privacyguides

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

Maeve, in Google-hosted malvertising leads to fake Keepass site that looks genuine

Tl;dr google is a cancer

IzzyData,
@IzzyData@lemmy.ml avatar

Ads are cancer. Google by being a company that makes most of its money from ads is cancer by extension.

Maeve,

It rapidly grew and became bad so yes.

bluGill,

They have failed one of their code jobs: validating advertisements are legitimate. I don't know why any legitimate company would advertise with google as you get associated with the scams they allow on their ad platform.

Melatonin, in Google-hosted malvertising leads to fake Keepass site that looks genuine

The program doesn’t even need to change much. Just be keepass with a backdoor. Yikes.

crypticthree, in Google-hosted malvertising leads to fake Keepass site that looks genuine

Can’t imagine why ublock is so popular

ares35, in Google-hosted malvertising leads to fake Keepass site that looks genuine
@ares35@kbin.social avatar

disable unicode representation of these types of domains in firefox by flipping this setting (in about:config) from the default 'false' to TRUE:

network.IDN_show_punycode

so you see xn--80ak6aa92e.com instead of аррӏе.com

compare to (the real deal): apple.com

RealFknNito,
@RealFknNito@lemmy.world avatar

Wouldn’t you also be able to hover the link and check the URL in the bottom left?

MangoPenguin,
@MangoPenguin@lemmy.blahaj.zone avatar

Looks like it’s already flipped to true in Librewolf, glad they seem to have some common sense compared to mozilla.

Is there any good reason for a browser to mask the real URLs like that? There seems to be a trend of hiding parts of the URL people see lately.

Rentlar,

To have other languages able to be displayed in the title… e.g. wiki.ポケモン.com/wiki/メインページ

HubertManne,
@HubertManne@kbin.social avatar

You may have gotten me to switch browsers

Bitrot,
@Bitrot@lemmy.sdf.org avatar

People who use those characters benefit from it. I imagine 點看 is more useful than xn–c1yn36f to a Chinese person. That’s also why Google displays them that way.

It would be nice if browsers warned when International Domain Names were in use, and provided the option to disable punycode when first encountered.

9point6,

This is the big thing that should be happening, even just a little icon in the bar when it’s happening to switch between the two representations.

Turun,

Yes, because the internet is not restricted to English letters.

Just imagine you had to visit アップル instead of apple.com! And most importantly, would you trust yourself to see the difference that and say プッアル consistently without seeing the real reference?

Just to be clear, I hate it when the browsers hides part of the url too. Show me the https god damn! But internationalization is a good thing, as it makes the internet accessible to more people.

PixxlMan,

Stop it! The only words that matter are those that can be written in ASCII! The rest of the world just wants to scare you with gibberish letters!

AeroLemming,

Any way to fix this on mobile? about:config isn’t a thing.

ademir,
@ademir@lemmy.eco.br avatar

In Firefox Nightly you can iirc

Onyx376,

Does anyone using Mullvad Browser know why this setting is not enabled by default? I just checked. If it is important for security it should be.

shotgun_crab,

Oh so that’s what punycode means, I always wondered what it meant

JoeKrogan, in Google-hosted malvertising leads to fake Keepass site that looks genuine
@JoeKrogan@lemmy.world avatar

Another reason to stick to your distro repositories. This should totally be disabled by default for modern browsers.

Wistful, in Google-hosted malvertising leads to fake Keepass site that looks genuine
@Wistful@discuss.tchncs.de avatar

That’s kinda crazy, as it would look like a speck on the screen. I wish I could see the actual site, and see if there is something else sus about it. When I download important things like password managers, I usually try to be extra careful, double check the URL and do the hash check.

freeman, in Is this a good network setup?

if the firewall can be updated regularly then sure.

Mikrotik makes perfectly acceptable switches at a reasonable price with a variety of features, vlan compat is pretty common. A MikroTik CSS610-8P-2S+in will give you 2 10 Gb sfp , 8 x 1Gbe with PoE+ and vlans for under 300 bucks.

walden,

I’m not OP but that 'tik is almost perfect for me, going along with the RB5009 I already have. Is there something similar that can run RouterOS I wonder?

freeman,

There definately is something. They have a ton of products. I’d have to look through my list as well. The CSS runs switchos lite, but honestly its fine. I can do CLI configs (brocade, cisco, cisco smb etc) but its whatever.

At my parents house i have been using a Mikrotik RB260GSP since about 2016 on their net. It also runs swos and im not doing anything crazy on it (in fact i never bothered with VLAN’s there though i probably should setup a guest vlan. But its been fine for years now.

TWeaK, in Is this a good network setup?

Sounds decent.

Most routers can have VLAN functionality if you flash them with custom firmware. You get allllll the settings then. I have a netgear router that now has an FTP server and a bunch of other stuff. All you have to do is make sure the model you buy has a chipset supported by the firmware. Firmwares include:

  • DD-WRT
  • Tomato
  • AdvancedTomato
  • OpenWRT
  • Chilifire
  • Gargoyle

I’m sure someone will come in and say that using a consumer grade router is naff, but in my (somewhat limited) experience working with managed switches in an industrial setting, a custom consumer router is much more feature-rich. Unless you need the IO of a managed switch (ie SFPs) I see no reason to go down that route.

If you are using SFPs, be sure to get the knock off ones that can be programmed - there should be places that sell them and program them at no extra cost. They can literally be 1/10 of the cost of the manufacturer’s own modules.

ClopClopMcFuckwad, in San Francisco mayor wants drones and CCTV to stop crime
@ClopClopMcFuckwad@lemmy.world avatar

Instead of spending millions on CCTV and drones try giving people safe shelter and sanitation.

freeindv,

safe shelter

What does that have to do with crime?

sanitation

Are people catching some kind of disease that makes them steal and commit assaults?

garrett,
@garrett@infosec.pub avatar

Why do you think people commit crime?

pineapplelover,

People happy -> no need to commit crime to make themselves happy

Lemongrab,
@Lemongrab@lemmy.one avatar

Not even to make them happy, its a survival technique.

ridethisbike,

Thought it was pretty obvious they if people are in desperate situations they will resort to taking desperate measures to survive, but I guess not

halfempty, in San Francisco mayor wants drones and CCTV to stop crime

Massive surveillance programs won't stop crime. Instead it will be used to persecute target demographic groups.

JoShmoe,

Its probably the only reason the major was put into that position. Foreign influence.

pineapplelover, in San Francisco mayor wants drones and CCTV to stop crime

Fuck off

Gorgeous_Sloth, in San Francisco mayor wants drones and CCTV to stop crime
TryingToEscapeTarkov,

and we aren’t even in a cool one. Where is my chrome?

JasSmith, in San Francisco mayor wants drones and CCTV to stop crime

It won’t help unless you actually put the criminals in jail. Since you won’t do that, drones are useless.

TufOnTwitter, in Is this a good network setup?
@TufOnTwitter@lemmy.dbzer0.com avatar

deleted_by_author

  • Loading...
  • pipariturbiini,

    you okay?

    AlexSup21,

    Bro has a stroke

    red0888,
    @red0888@ohai.social avatar

    @TufOnTwitter @sewmopjr fair enough

    ruination, in Google-hosted malvertising leads to fake Keepass site that looks genuine

    Say it louder for the people at the back: adblock is a basic cybersecurity measurs

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacyguides@lemmy.one
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #