giving them access to the futa SpongeBob memes folder along with the garden and garage surveillance folder.

E: a380, the 370 is a mobile gpu