• 0 Posts
  • 22 Comments
Joined 12 days ago
cake
Cake day: December 6th, 2024

help-circle
  • Aceticon@lemmy.dbzer0.comtoPeople Twitter@sh.itjust.worksNever ever
    link
    fedilink
    English
    arrow-up
    13
    ·
    edit-2
    21 hours ago
    • Don’t break the Law for the company or the boss.
    • Keep the company shit in company devices and your shit in your devices. That means company computer and phone for their stuff and your own for yours. If there’s ever any Lawsuit or Criminal investigation on the company they won’t take your stuff as evidence if you don’t at all use it for company work and won’t intrude in your privacy if the company stuff isn’t used for your own stuff.
    • Even if it’s totally legal, if something that your are being ordered to do against your better advice might come back to bite you (i.e. you might get blamed for the negative outcome you predict will come from it), get that order in writing.

    Even your direct lead can’t be assumed to be your friend (no matter how nice: niceness is easily and commonly faked) until you’ve gone through some proper shit together and he or she has shown themselves to be somebody that will take the hit rater than “blame their underlings” - trusts is earned, not due.




  • There are two things that the aftermath of Luigi’s action has made poignantly clear to pretty much everybody:

    • That the vast majority of people no matter their party affiliation and political leanings is feeling the pain and hates the abuses that carry on being committed by a minority of people in our system with total impunity … until Luigi.
    • That the Ju$tice System, the Police and most of the Press, unlike what they claim work for that minority of people, not for the rest of us.

    It’s amazing just how certain parts of the system that are supposed to work for everybody (such as in this case the Police, and in other cases large parts of the Press with their “poor CEO” articles) are pretty much shouting loud and clear for all to hear that “we’re not working for you, we work for the ones that abuse you”.

    Most people just discovered now with this killing of a hated CEO that what they individually felt about certain things was also felt by almost everybody, and then these bought-and-paid-for minions who for decades have been putting a lot of effort in passing themselves as “working for the community” just repeatedly and overtly signal to everybody else their true minion-of-the-rich nature.

    Mind you, as a Leftie who has been skeptical of whose those elements of the current system for decades, I’m happy they’re basically outing themselves and they should keep on doing it so that everybody sees them for what they really are and who they really serve,






  • The Guardian absolutely is capitalist (neoliberal, even). Just go check back on their campaign against Corbyn (a leftwinger who won the Labour Party leadership from the New Labpour neoliberals some years ago) which included such memorable pieces of slander like calling a Jewish Holocaust Survivor an anti-semite because of him in a conference about Palestine comparing some of the actions of the government of Israel with those of the Nazis, this done in order to slander Corbyn by association since he was in the same panel in that conference.

    Also you can merely go back a few months to see how The Guardian supported Israel well into their Genocide (though they seem to have stop doing it quite as eagerly in the last few months).

    Last but not least they very openly support in British elections the Liberal Democrats (who are neoliberals) and the New Labour faction of the Labour Party (also neoliberals) and very often have pro-privatisation articles on UK subjects and are never for bringing things back into public ownership even when privatisation has failed miserable to give better services or lower prices.

    I lived in Britain for over a decade and read The Guardian for most of it, so maybe The Guardian’s political slant is clearer for those familiar with British Politics.

    I do agree on The Intercept and Democracy Now! though.

    Can’t really speak for the others with any knowledge.


  • Maximum profit for Healthcare companies comes from people being chronically sick as soon as possible and remaining in that state (so, alive and uncured) for as long as possible.

    As it so happens, American food quality (in terms of nutrition) is horrible, the regulatory environment when it comes to approving substances for contact with humans and even human consumption is appalling (it follows the “accepted until proven dangerous” principle rather than the precautionary principle followed in Europe) and pretty much anything goes when it comes to car pollution, so people end up with cardiovascular diseases and/or type II diabetes and/or all manner of cancers of the digestive and respiratory tracts quite early, so all the Healthcare sector needs to do is keep them alive as long as possible to extract the maximum amount of money from them.


  • Well, I haven’t really made any large wire transfers to accounts outside the EU from that bank in over a decade so can’t really confirm or deny.

    I do know that in past experience with banks in general, the people checking the validity of suspicious transations (and large transfers to accounts outside the EU tend to fall into that classification given the prevalence of online scams from countries were the Law is a bit of a joke) will actually call you, or at least they did in the UK some years ago (pre-Brexit) which was the last time I had experience with something like that.

    (At one point I also worked in a company that made Fraud Detection software).

    Maybe they switched to SMS to save money, I don’t know.


  • Ah, I see.

    Your point is that the use of a secondary channel for a One Time Pass is still an insecure method versus the use of a time-based one time password (for example as generated in a mobile phone app or, even more secure, a dedicated device). Well, I did point out all the way back in my first post that SMS over GSM is insecure and SMS over GSM seems to be the secondary channel that all banks out there chose for their 2FA implementation.

    So yeah, I agree with that.

    Still, as I pointed out, challenge-response with smartchip signature is even safer (way harder to derive the key and the process can actually require the user to input elements that get added to the input challenge, such as the amount being paid on a transfer, so that the smartchip signs the whole thing and it all gets validated on the other side, which you can’t do with TOTP). Also as I said, from my experience with my bank in The Netherlands, a bank using that system doesn’t require 2FA, so clearly there is a bit more to the Revised Payment Systems Directive than a blanked requirement for dynamic linking.


