Security Fuckup Megathread - v13.69 - plugins may violate privacy

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v13.69 - plugins may violate privacy

«‹›7 »

spankmeister: Jun 15, 2008; Can't post for 8 hours!

fisting by many posted:

krebs released his big expose on the mirai author

https://krebsonsecurity.com/2017/01/who-is-anna-senpai-the-mirai-worm-author/

it's minecraft and anime all the way down

yeah been reading this, it's a lot of words even for krebs

# ¿ Jan 18, 2017 19:55

Adbot: ADBOT LOVES YOU

# ¿ May 21, 2024 05:11

spankmeister: Jun 15, 2008; Can't post for 8 hours!

They make L3 switches which are technically routers I suppose but we're splitting hairs here.

# ¿ Jan 18, 2017 22:14

spankmeister: Jun 15, 2008; Can't post for 8 hours!

i'm DJGPP

# ¿ Jan 18, 2017 22:41

spankmeister: Jun 15, 2008; Can't post for 8 hours!

A Man With A Plan posted:

Cool, just wanted to make sure. My secfuck of the day was some idiot sending possibly the worst phishing attempt I've ever seen to my entire alma mater. Looked like
code:
From: "Dr. University President" <studentname@otherUniversity.edu>
To : "Me" <me@myUniversity.edu>

Dear members of the university,

Please see my attached statement.
<president_statement.pdf>

Sincerely,
Dr. President
Office of the President
The person apparently used their own university email to send out the phishing emails. I wonder how lenient the courts will be.

Probably their account got hijacked because of easy to guess credentials. University email accounts are a popular target for spammers and scammers.

# ¿ Jan 19, 2017 08:02

spankmeister: Jun 15, 2008; Can't post for 8 hours!

OSI bean dip posted:

i was going to make a joke about conscription coming to cyberwar but it's already a thing

We already have "cyber reservists" here.

# ¿ Jan 19, 2017 17:21

spankmeister: Jun 15, 2008; Can't post for 8 hours!

ate all the Oreos posted:

nah he lives in the netherlands

Which university?

if it's a proper uni they should have internet via the Dutch NREN and those guys have proper DDoS mitigation.

So he's probably at a poo poo-tier one.

# ¿ Jan 20, 2017 19:04

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Cocoa Crispies posted:

even then DDoS mitigation can be predicated on the backend actually being able to handle things

like if it's a slow rear end J2EE poo poo with lots of remote stuff and talking to something slow like oracle or mysql you don't need to D your DoS between more than like six attackers that send HTTPS requests

Yeah an L7 attack could work but they have stuff to deal with that as well.

# ¿ Jan 20, 2017 19:34

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Shaggar posted:

part of me wishes the US would standardize national identity management, but the other part knows they'd just gently caress it up horribly.

the us can't do poo poo like that it'd get bogged down by politics and terrible contractors

# ¿ Jan 23, 2017 17:48

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Also while Azure AD would be a decent choice, price concerns notwithstanding, Australian citizens might object to hosting their PII in the US or on systems possibly controlled by a US company under the Patriot Act.

Although Australia being a FVEY member that might be less of an issue.

e: I know the average EU citizen would probably flip their poo poo about hosting their government PII in the US. (Even though most of them share everything anyway through social media.)

spankmeister fucked around with this message at 18:07 on Jan 23, 2017

# ¿ Jan 23, 2017 17:52

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Yeah for all my governments failings they do have actual standards and laws and stuff for storing and processing data.

# ¿ Jan 23, 2017 18:06

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Chalks posted:

Yeah, but they have azure datacenters in the EU so that we don't need to worry about that so much.

Apparently they have two datacenters in Australia as well from looking at their regions list.

Depending on your interpretation of the Patriot Act, the US government could compel Microsoft to hand over data stored in foreign countries.

