Exploring Mobile Communication Vulnerabilities: The SS7 Network Exposure | September 24 2024, 20:42

A very intriguing video about vulnerabilities in mobile communication.

In brief, the gist is this: due to the expansion of the network of cellular operators, control over who enters “the club” has been lost, and it’s fairly easy to gain unauthorized access to the SS7 network, through which mobile connections are managed. From there, one can do anything: intercept calls and SMS, record calls without the caller’s knowledge, and even track locations — in cities, it’s incredibly accurate. Access to the network simply costs money. And, of course, one must know what to do and how—it’s just knowledge, albeit rare.

A notable example is the case with Princess Latifa from Dubai, who was captured after an attack via SS7 allowed the location of her yacht captain’s phone to be pinpointed.

A live attack is demonstrated, in which a hacker intercepted a phone call intended for someone else. This was done by deceiving the network into thinking that the victim’s phone was in roaming, which allowed the hacker to redirect the call.

In the discussion, it is emphasized that, although newer protocols introduced with 5G are more secure, the transition to them is slow due to network effects: all operators need to switch at the same time to fully benefit from the advantages.

Conclusion: SMS is evil. Use authenticator apps or hardware tokens for two-factor authentication. Or, just don’t stick out so much that someone would not mind spending a few thousand dollars to hack specifically you.

Links in the comments.

idea: PDF Management App for Mac | September 23 2024, 23:31

I wonder if it’s just me unable to find it, or if it doesn’t exist — an app for Mac where you can specify a folder with PDFs, let it work overnight to create a vector index, and then search through them using natural language queries. For creating embeddings and for the RAG reasoning phase, models could be downloaded onto the computer, and in this case, it would work as fast as the computer allows. If you enter an OpenAI key, then OpenAI would be utilized.

It would also be convenient if such a tool could take a URL as input – for example, through a click on a browser extension button, and then allow searches across all documents, including that URL.

It would be great if one could create indexes with a single click. Say you receive a 200-page PDF on biology, you throw it into the “biology” index, or one on mathematics, you throw it into the “mathematics” index.

I know how to build this from scratch. But all solutions require a somewhat advanced understanding. There’s something like automatic1111 for Stable Diffusion; I wish there was something similar for working with an archive.

Sleep-Sensitive Media Player Integration for Apple Watch | September 23 2024, 12:21

I wonder why no one has made a player that integrates with the Apple Watch, and turns off the background music (for example) when the pulse shows that the person has fallen asleep? Ideally, if it could do the same with YouTube or any other service. Essentially, it involves opening a browser window with YouTube, then I start whatever I need, and at the right moment, when the watch reports that I have fallen asleep, simply closing that window.

Portrait of Emotion: The Art of Mostafa Keyhani | September 18 2024, 12:23

An interesting Canadian artist of Iranian descent, impressionist Mostafa Keyhani (born 1954). There is scant information available about him, yet each of his paintings narrates a tale—depicting cities, figures, emotions.

Similar entries are categorized under the tag #artrauflikes, and all 106 can be accessed in the “Art Rauf Likes” section at beinginamerica.com (in contrast to Facebook, which overlooks nearly half of them).

KitKat: From Elite Club to Global Candy Phenomenon | September 17 2024, 23:04

I’m reading At Home. There, Bryson talks about Kit-Cat, an elite political-literary club of 18th century London (c.1690s-c.1720). It turns out that the KitKat bar was indeed named after this club, although the spelling is slightly different.

Moreover, the olds should remember the TV commercial “Take a break – have a TWIX!”. Interestingly, Mars co-opted the competitor’s slogan :- ) Around the world, this slogan is used by Nestle for Kit-Kat: “Have a break. Have a Kit-Kat” (Take a break. Eat a Kit-Kat). When Kit-Kat was introduced in Russia, the slogan had to be changed to “Есть перерыв. Есть Kit-Kat”. By the way, Mars and Nestlé even sued over this matter.

And what does this elite club have to do with it all, and what is this club anyways? The club’s name originates from the tavern owner where its members initially gathered — Chris Katling, known among friends as Kit Cat.

It’s also interesting that KitKat in the USA is produced by Hershey’s, essentially a competitor of Nestlé.

Navigating the High Costs and Rules of Toll Roads | September 17 2024, 22:41

If you think your toll roads are expensive, take a look at ours. $31 just to use a dedicated lane. And that’s not even the maximum; I’ve heard it can reach $40. Note that on I-395/95, it’s not a dedicated highway, but just a dedicated lane.

If there are three or more people in your car, you can go for free, but you have to activate a special mode on the Ez-Pass box (HOV). If there are fewer than three, you must definitely disable this mode, and then you pay according to the standard rates. Forgetting to turn off HOV when driving alone or with one passenger means a $125 fine for the first offense, $250 for the second, $500 for the third, and $1000 for the fourth and subsequent offenses. From the second offense, you also get three penalty points, which significantly increases insurance rates, and if unaddressed, the record stays for 11 years. So, if you want to use the toll highway, you need to be not only prepared to pay but also remember to switch the box to a different mode.

Truthfully, the cost indicated on the sign is the maximum possible toll at that moment for the full route. It’s the price for the entire journey on toll lanes, from one end to the other — about 60 miles, roughly an hour’s drive. But if you exit earlier, the system automatically recalculates the price based on your actual route.

Moreover, there are cameras on the road that somehow manage to detect if there are three people in the car. It’s easy to spot two in the front, but how do they detect an additional person at the back? Well, they don’t see children well, which is why the police periodically stop families and apologize. I’ll leave a link to one of the solutions in the comments. Understandably, there will be some false triggers, but at least the data set provided for human check and filtering will have fewer errors.

People on forums are asking if, now that abortions are considered murder in some states, from which month can you count two passengers in the seat of an expecting mother in the car. A valid question, indeed.

Innovations in Landscape Design: The Ha-Ha at Castle Howard | September 17 2024, 22:04

I’m reading something interesting

“His Temple of the Four Winds at Castle Howard was the first of its kind. To this, he added the most ingenious and transformative innovation: the ha-ha.

A ha-ha is a sunken fence, a sort of palisade, designed to separate the private part of an estate from the working areas without the visual interference of a fence or hedge. It was an idea adapted from French military fortifications. Since they were invisible until the very last moment, people often discovered them with a surprised exclamation, “Ha-ha!—and, it is said, hence the name. The ha-ha was not just a practical device for keeping cows away from the lawn, but an entirely new way of perceiving the world. Plots, garden, park, estate—everything became part of a unified whole. Suddenly, an attractive part of the property did not have to end at the edge of the lawn. It could continue up to the horizon.

in Wikipedia, it is called Aha or ah-ah.

this is what I’m reading at home by Bill Bryson

Exploring the Vivid World of Josef Kote | September 15 2024, 15:23

Josef Kote. While his subjects may seem simple, his unique technique and use of color immediately distinguish his works, making them highly recognizable. Essentially, his art revolves around four main themes—seascapes, cityscapes, landscapes, and what appears to be the same woman.

It also seems that he works exclusively with acrylic on canvas. Acrylic paints dry quickly, allowing the artist to layer strokes without waiting for them to dry. This means that blending, characteristic of oil painting, is almost nonexistent in acrylic unless special additives are used to slow drying. However, acrylics provide a brightness and color saturation that oil paints cannot achieve.

Similar posts are grouped under the hashtag #artrauflikes, and on beinginamerica.com in the “Art Rauf Likes” section, you can find all 105 of them, unlike Facebook, which seems to overlook nearly half.