• 0 Posts
  • 24 Comments
Joined 11 months ago
Cake day: July 26th, 2023
  • GenitalHurricane@lemmy.worldtoTechnology@lemmy.world•Shopping app Temu is “dangerous malware,” spying on your texts, lawsuit claimsEnglish
    932·
    2 days ago

    Libmanwe-lib.so is a library file in machine language (compiled). A Google search reveals that it is exclusively mentioned in the context of PDD software—all five search results refer to PDD’s apps. According to this discussion on GitHub, “the malicious code of PDD is protected by two sets of VMPs (manwe, nvwa)”. Libmanwe is the library to use manwe.

    An anonymous user uploaded a decompiled version of libmanwe-lib to GitHub. It reads like it is a list of methods to encrypt, decrypt or shift integer signals, which fits the above description as a VMP for the sake of hiding a program’s purpose.

    In plain words, TEMU’s app employed a PDD proprietary measure to hide malicious code in an opaque bubble within the application’s executables

  • GenitalHurricane@lemmy.worldtoTechnology@lemmy.world•Shopping app Temu is “dangerous malware,” spying on your texts, lawsuit claimsEnglish
    171·
    2 days ago
    1. Dynamic compilation using runtime.exec(). A cryptically named function in the source code calls for “package compile”, using runtime.exec(). This means a new program is created by the app itself.—Compiling is the process of creating a computer executable from a human-readable code. The executable created by this function is not visible to security scans before or during installation of the app, or even with elaborate penetration testing. Therefore, TEMU’s app could have passed all the tests for approval into Google’s Play Store, despite having an open door built in for an unbounded use of exploitative methods. The local compilation even allows the software to make use of other data on the device that itself could have been created dynamically and with information from TEMU’s servers.
  • GenitalHurricane@lemmy.worldtoAsklemmy@lemmy.ml•What's an aspect of your job that college didn't prepare you for?
    4·
    6 months ago

    I got out of a 7 year retail streak and into technology through support. Many organizations or BPO’s see a lot of churn in technical customer support and have on the job training to get your feet wet. Then the ones who stick around and learn the product move up or laterally within the organization. A good org will farm from support. A good org will provide up-skill and training opportunities, subsidies etc to help people progress their career and stay at the company.

    Find a local call center or look for remote support jobs if you are tired of retail and then use the company perks to progress.

    Source: I left retail for tech support in 2012, 2 years at a BPO, 8 years working with varying tech and progressing titles learning new things and getting free certifications. Now I manage a support team of 14 because I like helping people. Former colleagues from the same BPO are now directing program management, engineering teams, development etc.

  • GenitalHurricane@lemmy.worldtoCanada@lemmy.ca•‘I didn’t think it would be in my house’: Lung cancer survivor warns of radon risks
    13·
    8 months ago

    To my knowledge it’s global, not just specific areas, however the levels vary. In the Midwest (USA) it’s quite common to perform radon tests during a home sale, and homes with basements will frequently have a ‘radon mitigation’ system installed; basically a large fan draws the air out of the space beneath your concrete slab and air-tight plastic is installed in crawl spaces to form a negative pressure so the airborne radon is pulled out before it enters the home, and then exhausted up above the roof line to blow away like other exhaust from HVAC and appliances.

    Have a system installed in my home to keep levels as low as possible, even though it tested below the ‘dangerous’ threshold when I purchased. (Better safe than sorry).