Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
cinci zoo sniper
Mar 15, 2013




rest in piss, symantec. one year to rebuild the ca infrastructure from zero

Adbot
ADBOT LOVES YOU

duz
Jul 11, 2005

Come on Ilhan, lets go bag us a shitpost



that'll make defcon: beijin more sporting

goddamnedtwisto posted:

i have to ask what a "ticket clicker" is because it sort of sounds like victorian slang for a prostitute as it is

there's groups of people with small printed cards that are ads for hookers on the street corners, they make a clicking noise with the card to get you to make eye contact so they can give you one

duz fucked around with this message at 16:01 on Jul 31, 2017

maskenfreiheit
Dec 30, 2004
https://twitter.com/ur_ninja/status/891833262502420480

ok NOW don't bring your phone to Defcon

LP0 ON FIRE
Jan 25, 2006

beep boop
anyone get one of these yet?



so if one of your friend's accounts are hacked, can't they make login attempts on your account, and if by chance you have this preference set, they can use the code to get into your account and change your password immediately, compromising your account?

FCKGW
May 21, 2006

goddamnedtwisto posted:

i have to ask what a "ticket clicker" is because it sort of sounds like victorian slang for a prostitute as it is

dudes on the strip hand out cards for hookers or strip shows or whatever. they smack the cards together to snap them while in their hands, making a clicking sound to get your attention.

https://www.youtube.com/watch?v=GjIQmQ0k534

I've always wondered if they get paid by the hour or by how many cards they hand out, kinda like how farm workers get paid by the harvest.

hackbunny
Jul 22, 2007

I haven't been on SA for years but the person who gave me my previous av as a joke felt guilty for doing so and decided to get me a non-shitty av
are the cards collectible?

FCKGW
May 21, 2006

hackbunny posted:

are the cards collectible?

yeah they're actually those Iraq war playing cards

maskenfreiheit
Dec 30, 2004

FCKGW posted:

dudes on the strip hand out cards for hookers or strip shows or whatever. they smack the cards together to snap them while in their hands, making a clicking sound to get your attention.

https://www.youtube.com/watch?v=GjIQmQ0k534

I've always wondered if they get paid by the hour or by how many cards they hand out, kinda like how farm workers get paid by the harvest.

couldn't they just throw out the cards?

also, bingo:

https://twitter.com/shanerice/status/892042404907425794

flakeloaf
Feb 26, 2003

Still better than android clock

unless it is a festering landfill of diapers you cannot improve it with the addition of blockchain technology

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

flakeloaf posted:

unless it is a festering landfill of diapers you cannot improve it with the addition of blockchain technology

How would blockchains improve festering diaper landfills? :confused:

Cybernetic Vermin
Apr 18, 2005

LP0 ON FIRE posted:

anyone get one of these yet?



so if one of your friend's accounts are hacked, can't they make login attempts on your account, and if by chance you have this preference set, they can use the code to get into your account and change your password immediately, compromising your account?

yeah, this one seems iffy. you need to be able to name the trusted friend as you log in to your account to get an url to send to that friend, but i can't see any reason why this would not let a compromised account then trawl through that procedure for each friend to see if someone trusts you. may be missing something in the procedure.

wolrah
May 8, 2006
what?

Cybernetic Vermin posted:

yeah, this one seems iffy. you need to be able to name the trusted friend as you log in to your account to get an url to send to that friend, but i can't see any reason why this would not let a compromised account then trawl through that procedure for each friend to see if someone trusts you. may be missing something in the procedure.

I got that a week or two back and IIRC the reason it says 3-5 trusted friends is that it requires multiple people to approve before you can regain access to your account.

LP0 ON FIRE
Jan 25, 2006

beep boop

wolrah posted:

I got that a week or two back and IIRC the reason it says 3-5 trusted friends is that it requires multiple people to approve before you can regain access to your account.

ah, okay. well i suppose that makes it better

communism bitch
Apr 24, 2009
Just send a target fb friend requests from a few dummy accounts over a few weeks/months, then request a pw reset and nominate your own dummies for verification.

My sister has over a thousand friends on FB. I don't think there's much discrimination there, she probably just adds everybody.
Now my sis is for sure a confirmed moron, but i don't think she's much worse than average.

Subjunctive
Sep 12, 2006

✨sparkle and shine✨

you have to select specific trusted friends and be able to reach them out of band

Optimus_Rhyme
Apr 15, 2007

are you that mainframe hacker guy?


