A Pinball Wizard posted:

seems kind of discriminatory against gay people

Peachfart posted:

None of these will work. At the bare minimum, older MFP's leave their serial number almost invisibly on any copy, print, or scan. Newer copiers, and certainly anything the government is using(we are their main supplier), have much more information especially since you are required to use PIV to log into each machine.

CommunistPancake posted:

so why wouldn't OCR work? how would the serial number make it into the OCR'd text?

Peachfart posted:

OCR(at least the native OCR in a copier) doesn't remove all other images, it just makes a text layer in the PDF. If you are talking about after printing the document, you run it though another piece of equipment just to extract the text, that would work. Or perhaps extracting the text layer of an OCR'ed document? Never done that, dunno if it is possible.

anthonypants posted:

they're kinda hard to see on that image

CommunistPancake posted:

you can also, like, retype it.

Shifty Pony posted:

no matter what you do the final step is always "Don't loving leak it to Glenn Greenwald"

CommunistPancake posted:

i took the post to be a series of steps. you scan the paper, ocr it using all sorts of wonderful software we have today on personal computers, and don't share the originals.

Volmarias posted:

For each server, tattoo the password on one butt cheek each of two distinct employees, taking care not to have any two employees have the same two servers between them. keep a department spreadsheet of server names to tattooed employees. Do not inform the employee which server their tattoo is for. In the event of an employee departure where that employee has a password, tattoo the 1-2 passwords onto different employees as previously. Enforce key rotation via frequent layoffs and hirings.

this is what you all mean when you're suggesting a team keep rear end, right?

anthonypants posted:

yeah but like, who else are you going to leak it to

theflyingexecutive posted:

department spreadsheets? more like department spreadcheeks

Shifty Pony posted:

leak it to either the Washington Post or The NY Times while letting them know you will give it to the other in X days. let their drive to best their rival with a scoop help keep the story from being sat on.

infernal machines posted:

no, but seriously, grab your ankles, i need to log in.

Phone posted:

reality winner? is this a loving lost season 6 arg?

Phone posted:

reality winner? is this a loving lost season 6 arg?

Phone posted:

A Man With A Plan posted:

It also mentions elsewhere that REALITY WINNER emailed The Intercept from her unclass work terminal, so this probably wasn't going to take too long to figure out regardless of the OCR hijinks.

anthonypants posted:

also i posted this in the grey sec thread and people think it belongs here so here it is again
in the end i got rancid and viewvc set up AND i didn't have to disable selinux or chmod 777 anything

anthonypants posted:

i posted this on a gist and on medium since i wasn't sure which platform i liked better. i think i got the creator of rconfig to create a medium account so he could write a comment, telling me that my post was a "god awful long boring rant" and "not credible" since i should've contributed to the project instead. i guess i should've made it clearer that i explicitly chose not to do that considering what a dumpster fire it is.

quote:

Back in April 2016, we released the paper PLATINUM: Targeted attacks in South and Southeast Asia, where we detailed the tactics, techniques, and procedures of the PLATINUM activity group.

We described a group that was well-resourced and quickly adopted advanced techniques, such as hot patching to silently inject code into processes. They used hot patching even when traditional injection techniques could have been sufficient and less costly to develop.

Since the 2016 publication, Microsoft has come across an evolution of PLATINUM’s file-transfer tool, one that uses the Intel® Active Management Technology (AMT) Serial-over-LAN (SOL) channel for communication. This channel works independently of the operating system (OS), rendering any communication over it invisible to firewall and network monitoring applications running on the host device. Until this incident, no malware had been discovered misusing the AMT SOL feature for communication.

Upon discovery of this unique file-transfer tool, Microsoft shared information with Intel, and the two companies collaborated to analyze and better understand the purpose and implementation of the tool. We confirmed that the tool did not expose vulnerabilities in the management technology itself, but rather misused AMT SOL within target networks that have already been compromised to keep communication stealthy and evade security applications.

anthonypants posted:

https://twitter.com/andreasklinger/status/872244649611505664

why won't they leave britney alone :'(

BangersInMyKnickers posted:

these fuckers

https://nextnine.com

are claiming that they use 1024-bit FIPS compliant symmetric crypto for what is effectively an always-on backdoor tunnel with no real security controls or isolation model that's deployed on what I assume is a terrifying number of SCADA environments. This is apparently the "next evolution" in the industrial control security model which was "Just leave it publicly accessible, no firewall"

Lain Iwakura posted:

i should bait them into contacting me professionally

BangersInMyKnickers posted:

no don't worry we have Security Numbers over One Thousand! That's much higher than the 256 securities our competitors talk about!

anthonypants posted:

what if you could run sql commands directly against crt.sh, to do custom queries or w/e

well, https://groups.google.com/forum/#!msg/crtsh/sUmV0mBz8bQ/K-6Vymd_AAAJ