• 0 Posts
  • 10 Comments
Joined 2 years ago
cake
Cake day: July 10th, 2023

help-circle

  • Unless I’m missing something here… The attacker needs to be running some sort of executable in your network with permissions to:

    • dig the records and assemble the strings
    • write the decoded result to a file
    • make that file executable
    • execute that file

    You’ve got bigger problems than hexadecimal txt records in this scenario…

    The only difference between this and a GitHub gist appears to be that security software doesn’t scan traffic in port 53… It easily could be configured for that though surely… It’s just UDP traffic like any other.

    Someone tell me what I’m missing!









  • Fuck these guys… Seriously. I bought a phone off of them hyped at the idea of the ethics. It didn’t work on arrival. Over 3 months later and not one single reply to my helpdesk request (other than the Automated acknowledgement of receipt).

    Unbelievably bad user experience, I went from hyped at the concept of reducing my production of electronic waste to beyond disappointed at a brutally bad user experience.

    Then to make matters worse, it is difficult to source spare parts for the fairphone 4 (according to a friend of mine who owns one that he bought a while ago)… Like is that not the entire point of the phone, reduced consumption of new phones by supporting repairs. If you’re going to stop producing the spares at least release the patents then… if you really believe in the promoted ideals that you spout… Which they clearly do not.

    It turns out that it’s just another money hungry company hell bent on burning the planet down to see a line go up, as far as I’m concerned. All gaff to sell shite phones at higher prices.

    Do not buy.