|
so much for keep your software up to date. checkmate fringe quasi-InfoSec wannabe community
|
#
?
Jun 16, 2016 23:05
|
|
|
|
| # ? Jun 6, 2024 12:41 |
|
|
https://twitter.com/SecSnakeOil/status/743573300333273092 looks like we may have a round 2 on veiltower
|
|
#
?
Jun 16, 2016 23:42
|
|
|
thehustler posted:so much for keep your software up to date. checkmate fringe quasi-InfoSec wannabe community Keep rear end 1.x still works fine and if that's needs suiting then keep on rocking however the MITM vuln in the keep rear end 2 update check has been resolved satisfactorily. It still directs you to go download from sourceforge over http, but it does the same thing for 1.x, so, welp check your sigs edit: oh hey he finally kicked the download links over to HTTPS, woop
|
|
#
?
Jun 16, 2016 23:49
|
|
|
OSI bean dip posted:https://twitter.com/SecSnakeOil/status/743573300333273092 Refresh my memory. Was Veiltower the bullshit AP? The one with the antennas that didn't have enough planar offset and the PCB that wouldn't fit into the case?
|
|
#
?
Jun 17, 2016 00:34
|
|
|
flosofl posted:Refresh my memory. Was Veiltower the bullshit AP? The one with the antennas that didn't have enough planar offset and the PCB that wouldn't fit into the case? also here's osi's writeup https://securitysnakeoil.org/2015/10/06/veiltower-a-misleading-plastic-jungle-of-deception/
|
|
#
?
Jun 17, 2016 00:42
|
|
|
flosofl posted:Refresh my memory. Was Veiltower the bullshit AP? The one with the antennas that didn't have enough planar offset and the PCB that wouldn't fit into the case? it was the wastebasket with the antennas that weren't connected to anything
|
|
#
?
Jun 17, 2016 00:58
|
|
|
this was posted a few days ago: https://www.youtube.com/watch?v=3yveswNUouo also found this: https://www.kickstarter.com/projects/1500620457/innovote-secure-mobile-voting-for-america?ref=newest 
|
|
#
?
Jun 17, 2016 00:59
|
|
|
OSI bean dip posted:this was posted a few days ago: Oh god, whenever I hear the term "100%" secure I instantly file their product into the scam compartment in my brain.
|
|
#
?
Jun 17, 2016 01:16
|
|
|
No freaky-deekies here! https://www.youtube.com/watch?v=3yveswNUouo&t=129s
|
|
#
?
Jun 17, 2016 01:23
|
|
|
OSI bean dip posted:this was posted a few days ago: quote:Our technology uses the same cryptographic breakthroughs that enable the bitcoin economy — the blockchain. You can learn more in our whitepaper. 
|
|
#
?
Jun 17, 2016 01:52
|
|
|
OSI bean dip posted:this was posted a few days ago:  that's all i saw
|
|
#
?
Jun 17, 2016 01:53
|
|
|
DrPossum posted:
I was kind of curious what David Cross was getting up to!
|
|
#
?
Jun 17, 2016 01:55
|
|
|
DrPossum posted:
is keeping your waste bin atop your desk instead of underneath a silicon valley fashion thing?
|
|
#
?
Jun 17, 2016 03:58
|
|
|
Adix posted:is keeping your waste bin atop your desk instead of underneath a silicon valley fashion thing? when your business is manufacturing expensive waste bins, probably
|
|
#
?
Jun 17, 2016 04:24
|
|
|
Adix posted:is keeping your waste bin atop your desk instead of underneath a silicon valley fashion thing? 
|
|
#
?
Jun 17, 2016 04:42
|
|
|
thehustler posted:so much for keep your software up to date. checkmate fringe quasi-InfoSec wannabe community COACHS SPORT BAR posted:edit: oh hey he finally kicked the download links over to HTTPS, woop anyway as i already discovered the main sourceforge domains support https but the actual download mirrors don't 
|
|
#
?
Jun 17, 2016 04:47
|
|
|
DrPossum posted:
who buys one eames chair in white much less four of them black leather and rosewood or nothing you loving philistines
|
|
#
?
Jun 17, 2016 09:21
|
|
|
Volmarias posted:I was kind of curious what David Cross was getting up to! was gonna post this, it's uncanny
|
|
#
?
Jun 17, 2016 09:29
|
|
|
ErIog posted:No freaky-deekies here! So am I supposed to carry my trashcan with me to every Starbucks I go in to? Otherwise how does having 802,1x help when I'm not associated with the thing?
|
|
#
?
Jun 17, 2016 09:59
|
|
|
what if the hackers get their own trash can WAP and take it to starbucks? how hosed would we be?
|
|
#
?