# ¿ Jan 23, 2017 18:07

spankmeister: Jun 15, 2008; Can't post for 8 hours!

hackbunny posted:

and remember, you heard it first here: it's a Dead Gay Forums Exclusive™ - Where Your Count

# ¿ Jan 24, 2017 08:13

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Automated malware analysis sandboxen often used small disks and XP so it sort of makes sense.

I'd say the malware author is up on the state of the art of malware analysis from a couple of years ago.

# ¿ Jan 24, 2017 11:56

spankmeister: Jun 15, 2008; Can't post for 8 hours!

All I can find so far is a Romanian company that goes by that name, not a Singaporean one.

# ¿ Jan 24, 2017 16:53

spankmeister: Jun 15, 2008; Can't post for 8 hours!

cheese-cube posted:

maybe it's these dinguses only without the owners knowledge http://www.globalsystem-sg.com/? their site is either a honey pot or it's already been completely compromised (massive surface area including mysql and VNC, looks like a server 2k3 box exposed completely to the net without fw). also their "mail server" mail.globalsystem-sg.com is equally exposed.

funny thing i'm p sure i saw their logo around pioneer shipyard in SG last time i was there

Ah yeah maybe! My idea was to look in the singaporean chamber of commerce but their web sight seems broken.

# ¿ Jan 24, 2017 18:53

spankmeister: Jun 15, 2008; Can't post for 8 hours!

There's some good stuff in the Mirai source code:

code:

                table_unlock_val(TABLE_KILLER_ANIME);
                // If path contains ".anime" kill.
                if (util_stristr(realpath, rp_len - 1, table_retrieve_val(TABLE_KILLER_ANIME, NULL)) != -1)
                {
                    unlink(realpath);
                    kill(pid, 9);
                }
                table_lock_val(TABLE_KILLER_ANIME);

Seems that Mirai was a variant of killallnerds.exe all along.

# ¿ Jan 26, 2017 11:20

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Security Fuckup Megathread - v13.2 - Naive, I know, but at least I can play my video games.

# ¿ Jan 26, 2017 17:31

spankmeister: Jun 15, 2008; Can't post for 8 hours!

OSI bean dip posted:

pls do not d&d this thread

it's not d&d it's just alternative secfucks

# ¿ Jan 26, 2017 18:13

spankmeister: Jun 15, 2008; Can't post for 8 hours!

you just downloaded a bunch of malware good job

# ¿ Jan 28, 2017 11:04

spankmeister: Jun 15, 2008; Can't post for 8 hours!

vOv posted:

http://www.thelocal.at/20170128/hotel-ransomed-by-hackers-as-guests-locked-in-rooms

the latest innovation in wizardsecurity: just use regular locks

# ¿ Jan 29, 2017 00:19

spankmeister: Jun 15, 2008; Can't post for 8 hours!

PC LOAD A4

# ¿ Jan 29, 2017 00:24

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Midjack posted:

this is almost always the right answer. electronic locks are always expensive, complex, and lovely; the only reason to use them is a massive facility with huge turnover, like a hotel where you can replace a lost magnetic key for a nickel and don't have to touch the door to invalidate the old one rather than pay $25 to install a new cylinder

I agree but you have to appreciate the irony and sheer ridiculousness of the fact that using regular old door locks is considered "innovative"

# ¿ Jan 29, 2017 01:57

spankmeister: Jun 15, 2008; Can't post for 8 hours!

OSI bean dip posted:

https://twitter.com/whitequark/status/825944162180677633

I didn't know tcpdump was an adobe product.

# ¿ Jan 30, 2017 08:59

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Jabor posted:

I'm still not sure why people habitually use -f when deleting stuff.

Because it complains about directories otherwise.

