Talk about anything: Page 26 - Godot Community Forums

Talk about anything

cybereality

@OpinionatedGamer said: I know someone who knows quite a bit about stuff like this, and he says that a password on your computer is to stop ordinary people, and hackers working remotely. He says if someone who knows what they are doing and have physical access to your computer they will be able to get in.

Yes, the password on your local machine is to keep honest people honest (like your friends or family). They can be easily bypassed even by an amateur (and I've had to get into my own computer a few times, it doesn't take long). On Windows it is trivial, there are scripts that take like 5 minutes. On Linux it is slightly harder, but still no problem, I haven't tried macOS. However, you can increase the security by using hardware keys, like FIDO2 (and open source YubiKey), which all but eliminates the chance of someone logging in remotely. They would need root access, and if they had that, you're already screwed.

Bimbam

I use bitlocker/lvm encryption pretty much everywhere.

Re. 'Hacking' it's always been true that social engineering is the simplest and most effective way into someone's computer. The guy your thinking of is probably the notorious kevin mitnick. He was top ten on CIA wanted list back in the day with the gov so scared of him they were convinced he could whistle into a phone and cause nukes to go off. He couldn't, though had a solid background in phreaking as I recall (which was largely only possible due to how terrible the US phone network was) but mostly just social engineering/dumpster diving.

I can talk from experience that I have walked straight into a government office, said hi to reception and tail gated my way to somebodies desk without question before.

I was technically allowed to be there for work but nobody ever asked, just making a point that wearing a suit and walking with purpose opens way too many doors.

The main thing to remember is hackers don't care about you. They're not targetting you specifically unless your a state actor/host a notable website or are a baller of some kind. So by and large if you do get 'hacked' it's because you tripped up on a wider attack vector like email scams, nefarious popups and the like. The outcome will likely be a cryptolocker infection or bitcoin mining hijacker (the scene wants money these days more than 'exploration'), hence my advice that backups come first. Even more likely is some service you use gets hacked (e.g. LinkedIn) and you end up on a passwordlist. Registering for alerts from haveibeenpwned is also a good idea and costs nothing. Something pops up, time to change your password.

Anyway I've been outa the game a few years now so info could be out of date.

jbskaggs

@Bimbam said: I use bitlocker/lvm encryption pretty much everywhere.

Re. 'Hacking' it's always been true that social engineering is the simplest and most effective way into someone's computer. The guy your thinking of is probably the notorious kevin mitnick. He was top ten on CIA wanted list back in the day with the gov so scared of him they were convinced he could whistle into a phone and cause nukes to go off. He couldn't, though had a solid background in phreaking as I recall (which was largely only possible due to how terrible the US phone network was) but mostly just social engineering/dumpster diving.

I can talk from experience that I have walked straight into a government office, said hi to reception and tail gated my way to somebodies desk without question before.

I was allowed to be there for work, just making a point that wearing a suit and walking with purpose opens way too many doors.

The main thing to remember is hackers don't care about you. They're not targetting you specifically unless your a state actor/host a notable website or are a baller of some kind. So by and large if you do get 'hacked' it's because you tripped up on a wider attack vector like email scams, nefarious popups and the like. The outcome will likely be a cryptolocker infection or bitcoin mining hijacker (the scene wants money these days more than 'exploration'), hence my advice that backups come first. Even more likely is some service you use gets hacked (e.g. LinkedIn) and you end up on a passwordlist. Registering for alerts from haveibeenpwned is also a good idea and costs nothing. Something pops up, time to change your password.

Anyway I've been outa the game a few years now so info could be out of date.

I can confirm that looking the part opens doors. But then the most benign of govt offices will have triple security checks even the police dont get thru- such a the local unemployment office. Three locked, key coded doors with guards. Where a state worker must open the doors from the inside using a computer terminal.

18 years ago I suffered a ransomware attack on my website. It was easily fixed. Getting hacked is usually random targeting- or you went somewhere you shouldnt have. Porn sites, pirate sites, torrents, cracked game sites, are the top areas to stay away from. Not to mention the blackmail potential or govt honeypot traps some of these sites are. And of course fake govt honeytraps to make you think the FBI is coming to bust down your door. Clinking links in email, messages, and forums seem to be the biggest weakness especially among older folks.

cybereality

I get emails like this on a daily basis. This is how people get hacked, by clicking the link.

And, yes, this is a real screenshot from this morning.

jbskaggs

@cybereality said: I get emails like this on a daily basis. This is how people get hacked, by clicking the link.

And, yes, this is a real screenshot from this morning.