LOL here I thought DEFCON hadn't quite jumped the shark just yet they go ahead and prove me wrong.

flakeloaf
Feb 26, 2003

Still better than android clock

the people who would cheerfully send money orders to nigeria probably shouldn't be the same people in charge of unlocking my account

LP0 ON FIRE
Jan 25, 2006

beep boop

communism bitch posted:

Just send a target fb friend requests from a few dummy accounts over a few weeks/months, then request a pw reset and nominate your own dummies for verification.

what does that do? you're reactivating your dummy account with other dummy accounts?

communism bitch
Apr 24, 2009

LP0 ON FIRE posted:

what does that do? you're reactivating your dummy account with other dummy accounts?

No, you make a bunch of dummy accts, friend them to the account you want to compromise, then (if that works) try to password reset the target account, which requires you to name some trusted fb friends for id verification. If you nominate the dummies that you control you can get the codes needed to reset the target account pw.

But if the trusted friends need to be specifically selected in advance by the legit account holder it'd be super convoluted and probably not possible anyway.

Munkeymon
Aug 14, 2003

Motherfucker's got an
armor-piercing crowbar! Rigoddamndicu𝜆ous.



flakeloaf posted:

unless it is a festering landfill of diapers you cannot improve it with the addition of blockchain technology

you can but you say Merkle tree to camouflage from coiners

also you 'get to' explain how a Merkle tree works to a lawmaker which well good loving luck with that one

haveblue
Aug 15, 2005



Toilet Rascal

communism bitch posted:

But if the trusted friends need to be specifically selected in advance by the legit account holder it's be super convoluted and probably not possible anyway.

yeah it's this. full flow here: https://www.facebook.com/help/213343062033160

even if the attacker requests the reset and controls all the friend accounts the original account must have explicitly given the friend accounts recovery privs beforehand

haveblue fucked around with this message at 17:57 on Jul 31, 2017

Cybernetic Vermin
Apr 18, 2005

wolrah posted:

I got that a week or two back and IIRC the reason it says 3-5 trusted friends is that it requires multiple people to approve before you can regain access to your account.

ah, sweet, that's not a bad approach then. should mostly be safer than the typical security question or straight email reset, in that i think people understand the trust involved on a gut level to a far greater extent than they understand what people can e.g. guess their way into

LP0 ON FIRE
Jan 25, 2006

beep boop

communism bitch posted:

No, you make a bunch of dummy accts, friend them to the account you want to compromise, then (if that works) try to password reset the target account, which requires you to name some trusted fb friends for id verification. If you nominate the dummies that you control you can get the codes needed to reset the target account pw.

But if the trusted friends need to be specifically selected in advance by the legit account holder it'd be super convoluted and probably not possible anyway.

ah, i see. the chances of that are probably fairly low, but probably still possible in numbers. those dummy accounts would have to be important enough to the real user to give them privileges

wolrah
May 8, 2006
what?

communism bitch posted:

No, you make a bunch of dummy accts, friend them to the account you want to compromise, then (if that works) try to password reset the target account, which requires you to name some trusted fb friends for id verification. If you nominate the dummies that you control you can get the codes needed to reset the target account pw.

But if the trusted friends need to be specifically selected in advance by the legit account holder it'd be super convoluted and probably not possible anyway.

They have to be selected in advance. That's what this message is prompting the user to do.

edit:
https://www.facebook.com/notes/facebook-security/introducing-trusted-contacts/10151362774980766/

quote:

Using Trusted Contacts

Once you've set up your trusted contacts, if you ever have trouble logging in, you'll have your trusted contacts as an option to help. You just need to call your trusted contacts and let them know you need their help to regain access to your account. Each of them can get a security code for you with instructions on how to help you. Once you get three security codes from your trusted contacts, you can enter them into Facebook to recover your account.

So yeah, it requires codes from at least three people, who you've had to preselect and then contact out of band, before it'll let you back in. It seems pretty solid to me.

wolrah fucked around with this message at 20:16 on Jul 31, 2017

apseudonym
Feb 25, 2011


:cripes: DEFCON what happened to you claiming to be against repressive governments.

LP0 ON FIRE
Jan 25, 2006

beep boop
DEFCON is now too commercial for me

Subjunctive
Sep 12, 2006

✨sparkle and shine✨

apseudonym posted:

:cripes: DEFCON what happened to you claiming to be against repressive governments.

changing the system from inside!

Munkeymon
Aug 14, 2003

Motherfucker's got an
armor-piercing crowbar! Rigoddamndicu𝜆ous.



Subjunctive posted:

changing the system from inside!

that's a good description of what the code Chinese customs will slip onto every attendees phone, laptop and flash drive will do once it gets back home yeah

Bunni-kat
May 25, 2010

Service Desk B-b-bunny...
How can-ca-caaaaan I
help-p-p-p you?

