2·
17 days agoSorry, I mistakenly believed that auditctl records the process tree on event generation automatically, but that’s not the case. You’ll need to add a rule that records execve events.
Treasure
- 11 Posts
- 55 Comments
Joined 1 year ago
Cake day: August 4th, 2024
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
As far as I am aware,
auditctlrecords the whole process tree of an event. You can useausearchwith--pid <pid>or--ppid <pid>to work yourself all the way up the process tree.
The German Nutrition Society (DGE) has shifted to a circle instead of a pyramid:
The portions of the circle refer to volume and not calories. In my opinion this design is superior to pyramids in general because all parts are equally important for a balanced diet, with hydration in the middle.
SponsorBlock exists :)
Wenn du dich in der Kommandozeile wohlfühlst, kann ich ImageMagick sehr empfehlen.
13·3 months agoDie Online-Enzyklopädie läuft unter der Versionsnummer 0.1 und umfasst aktuell etwa 885.000 englischsprachige Artikel. Obwohl sie damit lediglich etwa 10 Prozent des Umfangs der englischsprachigen Wikipedia hat und anders als diese über keine Übersetzungen verfügt, behauptet der US-Milliardär, dass sie bereits besser sei.
Hm, warum wohl?
Das US-Magazin Wired hat derweil eine Reihe von Beispielen zusammengetragen, die darstellen, wie auf der Grokipedia rechte und rechtsextreme Inhalte integriert werden; so gibt es im Artikel zur Sklaverei etwa einen langen Passus zu deren Rechtfertigung.
Japp, hab nichts anderes erwartet.
291·5 months agopyschpsych
Probably it was only added so they could pull this “sike, air in the middle” stunt
22·6 months agoTLDR: I can’t say for 100% sure, but there are multiple reasons to believe that this is malware.
Long version: I’m seeing multiple suspicious things here.
-
The IPs being connected to are part of some hoster and have some abuse reports: https://www.abuseipdb.com/check-block/217.20.58.98/29
-
The domain being resolved is qcloud[.]com, which belongs to Tencent Cloud and definitely not Microsoft.
-
Other domains in memory like counter-strike[.]com[.]ua are very new and definitely sound fishy.
-
A standalone version of 7zip is being run and extracts the created rar file with the password “infected”. Real alarm bells here.
-
A lot of the registry actions look like anti-debugging, which does not sound like something an Illustrator Plugin would do.
-
11·6 months agoBei Inzest gehe ich sogar bei dir mit. Wird auch in Filmen und Serien gezeigt (z.B. Game of Thrones) und da hat auch niemand ein Problem.
Bei Minderjährigen allerdings sehe ich ein Verbot durchaus als sinnvoll. Das bewegt sich schon hart in Richtung CSAM und sollte meiner Meinung nach nicht verbreitet werden dürfen.
It is very much on track to do so, currently we’re still looking at 9-10k signatures a day. If this doesn’t slow down a lot till the deadline, we might even reach 1.5 million.
28·7 months agoNot only do I not mind you yoinking the text, I want to thank you for your contribution to the cause. If everyone who has signed could get one more person to sign, the initiative would succeed!
Pretty much yes, unfortunately. Because the process calling your target process is obviously created before, you’d need to proactively log all executions. :/