• 0 Posts
  • 61 Comments
Joined 2 years ago
cake
Cake day: June 20th, 2023

help-circle


  • Publisher Nexon has now made a statement addressing the situation, saying the ads were submitted by users as part of a ‘TikTok Creative Challenge’, which TikTok describes as an “official creator monetization program that turns your creativity into cash by creating UGC-style ads for your favorite brands”.

    “All submitted videos are verified through TikTok’s system to check copyright violations before they are approved as advertising content. However, we have become aware of cases where the circumstances surrounding the production of certain submitted videos appear inappropriate. Thus, we are conducting a thorough joint investigation with TikTok to determine the facts.

    How could they not see this coming? Of course this will be gamed and abused. This is what happens when you fire your marketing department and outsource it to TikTok.





  • It’s possible that they discovered a weakness in the way the keys are generated in the TPM (or whatever it’s called for Android), which brings the time to brute force down from 1,000 years to a few weeks with massive GPUs?

    Similar story, as of a few years ago, OpenSSH announced deprecating support for RSA keys keys because of a vulnerability in SHA-1 hashing, where they cited research showing a determined attacker could break the key with $50k of compute power, which may seem like a lot, but is pretty feasible, necessitating the deprecation

    It is now possible [1] to perform chosen-prefix attacks against the SHA-1 hash algorithm for less than USD $50K. For this reason, we will be disabling the “ssh-rsa” public key signature algorithm that depends on SHA-1 by default in a near-future release.

    I don’t know about the Android system, but during the initial design and fabrication, the hardware may have not been designed to withstand the compute power just a few years later, and can not be easily updated to improve the security. These are the weaknessed Cellebrite is looking for.






  • Is there a really a quota on the CSAM detection, or do you mean catbox would only get a free 1GB of storage? No one’s saying that Cloudflare would give away 1 PB of traffic for free, obviously catbox would have to pay for it. Still though, Cloudflare or another CDN adds a lot of value which would be hard to replicate.

    At that volume, you need to scale a lot, which is what CDNs are designed to do. Moving 1 PB a month in traffic would be like a sustained upload speed of 3 Gbps for an entire month, which is huge for any ISP, and cost a lot. You’d probably need to divide the traffic going out which means multiple ISP connections, and more machines for redundancy. Probably at that scale, connections are coming from all over the world, so to reduce latency, you’ll need locations in multiple continents to serve quicker. As you can probably tell, this becomes more than just one time purchases and electricity costs.

    CDNs have dedicated fiber links between geographic locations and negotiated volume discount rates on bandwidth with other ISPs. From a cost and a reliability perspective, it means you can deliver content for less than hosting it all on your own.