Looks legit to me. ;)

DaveTheCoder

TO: xxxxxx I am Lawrence Ansah, attorney to late Mr. A. T. xxxxxx, possibly your relation because of the same last name with you, who passed away in a car accident in Togo alongside his wife and only daughter. He left behind a considerable deposit with a bank here in my country, before his death. I have been asked to produce a next of kin before the assets would be declared as ABANDONED and returned to government. I have in my possession legal documents that could give you the legal rights for the claim. Send me your sincere thoughts about this mail so that we can get started with the process. I await your cooperation. Lawrence

That's from 2017, but if anyone wants to follow through on it, I can give you the sender's email address. :wink:

Bimbam

Big one in Oz is the Australia Post email scams. Hackers were smart enough to clone their email template and make a very similar url to a nr clone of their website. Old company I worked for would have a couple employees a year fall for that despite our regular warnings to all staff.

cybereality

The best scam I had was when I was selling this 240Hz 1080p gaming monitor on Craigslist. This woman, Natalia, emailed me and said she was interested and I gave her my phone number. Later that day, some Russian dude with a thick accent called me, said he was Natalia's boyfriend and he wanted to buy the monitor. I spoke with him for a few minutes, and it sounded reasonable, and then he started talking about Western Union and I knew it was a scam. But I didn't want to hang up, cause I was afraid he might be some crazy Russian hacker, so I played along for a while, might have spoke to him for 10 minutes and then told him I found someone local that was going to buy. I was just surprised he actually called me and tried the social engineering, it would have maybe worked on someone else.

OpinionatedGamer

Hillarious comedy on this same topic, from a guy who purposefully annoys people who send these emails.

cybereality

Comedy gold!!! Funniest video, ever. This guy's really good too.

cybereality

Oh wow! I just found out about JPEG XL, a new royalty free image format that is going to replace JPG, PNG, and GIF. It supports lossy and lossless compression, has high quality animation, small file sizes and much higher quality, and can support up to 4,100 channels. Meaning you could have a full PBR texture with diffuse, roughness, metallic, ambient occlusion, whatever, in a single image.

It just came out (well the standard was finalized but I think it will officially release in a month or two) so the software support is not great. It is mostly beta and it was difficult to get working. But I managed to convert an image of Ella from a 12.6MB uncompressed PNG to JXL and it's only 807KB and it looks almost identical to the PNG. And it's a 4K image.

Obviously I had to convert it back to JPG to upload it on the internet, the converted JPG is 1.9MB and some amount of the quality was lost. But it looks pretty close to the 807KB JXL. This is amazing. I really hope it takes off, we've been stuck with antiquated image formats for too long.

Erich_L

@Bimbam said: Anyway I've been outa the game a few years now

Spoken like a true forest ranger’s assistant

OpinionatedGamer

Wow, 4k at 807 kb! That sounds amazing.

jbskaggs

@OpinionatedGamer said: Wow, 4k at 807 kb! That sounds amazing.

What does?

jbskaggs

I wonder if jpg xl it will get more industry traction than webp?

cybereality

Possibly. It's royalty free and made by the same people that made JPEG. It is much better in every way, but it's super new so software support is sketch. I couldn't get any of the command-line tools to work, and most of the editors (like GIMP, etc.) don't work with the current version. You have to build from source or get the nightlies. But maybe in a few months things will change.

jbskaggs

@cybereality said: Possibly. It's royalty free and made by the same people that made JPEG. It is much better in every way, but it's super new so software support is sketch. I couldn't get any of the command-line tools to work, and most of the editors (like GIMP, etc.) don't work with the current version. You have to build from source or get the nightlies. But maybe in a few months things will change.

So why does the industry not support webp? Is it because of who created it? I always feel like a conspiracist when discussing megacorporations and their motivations becuase they seem so alien to me.

cybereality

Not sure, Google could be part of it, even though the standard is royalty free. It's supported by all browsers basically and software support is decent, though a little harder than JPG/PNG as you sometimes need to download plug-ins. I think it is mostly inertia.

OpinionatedGamer

I wonder if the Minecraft Movie will ever be released. It probably wont be good anyway, live action sounds like a terrible idea for minecraft imho. Steve Carell could have been a good choice tho.

fire7side

@OpinionatedGamer said: I wonder if the Minecraft Movie will ever be released. It probably wont be good anyway, live action sounds like a terrible idea for minecraft imho. Steve Carell could have been a good choice tho.

I didn't know there was one. It sounds like just about everyone drops out in a little while "due to scheduling conflicts". Not a good sign, especially when the actors just have to do voice overs. How hard would that be to schedule?

« Previous Page Next Page »