Powaqoatse posted:

i know itd just be fun to have a piece of paper on official intelligence letterhead saying "yea this kid is a goddamned commie and probably smoked weeed"

OSI bean dip posted:

Mr. Nice! posted:

there used to be a list of adjudication decisions online regarding clearances, but I can't seem to find it at the moment. in your example it would probably be listed as "person has deep and undisclosed ties to groups that have a stated goal of undermining the goverment. was not truthful about past drug use. clearance denied."

quote:

Applicant purchased proprietary software from a major competitor using a shell company as the purchaser without disclosing his affiliation with the real purchaser in interest. He based his concealment of his employer on his not wanting the seller to know his real employer. When later completing his security clearance application, Applicant deliberately omitted the Company B federal lawsuit from his application. Personal conduct concerns are not mitigated. Clearance is denied. CASE NO: 15-01014.h1

MononcQc posted:

Actually-I-was-wrong-the-accused-is-not-guilty-and-as-prosecutor-I.rest

pseudorandom name posted:

http://ogc.osd.mil/doha/industrial/2017.html

this year's crop is pretty boring so far

pseudorandom name posted:

http://ogc.osd.mil/doha/industrial/2017.html

this year's crop is pretty boring so far

quote:

Applicant credibly testified that he did not meet woman X for sex or to break the
law. He wanted information from her about his wife for his custody dispute. He does not
believe he was thinking clearly. Applicant was born without an eye socket and had a
tumor growing where his eye socket should be. Doctors removed the tumor, but it grows
back every three to four years and must be surgically removed. He testified that he
consulted his doctor and asked if the tumor could affect his brain and was told that it
could cause confusion and memory problems. Applicant believed that the brain tumor
may have had an effect on his interactions with woman X. He admitted he did not think
through the interactions with her as clearly as he should have. He had surgery to
remove the tumor on December 1, 2011, which was 36 days after he was arrested.

Midjack posted:

keep in mind​ too that these are just department of defense clearances, ic would have even better stuff in theirs

pseudorandom name posted:

pseudorandom name posted:

spankmeister posted:

Nice way to make yourself not look like an idiot because you had a bog-standard DLL hijacking vulnerability.

vOv posted:

yeah it looks like it loads the dll from the same directory as the exe, so it's not a secfuck at all

pseudorandom name posted:

vOv posted:

yeah it looks like it loads the dll from the same directory as the exe, so it's not a secfuck at all

Shaggar posted:

2 factor windows sign in is coming soon so maybe they could add that to DPAPI so you get a push notification on your phone when something wants to pull something out of DPAPI like a web credential.

Kuvo posted:

quote:

One of the vendors had provided a set of malware samples to test—48 files in an archive stored in the vendor's Box cloud storage account. The vendor providing those samples was Cylance, the information security company behind Protect, a "next generation" endpoint protection system built on machine learning. In testing, Protect identified all 48 of the samples as malicious, while competing products flagged most but not all of them. Curious, the engineer took a closer look at the files in question—and found that seven weren't malware at all.

flosofl posted:

A/V continues to be the skid mark in the underwear of Info Sec.

https://arstechnica.com/information-technology/2017/04/the-mystery-of-the-malware-that-wasnt/

ate all the Oreos posted:

i just overheard our sysadmin talking about how much he loves getting targeted advertising because it's helpful and he's okay with them harvesting all his data because "it's anonymous"

spankmeister posted:

actually,

ate all the Oreos posted:

i just overheard our sysadmin talking about how much he loves getting targeted advertising because it's helpful and he's okay with them harvesting all his data because "it's anonymous"

COACHS SPORT BAR posted:

lol forever at people who think like this

most that I know work for advertising companies and rationalize their own line of work like this so they can pretend that what they do isn't profoundly unethical

see also: people working for "relevant marketing" companies and insisting that what they do isn't advertising at all

flosofl posted:

A/V continues to be the skid mark in the underwear of Info Sec.

https://arstechnica.com/information-technology/2017/04/the-mystery-of-the-malware-that-wasnt/

OSI bean dip posted:

What a shocker. Cylance lying about its product?

Wild EEPROM posted:

gonna make my own av program.

just gonna be something that makes a windows process that wastes a few resources doing nothing, puts something into the tray, pops up notifications twice a day saying you aren't protected or you should upgrade to the gold platinum plus package, and then when you do a manual scan, it just moves a status bar to 100% slowly.

probably less bad than the major av's

Lutha Mahtin posted:

i don't have much opinion about av products these days. coincidentally i am no longer a teenager trying to download game cracks and porn mag scans from sketchy ftps

Wild EEPROM posted:

gonna make my own av program.

just gonna be something that makes a windows process that wastes a few resources doing nothing, puts something into the tray, pops up notifications twice a day saying you aren't protected or you should upgrade to the gold platinum plus package, and then when you do a manual scan, it just moves a status bar to 100% slowly.

probably less bad than the major av's

Thanks Ants posted:

less a skid mark, more a full-on brick

quote:

Cylance creates test methodology where they pack malware with Mpress or VMProtect. CylanceProtect detects every software packed with Mpress or VMProtect as malicious. I even found strings in one of their files where it mentions Mpress or VMprotect. Cylance denies this is their file, they claim it must be malware. I created this video to proof this is their file, as it is digitally signed by Cylance ...