en.osm.town is one of the many independent Mastodon servers you can use to participate in the fediverse.
An independent, community of OpenStreetMap people on the Fediverse/Mastodon. Funding graciously provided by the OpenStreetMap Foundation.

Server stats:

256
active users

#hijacking

0 posts0 participants0 posts today

LOL the whole police response over a "hijacking" of a Waymo and now there's this article talking about "how the autonomous vehicle ride-share company protects its human-free cars" ("THINK ABOUT THE POOR ROBOT PROPERTY|!")

Clincher:
"The man was released at the scene, according to the LAPD."

latimes.com/california/story/2

Los Angeles Times · L.A. man tries to drive off in autonomous Waymo car. Company says it's preparedBy Noah Goldberg
Replied in thread

@JapanProf : I have a request to you: please refrain from using URL-shorteners on Mastodon.

Note: this is not intended as criticism, but purely educational.

It is none of their (the owners of URL-shorteners) business who and when clicks on a specific link.

Most internet users can't even guess how personal-data-hungry entities on the internet are, collecting as much as possible information about them, selling (or inadvertently leaking) that infornation for profit.

As a matter of fact, Mastodon excellently shortens long URLs in such a way that the most relevant information of each URL is visible in toots. So there is no reason whatsoever to use commercial third party shorteners (other than to make a third party wiser and richer).

Edited to add at 16:26 UTC: In fact, here's the URL that you were indirectly referring to:
nytimes.com/2024/08/01/world/m

When using touch screens, pressing a bit longer on them reveals the full URL. When using a mouse, right-clicking provides such information.

ADDITIONAL REASONS: apart from the privacy issues mentioned, there are some relevant security concerns when using third pary URL shorteners (such as tinyurl.com, bit.ly, t.co etc.), including:

1) By looking at third-party shortened URL, the internet user won't know in advance to which website (identified by their domain name) their browser will be redirected (by the shortener service). If they trust *you*, they may forget to inspect the domain name (in the address bar of their browser) where their browser ends up. If your Mastodon account gets hacked, and an impostor toots third-party-shortened links to malicious websites on your behalf, you may feel sorry that you ever used them.

2) Even if an owner of a URL-shortener won't forward the visiting user's browser to a malicious website TODAY, they may change their mind TOMORROW. Or they may sell their business to less ethical people.

3) Sometimes URL-shortening services just stop functioning, or their disk may crash without having a decent backup. Links will go dead.

Note: sometimes proponents or owners bomb us with texts such as "if you add <whatever> to the link, it'll tell you where you're heading". It is absurd to ask people to jump through all kinds of hoops - just because a third party wants to steal your data.

The New York Times · Fears of Wider Mideast Conflict Deepen, With U.S. Seen as ‘Not in Control’By Mark Landler

We bring good news: AS54801 has finally abandoned 147.178.0.0/24!

However, the bad news is that AS141883 (bgpnet.com) now appears to have picked up another block, 148.178.16.0/22

👉 bgp.he.net/ip/148.178.16.0

And the location? Hong Kong, of course 🙄

Although this is formally a different actor, Spamhaus researchers suspect the same people are behind this new activity...

See previous post here ⬇️

infosec.exchange/@spamhaus/112

148.178.0.0/16 is an abandoned Arthur Andersen's IP space that Spamhaus researchers listed on the Spamhaus Blocklist (SBL) in 2009, after noting hijacking activities.

:point_right: SBL Listing: check.spamhaus.org/listed/?sea

Fast forward 15 years and it still seems to happening!

AS54801 is assigned to "Zillion Network Inc." with connectivity in Hong Kong. Their website (zillionnetwork.com/) does not say anything about who they are, where they are, what their prices are... it doesn't even expose HTTPS.

@teamarin

Image source: bgp.he.net/net/148.178.0.0/24#:

❗ Spamhaus researchers have observed an almost 30yr old expired domain, "Fiberlinkcc[.]com" which has been revived to aid the hijack of multiple IP blocks belonging to both inactive and active businesses.

Investigations suggest the domain was used to provide connectivity to various hijacked IP blocks from a Virginia data center courtesy of Cogent Communications (or one of their resellers). All evidence traces back to a Russian-based IP leasing company: IP Ocean, with AS207967 as the origin of the identified hijacked range.

📢 A full report will follow in the coming weeks..

Protect your business from abusive activities originating from hijacked assets, with Spamhaus DROP list - learn more and access this dataset for free here:
👉 spamhaus.org/blocklists/do-not.

The Spamhaus ProjectDon't Route Or Peer Lists (DROP) | Use with firewalls & BGPA free advisory “drop all traffic” list containing the most dangerous IP ranges - available to anyone who wants to add this layer of protection.

After #Redhat and #Hashicorp changes in their #opensource policies, I'm now looking with suspect and reviewing all single-company #FOSS projects without a clear story of multiple contributions, without a foundation based governance and/or subject to copyright #hijacking for third parties contributions. (as the infamous MySQL one).
If you are strongly depending on such a project, it is time to sleep worried. We are living in very strange times.