  • It think you’re confusing security (in terms of how easy it is to impersonate you to access your bank account) with privacy and the level of requirements on the user that go with it - the impact on banking security of the bank having your phone number is basically zero since generally lots individuals and companies who are far less security conscious than banks have that number.

    That said, I think you make a good point (people shouldn’t need a mobile phone to be able to use online banking and even if they do have one, they shouldn’t need to provide it to the bank) and I agree with that point, though it’s parallel to the point I’m making rather than going against it.

    I certainly don’t see how that collides with the last paragraph of my original post which is about how the original thread poster has problems working with banks which “require a separate device that looks like a calculator to use online banking” which is an element of the most secure method of all (which I described in my original post) and is not at all 2FA but something altogether different and hence does not require providing a person’s phone to the bank. I mean, some banks might put 2FA on top of that challenge-response card authentication methods, but they’re not required to do so in Europe (I know, because one of the banks in Europe with which I have an account uses that method and has no 2FA, whilst a different one has 2FA instead of that method) - as far as I know (not sure, though) banks in Europe are only forced to use 2FA if all they had before that for “security” was something even worse such as username + password authentication, because without those regulations plenty of banks would still be using said even worse method (certainly that was the case with my second bank, who back in the late 2010s still used ridiculously insecure online authentication and only started using 2FA because they were forced to)



  • Those little boxes are just a bit of hardware to let the smartchip on the smartcard do what’s called challenge-response authentication (in simple terms: get big long number, encode it with the key inside the smartchip, send encoded number out).

    (Note that there are variants of the process were things like the amount of a transfer is added by the user to the input “big long number”).

    That mechanism is the safest authentication method of all because the authentication key inside the smartchip in the bank card never leaves it and even the user PIN never gets provided to anything but that smartchip.

    That means it can’t be eavesdropped over the network, nor can it be captured in the user’s PC (for example by a keylogger), so even people who execute files received on their e-mails or install any random software from the Internet on their PCs are safe from having their bank account authentication data captured by an attacker.

    The far more common two-way-authentication edit: two-channel-authentication, aka two-factor-autentication (log in with a password, then get a number via SMS and enter it on the website to finalize authentication), whilst more secure that just username+password isn’t anywhere as safe as the method described above since GSM has security weaknesses and there are ways to redirected SMS messages to other devices.

    (Source: amongst other things I worked in Smart Card Issuance software some years ago).

    It’s funny that the original poster of this thread actually refuses to work with some banks because of them having the best and most secure bank access authentication in the industry, as it’s slightly inconvenient. Just another example of how, as it’s said in that domain, “users are the weakest link in IT Security”.


  • As somebody who was an EU immigrant in the UK for over a decade and also lived in other countries of Europe, lets just say that New Labour are plain Rightwing (so, not even Center-Left, although the original Labour definitelly were Leftwing) and the Liberal Democrats are pure rightwing (whislt the Tories have been Far Right since at least the Leave Referendum).

    The ideology of “Thatcher’s Greatest Achievement” - a “relaxed about wealth” ideology which loves privatisation and derregulation - which took over Labour is not Left of center and the LibDems have always been even more Neolibs than that.

    The Overtoon Window in England (not as much the other UK nations) is way to the Right of the rest of Europe, so its understandable that many there think that when they neither grew up back in the days when Labour was actually a party of the Working Class and never saw politics elsewhere in Europe.


  • Aceticon@lemmy.dbzer0.comtoLefty Memes@lemmy.dbzer0.comPolitics venn
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    1
    ·
    9 days ago

    At a Systemic level hey’re big fans of the only true Power being Money whilst the Vote is nothing more than a bit of loud Theatre & Clown Show that doesn’t actually control the managing of a country - or in other words, of Oligarchy rather than Democracy.

    At a personal level they’re big fans of personal upside maximization with no legal, ethical or moral limits, aka Greed Is Good, or in other words, for sociopathy to be totally legal, socially aceptable and even celebrated.


  • It’s “mieren neuken”.

    A dutch person responding to my post already mentioned it.

    Also, as somebody who has moved there first and then learned Dutch whilst living there, I do recommend just learning it over there since it’s a much faster way to learn a language when you’re there surrounded by native speakers, with lots of things written in Dutch around you and with Dutch TV and Radio whilst actually using it, than it is as just learning from the outside with little in the way of useful practice with the actual experts of the actual language.

    Also you can easily get away with using English in The Netherlands whilst you’re learning Dutch - in fact if you have a recognizable accent from an English-speaking country it’s actually hard to get the Dutch to speak Dutch to you in the early and mid stage of learning their language since they tend to switch to English as most Dutch speak that very well.


  • That word isn’t originally from Portuguese from Portugal (though it is recognized thanks to the prevalence of Brazilian soap operas in Portugal) so it carries no broader “social” meaning and isn’t even commonly used there, so people wouldn’t care if you used it in Portugal as it just sounds odd there.

    If I understand the broader meaning subtleties of how it’s used in Brazilian Portuguese correctly, using “garota” for a woman is a bit like using “chick” for a woman in British English, which whilst not an outright insult carries a bit of a demeaning vibe (not as bad as the used of “bitch” - as in “my bitch” - in American English, but the same kind of treating women as inferior).

    This is probably because the original meaning of the word when not used for an adult woman (again, only in Brazilian Portuguese since it didn’t exist in Portuguese from Portugal) is “young girl”.