I could not find any articles with further information on the topic.
There seems to be a fork with tracking removed, but it only has about 2000 downloads, so proceed with caution.
cross-posted from: https://feddit.org/post/27056608
Source: https://addons.mozilla.org/en-US/firefox/blocked-addon/%7Bc4b582ec-4343-438c-bda2-2f691c16c262%7D/
I could not find any articles with further information on the topic.
There seems to be a fork with tracking removed, but it only has about 2000 downloads, so proceed with caution.
PSA: The Syncthing fork repo has very recently been taken by a new maintainer without notice from the old one. However, the new maintainer seems to be in possession of the old PGP keys, which has made a lot of community members cautious/suspicious.
Related forum thread in the Syncthing forums
Or if you dislike all kinds of ads like me, you may also like the NewPipe fork Tubular, which provides SponsorBlock integration.
~~pysch~~
psych
Probably it was only added so they could pull this "sike, air in the middle" stunt
Joke's on them, I ate them all and now my tummy hurts
TLDR: I can't say for 100% sure, but there are multiple reasons to believe that this is malware.
Long version: I'm seeing multiple suspicious things here.
The IPs being connected to are part of some hoster and have some abuse reports: https://www.abuseipdb.com/check-block/217.20.58.98/29
The domain being resolved is qcloud[.]com, which belongs to Tencent Cloud and definitely not Microsoft.
Other domains in memory like counter-strike[.]com[.]ua are very new and definitely sound fishy.
A standalone version of 7zip is being run and extracts the created rar file with the password "infected". Real alarm bells here.
A lot of the registry actions look like anti-debugging, which does not sound like something an Illustrator Plugin would do.
I much prefer tmux over screen.
Not only do I not mind you yoinking the text, I want to thank you for your contribution to the cause. If everyone who has signed could get one more person to sign, the initiative would succeed!
Today I was testing the RAM of a friend in my PC and since I had it opened up anyway, I thought I could renew my thermal paste as well. When removing the block from the CPU, I saw this:
To me, this looks like corrosion. The AiO is roughly 6 years old, so it's nearing its end of life anyway, but is that normal? Should I still use this?
Thanks for any advice.
This link should be working.
Quoting from the OP tweet:
* Unauthenticated RCE vs all GNU/Linux systems (plus others) disclosed 3 weeks ago.
* Full disclosure happening in less than 2 weeks (as agreed with devs).
* Still no CVE assigned (there should be at least 3, possibly 4, ideally 6).
* Still no working fix.
* Canonical, RedHat and others have confirmed the severity, a 9.9, check screenshot.
* Devs are still arguing about whether or not some of the issues have a security impact.I've spent the last 3 weeks of my sabbatical working full time on this research, reporting, coordination and so on with the sole purpose of helping and pretty much only got patronized because the devs just can't accept that their code is crap - responsible disclosure: no more.
The screenshot is getting crispy, time to get it out of the deep fryer
TLDR: Avoid Telegram and WhatsApp. Recommended messengers are Session, Signal, SimpleX and Threema. Honorable mention: Briar.
...touching the belly is still deadly though.
To me it just seems like the websites you opened in Ironfox were calling the trackers. The only things I'd see Ironfox using is Firebase Crashlytics and maybe Mozilla sites for add-on updates etc.