She/Her

breast cancer survivor, web dev professional, succulents, gaming, yarn crafts, 3d printing.

alt: StopForgettingIt@ piefed.social

alt: StopForgettingIt@ dbzer0.com

  • 0 Posts
  • 127 Comments
Joined 3 years ago
cake
Cake day: June 28th, 2023

help-circle



  • The real research: https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/

    Here is the boiled down points from this

    1. you open a page that has an ad served from Discovery-Tech ad inventory

    2. the ad has a standard script in to that calls back to the home server and passes your advertising ID (cookie ID on desktop or mobile ID on mobile) plus your IP

    3. there is a third party that has compiled a list of ad ID + IP that effectively de-anonymizes users. This is used to target specific people. The info passed by the ad is compared against the target list. If there is no match to the target nothing further happens.

    4. if a match is found it returns javascript that runs on the page. It finger prints the device then it checks for an exploit.

    5. if the exploit it is looking for is found the exploit corrupts memory in the rendering engine, achieves native code execution, escapes the sandbox, and installs the spyware.

    And, yes, ad blocker software would stop this. If the ad cannot render it cannot call back to the mothership. The only exception to this would be if the ad was served first party, like the website you were visiting was also hosting the ad. Or if you are on a device using a browser that is part of a app that does not have ad blocking, like the built in browser for instagram.

    Here is what they did not say

    We don’t know which browser, OS, or application vulnerability was used at Al Jazeera. It could be a unknown zero day one or a one that is known but only works on certain older versions of software.


    Adding in a standard YSK how to delete your advertising ID from your mobile device.







  • The Priory of the Orange Tree - still at the beginning, but so far the intrigue is deep, lots of politics and dragons. There is a lot of characters introduced in the very beginning, I am having some trouble keeping up with whos who in the cast, keep having to flip back and re read parts. But as I get further along I am sure I’ll absorb it

    I am also listening to Dungeon Crawler Carl audiobook, figured I should get in there while its still pop culture. I am on Chapter 14, right after the encounter with the goblin shamans.









  • you are unlikely to have to right to get an appointment for one.

    Again, this is not a universal experience.

    Its strange that you just replied saying “you are unlikely to blah blah” to a comment where I said I had to LIE in order to get it scheduled because they were not going to let me have one until I was 50. They were going to let me go on my way for the next 8 years with just a normal breast exam that found nothing. Then they found cancer which was only at stage 1 because I pushed to have my cancer screening done at 42 and not 50.

    So nice for you that you don’t have to fight for your healthcare, but some do and its a PITA.



  • The first day is the hardest part. I have full faith in you and for your next 24 hours, I’ll pledge with you, IWNDWYT (I will not drink with you today). Don’t worry about next week or even two days from now. Lets do another 24 hours not drinking together.

    Also, not to swamp you with books but the book Allen Carr’s Quit Drinking Without Willpower changed my entire mindset around alcohol and that made it much easier to get thru the cravings that happen in the first couple weeks.