# ¿ Feb 1, 2017 08:25

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Powaqoatse posted:

uh thats the -r

-f is force

learn 2 linux

smdh

# ¿ Feb 1, 2017 08:32

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Cybernetic Vermin posted:

encountering systems now and then where rm has been aliased to rm -i, end up just doing -f every time rather than bothering to discover that. meaning to delete a non-writeable file is far more common than being actually warded away from deleting one. not that clear what *not* having -f ever gives you, for example in this case i imagine they could have deleted the database just fine without it

Yeah that's it p much. A lot of distros have rm aliased to rm -i

# ¿ Feb 1, 2017 08:47

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Cryptkeeper go p p

# ¿ Feb 1, 2017 15:34

spankmeister: Jun 15, 2008; Can't post for 8 hours!

ate all the Oreos posted:

that's actually what i'm tasked with implementing but i'm not going to do it by loading an external website through a weird proprietary browser

bonus:

after going through their documentation it seems the wifi/ethernet versions of this printer have a telnet server enabled by default with a root password of "public"

also to connect to it the first time you "set a temporary IP address" which apparently means loving with your ARP table and then pinging it

i mean i guess that works but...

Haha that gives me flashbacks of setting up ST microconnects, you had to do the same thing.

# ¿ Feb 1, 2017 21:58

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Fix the netcode pls my mario party games always desync.

# ¿ Feb 1, 2017 23:58

spankmeister: Jun 15, 2008; Can't post for 8 hours!

I wonder if an old star LC-20 or w/e would still work on win 10

# ¿ Feb 2, 2017 00:49

spankmeister: Jun 15, 2008; Can't post for 8 hours!

cinci zoo sniper posted:

fix your country, spankmeister

Ah good it hit international media, shame about the Wilders pic though.

Wilders is gonna Make The Netherlands Great Again

# ¿ Feb 2, 2017 14:48

spankmeister: Jun 15, 2008; Can't post for 8 hours!

"Dutch officials are already on alert for signs of possible cyber hacking "

CYBER

HACKING

# ¿ Feb 2, 2017 14:50

spankmeister: Jun 15, 2008; Can't post for 8 hours!

ate all the Oreos posted:

why is the Netherlands apparently filled with Hunger Games people

Wilders is Trump lite. He has weird hair hangups too lmao

# ¿ Feb 2, 2017 15:01

spankmeister: Jun 15, 2008; Can't post for 8 hours!

CommunistPancake posted:

I assume it says something like "industry standard encryption," so that means they can get away with 3DES.

Which would be dumb, but not completely terrible.

# ¿ Feb 4, 2017 02:16

spankmeister: Jun 15, 2008; Can't post for 8 hours!

At least this guy prints out harmless messages instead of weev and his nazi propaganda.

spankmeister fucked around with this message at 12:59 on Feb 5, 2017

# ¿ Feb 5, 2017 12:57

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Capcom probably hosed up the implementation of the DRM and now denuvo is getting the bad press lol

# ¿ Feb 6, 2017 08:26

spankmeister: Jun 15, 2008; Can't post for 8 hours!

I built an TRNG based on nuclear decay and the thing with natural sources of entropy is that they're either very slow, or it's fast but the quality of randomness isn't very good. Both things are solvable with seeding a CSPRNG with the output of a TRNG. This is how most of these devices are implemented.

# ¿ Feb 7, 2017 00:34

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Meat Beat Agent posted:

universal serial butt

# ¿ Feb 7, 2017 16:47

spankmeister: Jun 15, 2008; Can't post for 8 hours!

Stop making GBS threads this thread up with D&D'ing

# ¿ Feb 12, 2017 09:50

Adbot: ADBOT LOVES YOU

# ¿ May 21, 2024 05:11

spankmeister: Jun 15, 2008; Can't post for 8 hours!

power botton posted:

the weakest part of AD is all the servers and desktops storing kerberos tickets and hashes in memory to get retrieved with mimikatz et al, but MS keeps adding new features to minimize that. the chance of your average Fortune 500/1000 enabling them is nonexistent but hey.

the adsecurity.org guy cares way too much about AD security and has easy to read and well cited articles if you want to read more.

don't post shaggar's blog

Hah the shaggar wishes he would be that good

# ¿ Feb 12, 2017 15:12

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v13.69 - plugins may violate privacy

«‹›7 »