archomrade [he/him]

  • 0 Posts
  • 27 Comments
Joined 1 year ago
cake
Cake day: June 20th, 2023

help-circle

  • It depends on the attack vector. Typically you’re right, but malicious .lnk files are often paired with other malicious methods to infect machines. Sometimes they’re configured as a worm that copies and spreads when a flash drive is connected, sometimes they’re configured to download a remote payload when another script or program is started. The problem is that it’s a type of file that’s often overlooked because it seems innocent.

    It isn’t necessarily the case that the Trojan needs to be interacted with by the user in order to execute the malicious code. Just having the file on your machine opens the door for all kinds of attacks (especially if you’re using a headless setup: you wouldn’t necessarily know you have the .lnk file in the system unless you’re manually unpacking your downloads yourself). All it needs is for another piece of infected code to run and look for that file, and it can open the door for more traditional malicious code.


    Edit: just as a for-instance - If I was a black hat and wanted to spread some malicious code, I could include this .lnk file in a torrent (innocuous enough to slip by unnoticed by most people/unscrupulous pirates), and then maybe place a line of code in a jellyfin plugin or script that looks for that file and executes it if it’s found. Because the attack isn’t buried in the plugin or script itself (most people wouldn’t think much of a line of code that’s simply pointing to temp file already on your system), it could theoretically go unnoticed for long enough to catch a few hundred or thousand machines.



  • I used to think the same thing, but I did an effort post about this about a year ago (here’s the link)

    The article you linked to says something similar to my own understanding: basically, DRM circumvention for personal use is officially not allowed under DMCA and could absolutely be used against you in court, though the likelihood is low. The exceptions the author mentions are pretty nebulous, and the Library of Congress actually addresses the most common cases in their discussions and publication and affirms that they are not allowed.

    I don’t personally agree with their interpretation, but I think more people ought to know that it’s officially not legal to circumvent DRM for personal use.












  • It’s not just that it hasn’t gotten better in 20 years like he says, it has actively gotten worse.

    Maybe before DRM would fuck with the quality of the media or block you from using it the way your prefer (despite paying for it to do what you want), but now it’s exactly that, PLUS they’re clawing for every scrap of data from their consumer base in order to market it to third party vendors.

    I’m ready to buy stock in tin foil and live in the woods off my own urine, this shit has gotten so bad. I just want them to leave me alone and let me live without being constantly servailed and targeted with ads. Is the offer really to be made miserable and unsatisfied about my life and possessions in exchange for another season of a shitty remake of a early 2000s IP?

    I fucking hate the anthropocene. Let’s just pack it up and shut it down, there’s nothing left for us here.





  • Why am I seeing this capitalist apologia on a pirating forum?

    It makes them ‘scammers’ because:

    • they are calling it a purchase, but its not a purchase. It’s a lease.
    • the rental price is arbitrary anyway. It costs them the same to stream the media, if it’s $25 or $0.25. Hell, it costs them the same if they stream it as a purchase as it does to stream it as a rental.
    • you don’t have any legal option to control your own digital full res copy of any media that you pay for, but they take your money anyway so you can pretend that you do.

    I consider that to be a scam.