Play is our future

Skill is measurable w/ two resources 1) time, 2) energy

Players whose actions make better use of these resources can be defined as optimal. This is not subjective

Time (faster)/overload/conscious/stress
Energy(easier)/underload/unconscious/low anxiety

Orgel's First Rule:

"Whenever a spontaneous process is too slow or too inefficient a protein will evolve to speed it up or make it more efficient."

Faster (speed/strength)-Deliberate Practice
Easier--Play

Overload (D.Practice) builds faster=hypertrophy and results in measurable selection resulting in problems such as Relative Age Effect, and players with very fast cars saddled with inexperienced drivers

It's more likely to be wrapped around a tree than finish the race.

as Orgel says, if we allow it, play will produce faster and easier

Kids in play build the driving sills first, in Go Karts, like Ayrton Senna

Big brains, slow cars, easier

But where speed is limited by physics,

Ideas are plentiful and under resourced in US youth sport

Almost every coach will agree w/ the following

Competition is important
Training is more important than games
Play is more important than both

But,

the big thing is to keep the big thing the big thing

FLASH: "Emergency Directive 21-01 calls on all federal civilian agencies to review their networks for indicators of compromise and disconnect or power down SolarWinds Orion products immediately."-@CISAgov Read more:

CONTD: @CISAgov is responding to an exploit of Federally operated @solarwinds Orion products by malicious actors. They Issued an Emergency Directive to federal civilian agencies to review networks & DISCONNECT OR POWER DOWN ALL SOLARWINDS ORION PRODUCTS NOW!

CONTD: @FireEye discovered an attack trojanizing @solarwinds Orion biz software distributing malware named #SUNBURST.
The attacker’s use multiple techniques to evade detection/obscure activity. The campaign is widespread affecting public & private organizations around the world.

CONTD: The trojan version of a @SolarWinds Orion plug-in codename #SUNBURST. After a dormant period of up to 2 weeks, it retrieves & executes commands including transfering files, executing files, profile the system, reboot, & disable system services.... more

CONTD: #SUNBURST hides network traffic & stores recon within legitimate plugin configuration files allowing it to blend in with legitimate activity. The backdoor uses obfuscated blocklists to i.d. forensic & anti-virus tools running as processes, services, & drivers.... more

How to Remove Background Images

Photoshop is one of the best software for manipulating images (editing). This software made by the Adobe company has proven effective in producing new edited images that are different from the original. One of the most common types of photo editing in Photoshop is removing the.

Daily Bookmarks to GAVNet 01/16/2021

I did more research into the Parler dump. What probably happened was not so much a "hack", but this: When Twilio/Okta shut them down, they just disabled email/phone verification to create an account. This means anyone could directly create huge amounts of accounts via their API.

Someone also found out that fetching Parler posts could be done by enumerating IDs (e.g 1, 2, 3) instead of random IDs that can't be guessed. Unclear if this was via the ordinary API endpoint, or that they found a separate one by monitoring app network traffic.

So you combine these two things and you can create a script to scrape all the posts on the entire platform, using a lot of different accounts to avoid suspicion. Anyone could download and run this script to spread it out over many IP addresses as well.

What I'm still not sure about is whether deleted (meaning flagged as deleted, it's common that services never actually delete data) posts could be fetched without any special handling.

The verdict: The people who wrote Parler are fucking amateurs.

Twas the night before Christmas and all over the ‘net,
Not a creature was stirring except a few cyber threats
The firewalls were configured at the egress with care,
But that wouldn’t stop us from being hit by ransomware. 1/

The children were nestled all snug in their beds,
While attackers hit the web server and established a beachhead
Mama with her EDR and I with my IDS
Were ready to tackle this hot infosec mess. /2

Down in the SOC there arose such a clatter,
I logged into my dashboard to see what was the matter.
This thing had better work, it cost so much cash.
How in 2020 can this thing STILL require Flash?! 3/

The alerts lit up the dashboard, it produced such a glow
But it’s because the threshold for alerting was configured so low.
When what to my wondering eyes did appear,
But 300 false positive alarms. I thought “I’ll be here all year.” 4/

Then a little old DLL, signed by SolarWinds,
Was really the Russians, masters of supply chain break-ins.
We need some new vendors said the CISO, and the salespeople came. 5/

Some gems from @MacConwell of @RarebreedVC in Clubhouse right now:

1) VCs are looking for startups that can get to $100m / yr in rev by yr 7-10.

