i like to sample music and make worse music out of that.

  • 1 Post
  • 22 Comments
Joined 1 year ago
cake
Cake day: June 12th, 2023

help-circle




  • My main PC is a windows PC (mainly for video games and music production). I also have a Macbook for my work as a (currently) Lead Systems Automation Engineer for a large global company (14 years in the industry, 3.5 of those was me “taking a break” and going into Infosec specifically to first do endpoint/end-user security, then moving into container and cloud security) a personal Macbook, as well as a few Linux laptops I use to write code and do other tech-related things because I prefer MacOS and Linux for that kind of work. I’m well-exposed to most operating systems and have a working knowledge of how security works, both in a professional setting as well as a personal one.

    I mention BonziBuddy and search bars because they’re funny and to illustrate a simple point. The reality is that browser hijackers still very much exist (though they’re not as prevalent as they used to be because browsers themselves have become more resilient over the years - nowadays, they’re usually found in add-ons/extensions because its easier to fly under the radar that way).

    For all the shady shit I’ve done on all of the above platforms, I’ve never had an issue. Specifically in Windows, Defender - which is still the de facto/standard security tool that comes bundled with Windows under the Windows Security tool suite - has not once flagged malware for me. I’ve found it with Avast and BitDefender, but Windows Defender simply isn’t great for the things I do.

    I also run ClamAV on the Macbook for ad-hoc scanning of things I download prior to running them. Why? Because I’m not a negligent user and I do at least the bare minimum in regards to good security practices.

    In every one of the above cases/operating systems/platforms, there is always some kind of security tooling or framework involved (whether that’s ClamAV on Mac, BitDefender or ClamAV or MalwareBytes or whatever on Windows, SELinux or AppArmor or ClamAV on Linux) that can and should be leveraged if you really want to be “safe.”

    In the case of AMOS and Macs, users are purposely bypassing Gatekeeper and proceeding without knowing wtf they’re installing. As soon as Gatekeeper pops up like that, you should be on alert unless you know the software you’re installing isn’t signed, trust the source, and are willing to codesign it yourself.

    You, on the other hand, clearly seem to have some kind of gripe against Macs (based off of your comments in this now far-too-long comment thread) and that kind of weird quasi-religious brand loyalty (or hatred) is a thing I’ll never understand.

    The fact that you’re out on a public forum, spewing bad info/misinformation really says everything. Not that you care, but I’d have respected you more if you just admitted you were wrong and misread the bit about the Google ads. Instead, you decided to be confidently dumb and jump from hill to hill, prepared to die on each one of them.






  • I’m not sure where I said anything about the reason any of those platforms get viruses because you’re right, Windows was often more targeted because its footprint was massive by comparison (whole lotta end users out there, but also tons of domain controllers and enterprise systems running it) - I’m not arguing that.

    AMOS itself is distributed in all kinds of ways including phishing, being bundled into crap no-name software, shady ads, tainted torrents, whatever. You still have to be tricked into downloading whatever it is that infects your machine with it.

    As to this partially being Google’s fault, from the article itself:

    The ads are legitimate and paid for but disguise themselves as the website or software the user is searching for.

    In the given example, it sounds like the ad was for Trading View, a pretty popular stock market charting platform, but the ad itself took users to trabingviews.com and it looked like a clone or Trading View’s site or some kind of landing page that purported to be a download for a desktop client. In the Malwarebytes article I share below, the fake URL purporting to be Trading View’s website is actually tradingsview.com

    I’m not exactly sure where you’re getting the idea that this was a fake ad caused by malware pre-existing. These are “legit” Google ads that are bought and paid for and not quality checked by Google before they display them.

    Here’s the article directly from Malwarebytes, the folks who kindly did the write up the author of the above article is talking about:

    https://www.malwarebytes.com/blog/threat-intelligence/2023/09/atomic-macos-stealer-delivered-via-malvertising


  • Probably because windows and Linux users aren’t searching for free Mac apps. While I agree that it would probably be difficult to implement an attack like this for Linux (partly because it’s Linux and partly because it’s userbase is generally more technically apt), Windows has been susceptible to viruses since the dawn of time because users just install random shit on autopilot and click through installers without checking what extra bloat is included (which is often malware disguised as an extra third party program). I don’t think I agree that this specifically is Apples fault. No one blames Windows or Linux distros for user error and poor security practices.

    Google’s fault for not vetting the ads they let through? For sure. The users fault for not paying attention while installing the app and just clicking through the request to bypass Gatekeeper and then entering their system password when a pop up randomly asks for it for no discernible reason? Absolutely.

    What should Apple do to fix this? Lock the machine down to the point where users aren’t allowed to have admin privileges on their own machine?




  • My background is not on STEM and I was always passed the notion that without roots in hard math I can’t go far in programming.

    I swear this is some BS repeated by people who have no idea what they’re talking about. I got told pretty much the same when I was younger - don’t believe it. It may have been true to some degree at some point in the distant past, but it’s outdated advice at best.

    Your main general skills when it comes to writing code are the ability to think logically and to think about abstract concepts. Creativity and imagination can definitely help. The ability to keep organized in your thoughts can also go a long way. Just about everything else comes in the form of knowing the language you’re working in, exposure to common coding and software design principles, and knowing your coding environment.

    Math can figure into a lot of different types of programming careers… Shit like writing video game engines and other complicated things that model physics and stuff come to mind. But it’s not so much that math is intrinsic to programming, but rather that those types of software just require a lot of advanced math.

    For example, I’m an automation engineer. It’s just a sysadmin who writes a decent amount of code. Most of my programming work revolves around sending requests over our company’s local network to servers or internal websites to do shit like remotely power up or shutdown machines or trigger a task or open up work orders. There is very little actual math, if any, in the entirety of my work.

    At it’s core, programming is just the storing, moving around, manipulating, and keeping track of bits of information. Especially in a language like Python (which is my primary language).

    EDIT: I should probably add my background isn’t STEM either. I’m a two time college dropout who got a break 14 years ago and left the restaurant industry to go into the tech sector instead.