Everyone who goes is gonna get arrested.

Workaday Wizard
Oct 23, 2009

by Pragmatica

Avenging_Mikon posted:

Everyone who goes is gonna get arrested.

literally the hundred flowers strategy lol

e:https://en.m.wikipedia.org/wiki/Hundred_Flowers_Campaign

apseudonym
Feb 25, 2011

Subjunctive posted:

changing the system from inside!

That's why they all went into working for government contractors or selling vulns.

ate shit on live tv
Feb 15, 2004

by Azathoth

goddamnedtwisto posted:

i have to ask what a "ticket clicker" is because it sort of sounds like victorian slang for a prostitute as it is

They are people hired by the various less-then-legal "escort services" that exist in tourist hot-spots like vegas. They carry a stack of little cardboard cards with phone numbers and pictures of scantily clad/naked women on them and they are paid to pass them out to as many tourists as possible. They will be standing on street corners on the strip and wherever there is a lot of foot traffic. They will knock the cards together to make a "clicking" noise to get clueless/gullible tourists attention, and then force a card into their hand. If one of these people finds a mark then all the rest in the area will rush over to give that guy a card as well.

Pretty much only first-time tourists or bachelor/ette parties grab those things. Everyone else ignores them.

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

ate poo poo on live tv posted:

They are people hired by the various less-then-legal "escort services" that exist in tourist hot-spots like vegas. They carry a stack of little cardboard cards with phone numbers and pictures of scantily clad/naked women on them and they are paid to pass them out to as many tourists as possible. They will be standing on street corners on the strip and wherever there is a lot of foot traffic. They will knock the cards together to make a "clicking" noise to get clueless/gullible tourists attention, and then force a card into their hand. If one of these people finds a mark then all the rest in the area will rush over to give that guy a card as well.

Pretty much only first-time tourists or bachelor/ette parties grab those things. Everyone else ignores them.
i like the ones that get left on the ground and look like a folded up $100 bill on one side

ate shit on live tv
Feb 15, 2004

by Azathoth

anthonypants posted:

i like the ones that get left on the ground and look like a folded up $100 bill on one side

Whenever I see those it's normally cultist christian pamphlets instead of beautiful women who want to talk to me now.

Shame Boy
Mar 2, 2010

ate poo poo on live tv posted:

Whenever I see those it's normally cultist christian pamphlets instead of beautiful women who want to talk to me now.

for some reason all the cultist christian ones i've found were for small amounts like $1

also last time i found one it was actually in a very heavily christian town already so uh good job going out of your way to find new prospects you guys

BattleMaster
Aug 14, 2000

ate poo poo on live tv posted:

They are people hired by the various less-then-legal "escort services" that exist in tourist hot-spots like vegas. They carry a stack of little cardboard cards with phone numbers and pictures of scantily clad/naked women on them and they are paid to pass them out to as many tourists as possible. They will be standing on street corners on the strip and wherever there is a lot of foot traffic. They will knock the cards together to make a "clicking" noise to get clueless/gullible tourists attention, and then force a card into their hand. If one of these people finds a mark then all the rest in the area will rush over to give that guy a card as well.

Pretty much only first-time tourists or bachelor/ette parties grab those things. Everyone else ignores them.

I don't understand the scam here, is it like those guys who hand you a mix CD and demand money for it?

Shame Boy
Mar 2, 2010

BattleMaster posted:

I don't understand the scam here, is it like those guys who hand you a mix CD and demand money for it?

it's not really a direct scam it's just forcing you to take advertising, presumably so when you're drunk later you can go all "woo let's order the pretty lady on this card"

BattleMaster
Aug 14, 2000

I feel like that's an entirely avoidable situation even if you're green or gullible

Proteus Jones
Feb 28, 2013



ate all the Oreos posted:

for some reason all the cultist christian ones i've found were for small amounts like $1

also last time i found one it was actually in a very heavily christian town already so uh good job going out of your way to find new prospects you guys

But those are the wrong kind of christian. Our kind will get raptured, not those other, wrong ones.

Adbot
ADBOT LOVES YOU

Ciaphas
Nov 20, 2005

> BEWARE, COWARD :ovr:


BattleMaster posted:

I don't understand the scam here, is it like those guys who hand you a mix CD and demand money for it?

there's no scam at all, just kind of a skeezy way to call attention to a service they can't legally sell

(unless you drive some 60 miles out to Pahrump and peruse an actually legal brothel but they don't advertise that)

(e) maybe skeezy's not really the right word? whatever

  • Locked thread