VCs need this kind of return in order to produce great funds.

2) And so many companies won't get to this level - and that's not a bad thing - but then it means you should be thinking about trying to get going w company revenue since you can't count on VC backing.

3) someone asked about age and fundraising & do accelerators help?

Age doesn't matter. But just make sure no one is taking advantage of you. And as such, accelerators can help sometimes w that guidance.

4) Someone got a rejection because he had a teddy bear in his room (side note: what investor says that?!?)

Mac says he's been there and has heard that saltiness. But you're going to get a lot of nos. And you gain more leverage w more progress and traction. So just keeping going.

Facebook is a newstand. But no one can see which news Facebook is pushing to the top.

So we built an app for that called #CitizenBrowser. Our first finding: the sharp impact of Facebook’s political ad ban reversal in the Georgia Senate elections.
https://t.co/GZNdwZOlHW /1

This is the first report from our #CitizenBrowser project. There will be many more to come. But first, I want to tell you a bit about how we did it because it’s the most ambitious thing we’ve ever done @themarkup – and we do a lot of ambitious projects. /2

#CitizenBrowser grew out of conversations @suryamattu and I had about how to audit Facebook. We had both worked on browser extensions to collect data from Facebook, but FB always threatened to shut those down, just like their recent threats against the NYU AdObservatory. /3

But the bigger problem is that browser extensions don’t capture most FB activity. Most people use FB on mobile and browser extensions only work on desktop or laptop computers.

So one night, late at the WeWork, @suryamattu said to me: “We’ll have to build our own browser.” /4

“No way,” I said. “That’s insane.” But slowly, I came around. Here’s why: browsers are good at running in the background. Users could log into FB once through the browser and never use it again.

Then we wouldn’t be monitoring users. We would only be monitoring their feed. /5

Right, I did some reading and here’s what likely happened with Parler. Lots of crossed wires here.

First up: someone noticed that Parler uses sequential integers in the API endpoint to get content.

An API endpoint is just a URL with a value added onto the end that tells the system what you want to get back.

Using sequential integers means that a hacker can set up an automated script to start at 1 and count up, trying API calls over and over again, to get back content from Parler.

Parler apparently had no restrictions on this API endpoint, which frankly blows my mind as a web dev.

If you had a working URL, it just spat out whatever it had whether you were logged in or not.

It seems that EVERYTHING that had been uploaded - video, photos, text posts - was accessible whether it had been deleted or restricted in the app itself. Even uploaded photos of licenses etc etc.

I cannot describe how amateur hour this is, if true.

I'll touch upon few different types of cyber frauds and few possible ways in which we can avoid ourselves to be duped of money, time & energy.

Will also attach few real registered FIRs showing that most of the times such crimes happen with educated & learned people.

1/16

Cyber Fraud type 1 - Facebook/Instagram

Profile cloning -Fraudster will make exact same profile like yours - using pictures from your own profile. They will then message to your contacts asking for money immediately for the surgery of mother or similar emotional lie

2/16

Always verify before sending money.
Don't verify by calling that person, instead, call a common friend or family member of that person. Don't think you can't be fooled - I know at least 20 people working in Top IT MNCs becoming victim of this fraud. Lock your FB/Insta.

3/16

Cyber Fraud type 2 -OLX/Quikr
This generally happens while selling something on OLX/Quikr & similar platforms. In such cases, people will fraud in the name of paying money by asking to scan the QR code or click a link.
NEVER scan the QR code to receive money, give your UPI

4/16

Cyber Fraud type 3 - Fake SMS & Call from unknown numbers
Fraudster will send fake SMS showing amount credited to the account - with correct account number in SMS. Then they will call from unknown numbers asking for money.

ALWAYS check your bank account first via bank app.