Jun 17, 2016 12:15
|
|
|
DrPossum posted:what if the hackers get their own trash can WAP and take it to starbucks? how hosed would we be? InfoSec: it's trashcans all the way down
|
|
#
?
Jun 17, 2016 12:43
|
|
|
pr0zac posted:my friend and now boss and also sometimes SA poster wrote a good article on bug bounties
|
|
#
?
Jun 17, 2016 13:14
|
|
|
ewiley posted:InfoSec: it's trashcans all the way down
|
|
#
?
Jun 17, 2016 13:18
|
|
|
posting in the infosec trashcan
|
|
#
?
Jun 17, 2016 13:19
|
|
|
 without any chance of fraud? hmm. https://twitter.com/WeldPond/status/743755637000024065 https://twitter.com/matthew_d_green/status/743756987695955970 uh oh https://blog.ethereum.org/2016/06/17/critical-update-re-dao-vulnerability/ quote:An attack has been found and exploited in the DAO, and the attacker is currently in the process of draining the ether contained in the DAO into a child DAO. The attack is a recursive calling vulnerability, where an attacker called the “split” function, and then calls the split function recursively inside of the split, thereby collecting ether many times over in a single transaction. ayyy lmao Bhodi fucked around with this message at 14:03 on Jun 17, 2016 |
|
#
?
Jun 17, 2016 13:59
|
|
|
anyone putting money into ethereum / bitcoin / whatever gets what they deserve
|
|
#
?
Jun 17, 2016 14:00
|
|
|
i hadnt even heard the word 'ethereum' before and i can see why all of your money has now disappeared into the 'ether' you idiots
|
|
#
?
Jun 17, 2016 14:04
|
|
|
the RCE is coming from inside the blockchain
|
|
#
?
Jun 17, 2016 14:20
|
|
|
Bhodi posted:
oh good i started paying attention to the bitcoin world again at just the right time 
|
|
#
?
Jun 17, 2016 14:42
|
|
|
Bhodi posted:
They're all gonna get forked hard in the rear end soon Pretty much this sums up ETH: https://twitter.com/random_eddie/status/743753139874979841
|
|
#
?
Jun 17, 2016 15:40
|
|
|
Security Fuckup Megathread - v12.1.3 - Imagine that your dollar bills were written in Javascript.
|
|
#
?
Jun 17, 2016 15:51
|
|
|
ratbert90 posted:Security Fuckup Megathread - v12.1.3 - Imagine that your dollar bills were written in Javascript. nah
|
|
#
?
Jun 17, 2016 15:53
|
|
|
http://www.maria-johnsen.com/million-dollar-blog/multilingual-seo/should-multilingual-websites-use-https-by-default this is all sorts of incorrect https://twitter.com/iMariaJohnsen/status/743818598959947776 she isn't getting the best responses on twitter
|
|
#
?
Jun 17, 2016 17:16
|
|
|
OSI bean dip posted:http://www.maria-johnsen.com/million-dollar-blog/multilingual-seo/should-multilingual-websites-use-https-by-default What the gently caress did I just read
|
|
#
?
Jun 17, 2016 17:23
|
|
|
apseudonym posted:What the gently caress did I just read someone who needs to know their place on giving advice
|
|
#
?
Jun 17, 2016 17:27
|
|
|
spankmeister posted:was gonna post this, it's uncanny
|
|
#
?
Jun 17, 2016 17:29
|
|
|
apseudonym posted:What the gently caress did I just read digital marketing poo poo is almost entirely based on misunderstanding and magical thinking SEO in 2016 means catering to delusional small business owners that didn't get the memo about SEO people all being incompetent or malicious clowndicks that are an enemy of multiple fortune 50 companies what you just read is par for the course
|
|
#
?
Jun 17, 2016 17:30
|
|
|
apseudonym posted:What the gently caress did I just read
|
|
#
?
Jun 17, 2016 17:32
|
|
|
OSI bean dip posted:http://www.maria-johnsen.com/million-dollar-blog/multilingual-seo/should-multilingual-websites-use-https-by-default I assume from the lack of question mark in the blog title that there wasn't an answer
|
|
#
?
Jun 17, 2016 17:33
|
|
|
|
| # ? Jun 6, 2024 12:41 |
|
|
OSI bean dip posted:this was posted a few days ago: I like how his ad contradicts itself. Hackers just drive up and use evilAP because your device will connect to the strongest network. Here's my poo poo, it's got a bunch of bs in it, it's somehow immune to evilAP.
|
|
#
?
Jun 17, 2016 17:42
|
|
