• 2 Posts
  • 65 Comments
Joined 2 years ago
cake
Cake day: June 1st, 2023

help-circle

  • The new attack, named Pixnapping by the team of academic researchers who devised it, requires a victim to first install a malicious app on an Android phone or tablet. The app, which requires no system permissions, can then effectively read data that any other installed app displays on the screen. Pixnapping has been demonstrated on Google Pixel phones and the Samsung Galaxy S25 phone and likely could be modified to work on other models with additional work. Google released mitigations last month, but the researchers said a modified version of the attack works even when the update is installed.







  • I use bsd containers for everything but home assistant on my home server and love them! The downside for most people at the moment is having to set them up manually. I can export the thin jail and move the archive across computers as backups and the fine tuned control is beautiful. FreeBSD offers a way to check for security vulnerabilities in installed packages (pkg audit -F) that I run as a cron job and email myself daily to check for needed updates.

    Problem is most people want a single docker install and it’s all set up, not something that needs manual configuration. Bastille has templates that can do this for bsd jails but there’s not a lot of services with templates.

    Edit: also frustrating is a lot of new apps for home servers only offer a docker install so installing from source becomes a huge pita and makes bsd jails harder to use (looking at you gramps-web specifically).