5/16

Years before Andy Grove was attributed with the phrase:

"Whatever can be done, will be done"

A lot of us technologists assumed this was the case anyway.

It's a truism.

What if we could track every person on the planet in real time?

Or at least everyone in a major city

🤔🔮

So, given someone has this idea.

Then the only question is can it be done.

Well, we're already installing all the tech to do this for autonomous vehicles, drones and smart city infrastructure.

It really wouldn't be a huge leap to do that for people.

But how might that be possible 🤔

Sure we can already do it with phones right, but not everyone has a phone and sometimes the batteries die blah blah.

Could we do it in a way that it was difficult to circumvent, and always active?

Well, maybe we could if we put our thinking caps on about the problem.

--- this line intentionally left blank ---

Now I'm going to enter the wild world of wild speculative futurism, so take everything else with a pinch of salt 🧂

--- this line intentionally left blank ---

Turns out cell phone towers pinpoint the location of your phone as part of how they work.

And then as you move around you switch from one tower to another.

I think most people get this.

Something like the image below

I first joined Facebook in 2007 to report a Facebook group called "Find Dirt on the New Pastor at Northbrook: Because Everyone Has Secrets," which began within about 7-8 months of me arriving.

It has maybe 450+ members, some of which were children of church members (and maybe some on the membership roles).
It contained pictures of me (one altered to add 666 to my necktie) and my family (one implying that I abused my youngest child).

I reported it to FB, after which the administrators dropped off it. So I contacted FB again, saying if they didn't remove it ithey would hear from my attorney about defamation of character. It was soon removed (though I may still have printouts of all group pages).

(Around the same time there was another Facebook group called "Take Back the Northbrook Youth Group," for which the cover pic was a former youth group member brandishing a handgun. Removed much more quickly when his mother learned of it!)

What I'm saying is this:

1. This is (one of several reasons) why I don't tolerate people misrepresenting me, making unwarranted accusations, or making threats...especially when they are "Christians."

2. Not much has changed on Facebook in 15 years.

New from me, & my final piece of 2020:

In 2020, a false message board conspiracy theory harmed the pandemic response, significantly impacted our political process, & destroyed lives & families.

A deep dive into how QAnon's breakout year harmed us all:

I sympathize with mid-size companies seeking to acquire a premium domain name. Even if they stretch to make the maximum possible offer, it often still can't compete with what a larger company can offer. Their desired domain name remains always out of reach. /1

From the broker:

"The prospective buyer responded and explained that their absolute maximum amount they can spend is $100,000 USD. They are accountants and explained this is an extraordinary amount of money for them." /2

The distribution of how much a domain name is worth to a particular company may look approximately like the right half of a bell curve, with values increasing along the X-axis and the # of companies for which the domain name has that value on the y-axis. /3

Since each domain name is unique, a domain owner wishing to maximize the value of that asset will often wait for an offer in the (light green) rightmost tail of the distribution, from that small percentage of companies for whom the domain name will deliver the most value and /4

as a result can justify making the highest value offers for the domain name. But that means that the domain name will remain out of reach for the vast majority of companies that would benefit from owning the domain name. For even a company at the 80th percentile, in the /5

Here's why Twitter/Facebook/other platforms are publishers. Neither electricity nor phone companies actively curate content, that, is, choose what content will go where and why (like a newspaper, that is, a publisher). Just cause algorithms are involved not really a difference.

Neither do electricity nor phone companies (usually) deliver advertising based on the curation of content and vice versa. Neither do they as companies foster discussion. Etc etc.

In fact, this goes back to a basic confusion. Not even the web is the same as the internet, and social media is certainly not the internet. Neither are apps or platforms. The utility, if there is one, is the internet, the rest is increasingly some equivalent to publishers.

this is before you get to 1 the over-fetishization of content/representations and 2 the out of date characterisation of both media in general and the divisions within it on all sides, based on a media "age" that's now perhaps passing

per McLuhan but also Whitehead, Langer maybe, a lot of media ecology, Lovelace, Deleuze, Hopper, Virilio, Harney, and many many more.