• 0 Posts
  • 19 Comments
Joined 1 year ago
cake
Cake day: November 10th, 2023

help-circle
  • groet@feddit.detoComic Strips@lemmy.worldI'm in!
    link
    fedilink
    arrow-up
    11
    ·
    6 months ago

    You DONT want to turn it off. Digital forensics work WAAAAAAY better if you have a memory dump of the system. And all the memory is lost if you turn it off. Even if the virus ran 10h ago and the program has long stoped running, there will most likely still be traces in the RAM. Like a hard drive, simply deleting something in RAM doesn’t mean it is gone. As long as that specific area was not written over later it will still hold the same contenta. You can sometimes find memory that belonged to a virus days or even weeks after the infection if the system was never shut down. There is so much information in ram that is lost when the power is turned off.

    You want to 1: quarantine from network (don’t pull the cable at the system, but firewall it at the switch if possible) 2: take a full copy of the RAM 2.5: read out bitlocker keys if the drive is encrypted. 3: turn off and take a bitwise copy of the hard drive or just send the drive + memory dump to the forensics team. 4: get coffee






  • The thing that confused me when first learning about docker was, that everybody compares it to a virtual machine. It’s not. Containers dont virtualize anything. They take a (single) process from the host OS and separate that into its own environment. All system calls, memory access, file writes etc are still handled by the same os (same kernel). However the process is separated both on the file system and process level. It can’t see other processes outside of the container and it also doesn’t see the real filesystem. It sees a filesystem provided by the container. This also means it sees different file and user permissions. When you run a alpine Linux docker container on an Ubuntu system, the container only containes the (few) files for alpine but no Linux kernel no desktop environment. A process inside that container only sees the alpine files and not the Ubuntu files. It also means all containers see a filesystem independent of each other and can use libraries and dependencies of different versions (they are only files after all).

    For administration it makes running complex services easy. You define how to setup that service (what base Linux distro to use, what packages to install, what commands to run, and how to start the process). You can then be save to assume the setup of that service did not interfere with the setup of any other service. “Service 1 needs a certain system wide config changed? Service 2 needs that config in the default state? And both need a different version of the same library?” In containers you can have all at the same time because they each see a different version of the same config and library.

    And all this is provided by the kernel itself. All docker does is provide an “easy” way to create and manage containers but could could do all of that using chroot, runc and a few other.

    As a note, containers usually don’t come with systemd as they don’t need an init system. You would run the service directly inside the container and then use systemd outside the container to make sure the container is started/restarted, or just docker as it can already do that.

    I found a great article demystifying containers recently



  • They sometimes buy keys using stolen credit cards. When the fraud is found out, the banks will request the money from the developer. They in turn often don’t have a way to lock the fraudulent key, so it remains valid.

    The costs for the initial bank transfer, plus the time invested in returning the money to the credit card holder are payed by the developer.

    The key reseller has a 100% profit margin, the customer has a valid and cheap game key, and the developer actually lost time and money.



  • groet@feddit.detoLemmy Shitpost@lemmy.worldAI or DEI?
    link
    fedilink
    arrow-up
    26
    arrow-down
    2
    ·
    9 months ago

    Repeat after me:

    “Current AI is not a knowledge tool. It MUST NOT be used to get information about any topic!”

    If your child is learning Scottish history from AI, you failed as a teacher/parent. This isn’t even about bias, just about what an AI model is. It’s not even supposed to be correct, that’s not what it is for. It is for appearing as correct as the things it has been trained on. And as long as there are two opinions in the training data, the AI will gladly make up a third.









  • One caveat about the Olympics is, you can’t just choose to compete there yourself as an athlete, even if you are world class. You have to be part, and chosen by, a national organisation. So even if the Olympics allow trans athletes, as long as most countries don’t, there won’t be trans athletes any time soon. I agree on the rest, I just don’t think the Olympics will be a forerunner in terms of trans representation.


  • That is a real problem. In a perfect world you would want all of your data to be available to everyone who can use it to improve your live. And only getting advertisement for things you actually want/need (not only think you want/need) is a real improvement of your live.

    Sadly “improving lives of consumers” is not the goal of any of the big data collectors and as such any data collected is or will be missused to cause harm to the owner even if it is not directly obvious.