Elvith Ma'for

They will be drowned in hundreds of „Thanks for your email, but we don’t do support via mail. Please open a ticket at $URL“ and „Thanks for your mail, we will get back to you shortly. Your ticket ID is #123456“. Also everything you add as an auto response will be distributed to all other victims in that group, so I chose to not be a dick.

Google Groups allows spammers to subscribe you to their groups in a workspace account, but doesn’t allow you to unsubscribe since you’re not part of that workspace account… Worse - all autoresponders for the spam will also be forwarded to all members of said group.

Since I do not participate in Google Groups, the nuclear option is to file all mails from Google Groups as spam with a Sieve script.

Note the require part may be too large as may sieve script also contains more rules than this one.

require ["body", "date", "editheader", "envelope", "fileinto", "imap4flags", "mailbox", "regex", "reject", "variables"];

if anyof(
    header :contains "List-Subscribe" "groups.google.com",
    header :matches "X-Google-Group-Id" "*"
   ) {
	if header :matches "Subject" "*" {
		set "subject" "${1}";
	} else {
		set "subject" "";
	}
	deleteheader "Subject";
	addheader :last "Subject" "[Google-Groups-Spam] ${subject}";

	fileinto "Junk";
}

My current setup for this:

I own a domain - say homelab.com - and use it exclusively in my internal network.

The public DNS records do only resolve to 127.0.0.1 (as my domain holster doesn’t want me to have no A record).

In my home network I have a pihole running that resolves this domain and it’s subdomains locally (say pihole.homelab.com, proxmox.homelab.com and so on).

For HTTPs: As this server is not publicly reachable, I use the DNS API of my domain host to get a let’s encrypt certificate with the DNS-01 challenge. That way, the internal systems do not need to be exposed to the internet.

Edit: Caddy can do DNS-01, but you usually have to compile it yourself to include the plugin for your provider. To circumvent that, I’m just using plain old certbot and told Caddy to use the certs that are already on the machine

Download doesn’t necessarily mean that they dumped everything on their local PC - they could just upload everything from all those servers to an S3 bucket or whatever.

That way the bottleneck would be either the ingress of the hyperscalers or the egress of the attacked company (which probably uses the hyperscalers anyway). I probably could also do that this way with my humble home Internet connection on a semi reliable WiFi…

What about this? This basically forbids you to fork the software if you want to - e.g. because they’re maybe going closed source in a few years?

You may not use the Software, in whole or in part, to create, distribute, or operate any product, system, or service whose primary function directly overlaps with or replicates the core business purpose of the Product, unless explicitly authorized in writing by fabricators.

shakes fist into air

SCNR

Yes and no. They started to limit GPOs. Some are only valid on Enterprise Licenses or Windows Server and will be ignored by your usual Windows Pro License at home. With Windows Home, you’re SOL regarding GPOs.

Also they started to migrate some of these settings to their Intune Device Management and will ignore those if not set via Intune.

Read: Companies can still disenshittify Windows to some degree, but they make it harder and harder for normal people to do so.

Federal Bureau of Ingestion?

You wouldn’t even really question your new device on the network. Since the monitor must forward the packets from and to your PC it’s MAC address would show up in the network, but that’s expected. And good luck separating the traffic of your monitor from that of your PC if it originates from the very same MAC address as it’s basically the new network card of your PC connected via USB C. And since it could act like a bridge, it could strip out the responses to its own requests and not forward those to your PC so you don’t even see them there. On the other side it’s all TLS encrypted so nothing to see either. Heck, it could even only send its own requests when your PC is actively using the connection so that it’s less noticeable.

You might do some DPI and check what IPs you connect to but good luck finding if it really is your monitor and not some random app on your PC. If it’s using DoH, you can’t even inspect its DNS traffic to get a clue what’s going on (SNI in the handshake might still offer some clue).

Also all of the above enables tracking and spying on you covertly. Ads are quite obvious, so there’s nothing to hide there.

HDMI and USB C are used in monitors. Both can transmit more than just the image data, e.g. tunneling an Ethernet connection. Not sure if Display Port also supports that

Most people will be on Win Home which usually locks you out of gpedit. Or ignores your settings there, some even from the registry. In the recent times there are even some GPOs locked for Pro and only available on an enterprise version or Windows server…

Correct. It’s Bayrische Motoren Werke which translates to Bavarian Motor Factories or maybe Bavarian Motor Workshops.

The German Werk has several meanings:

1. The process of work/the work itself needed to finish a specific task.
2. A specific action. E.g. used to imply someone did $thing
3. A specific thing that was produced by someone (e.g. a piece of art) or even someone’s lifeworks as a whole.
4. A factory or industrial complex BUT ALSO depending on context the workers on said factory/complex.

That still only counts as one!

No, it’s obvious that they define extremism here to mean „the left wants to support gender identity, immigrants,… and that’s bad“ but one can also easily read it as „the right fights against these things and that’s bad is bad“.

I don’t think that’s what they wanted. Unless they want a reason to also fight their own if needed to keep them in line. But there are usually even easier reasons…

Fun fact: One can read extremism on migration, race, and gender both ways. Just saying.

Are we talking about biological age or mental age which means that most adults are still just honey teens with just a tad better impulse control?

Too bad, that the normal price for that is now a 4-digit sum and will the cost you still $500+…

One important tip from that community to be more successful:

Do not use the “original” link, but link a YouTube short. Why?

1. It’s not the known link (“XcQ”)
2. Shorts do autoplay
3. Shorts are ad free
4. Shorts are optimized for mobile and usually start playing quickly

Where as the original link will probably just dump you to 1-3 pre roll ads and the rickroll is only seeing the title and closing the tab/app…

!rickrolltactics@lemmy.world will be having a field day, when that happens.