I'm tempted to agree but at the same time we never (?) had news of confirmed data breaches due to log4shell exploits either, so perhaps people are just good at staying quiet when they get attacked.
> Despite the high volume of exploit attempts following the discovery of the Log4Shell vulnerability, reports of major breaches were relatively few. One of the first significant attacks targeted the Belgian Ministry of Defense. Reported on December 12th, just three days after the vulnerability became widely known, the Ministry did not disclose specific details but confirmed the Log4J vulnerability as the attack vector.
Log4shell did not get that bad because it was only the less used version 2 that was effected.
The standard way hackers go about today is data theft and extortion. I think we would have heard about it if was a big problem.
People should off cause keep their servers up to date no matter what. The total panic that was yesterday with people posting all kinds of random AI slop was pathetic.
> Pumped storage is by far the largest-capacity form of grid energy storage available, and, as of 2020, accounted for around 95% of all active storage installations worldwide, with a total installed throughput capacity of over 181 GW and as of 2020 a total installed storage capacity of over 1.6 TWh.
You are kind of making my point for me. 181GW capacity is laughable at a global level. Better than nothing, for sure, but it isn't going to solve our energy needs - you need to increase that by a couple orders of magnitude.
The key point is that you must not post in XTwitter first, but you have to use the crossposter's client as source. Pulling content out of XTwitter, even your own, is onerous.
Tall order. The main Nitter instances were using tens of thousands of accounts to evade detection, IIRC. Adding money to the mix creates more legal liability and a paper trail towards people who can be sued.
It's much easier if thousands of people set up their own Nitter instances.
Nowadays such clients are effectively impossible, because the XTwitter API pricing is designed for business users only. Some bigger services can afford to pay for the privilege to post via the API (e.g. Buffer I think?), which can work for corporate communications. The prices are such that often it's cheaper to pay a person to do the crossposting manually and do it properly while at it.
Good read. If you put mixpanel+hotjar or something like that in and actually drill down into what the networks are sending you the discrepancies are often stark. A couple years back I was working on a campaign for someone and over a month X reported it had sent ~$30k in traffic, but on our side the analysis platforms showed we'd only gotten around $2k of inbound (never mind the quality), we reported it to x and a few weeks later they came back and said there was a "bug" in the ads platform and refunded us the $30k but at the time I thought...if someone unsophisticated was running ads, they'd be out whatever they spent, to a degree their own fault for not being on top of it as ads platforms are somewhat notorious for this kinda thing but never the less, not ideal. I'm pretty sure the only useful places to advertise online these days are LinkedIn and Instagram.
This blog makes a good point: governments are already overworked dealing with pedos, terrorists and spies. Ad fraud is a victimless crime that voters don't care about so in all likelihood a low priority.
Does it matter from marketers perspective? I can measure incremental revenue/profit and decide based on that if the channel is worth it. I don't care if the rest of the money goes to the channel or is stolen.
USA entities sometimes are not even aware that they have a fully functioning euro account able to receive fee-free SEPA bank transfers, simply as a mechanical consequence of having an euro-denominated account. In the past I've tested this: I asked the IBAN of an euro-denominated account from USA non-profits, got warned nobody ever sent money there, proceeded to send a donation anyway, had it work perfectly fine.
HOWEVER it's conceivable that the USA bank might end up charging some BS fees on their side just because they can. That's hard to control for.
> Despite the high volume of exploit attempts following the discovery of the Log4Shell vulnerability, reports of major breaches were relatively few. One of the first significant attacks targeted the Belgian Ministry of Defense. Reported on December 12th, just three days after the vulnerability became widely known, the Ministry did not disclose specific details but confirmed the Log4J vulnerability as the attack vector.
https://arxiv.org/html/2501.17760v1#S4
reply