41
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 06 Dec 2024
41 points (97.7% liked)
Technology
81114 readers
694 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
It’s one thing to mock it on pseudonymous platforms like Reddit and the fediverse.
It’s another to do it somewhere linked to your real name and job like LinkedIn.
People really hate insurance companies.
lol @ thinking reddit is anonymous
You think having a fake online name will stop them from finding out who you are? Did you even pay attention to the Snowden leaks?
They also have backdoors in most implementations of TLS, according to a person I know who worked government security.
Still takes more work than just giving them that information.
I work in cryptography, and I guarantee if that's true "some person you know who worked in government security" would not tell you if they did know, or they are pulling shit out of their ass. There have been so many people that have looked at or worked on SSL/TLS implementations (including some of my coworkers), any vulnerabilities would have to be pretty subtle or clever, and that would be kept highly classified. Quit making shit up or repeating bullshit you heard.
Sure, if we’re talking about code vulnerabilities only. It’s most likely a compromised root cert though.
That just would allow a malicious attacker to fake being the server, it doesn't actually compromise the TLS session. So you are talking about a much more sophisticated multi stage attack that needs to be actively executed. This wouldn't at all allow them to record traffic and decrypt later.
The certs authenticate that you are talking to the real server, the symmetric session keys that are usually derived from a diffie helman key exchange have nothing to do with certs. That's two separate (but connected) parts of the transaction to build a TLS session.
It is almost never a question of whether it's possible or not. You WILL make a mistake. It's just a question of how much effort you're worth as an individual.
right, don't make it easy for them. plus they got prolly got half a country to put on the list now.
LinkedIn is one of the least sane social media sites I've ever had the displeasure of using. Under all the marketing BS and obviously fake feel good stories lie takes that would make your insane Facebook uncle blush.
I used to work for a big data company that tracked shares to various social networks and the frequency with which people share porn to LinkedIn was remarkably high.
What?! How?! So I can learn to avoid it!
People are too hung up about anonimity on the internet. When one of my country's worst journalistic shitrags mandated a real name policy due to the rampant racism and other -isms in the comment section of their articles... nothing changed. People are happily spewing the same vile rethoric as before and proud to, instead of being shamed into silence.