Security Fuckup Megathread - v13.69 - plugins may violate privacy

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v13.69 - plugins may violate privacy

AggressivelyStupid: Jan 9, 2012

Tayter Swift posted:

Security
Hardware for the
Internet of
Things

# ¿ Jan 8, 2017 15:00

Adbot: ADBOT LOVES YOU

# ¿ May 5, 2024 14:43

AggressivelyStupid: Jan 9, 2012

Jewel posted:

oh my God, furbies have an accessible debug menu and it shows up in their eyes and the future owns

http://hackaday.com/2017/01/21/taking-control-of-your-furby/

"[Jeija] is able to add custom audio to the official DLC files and upload them into the Furby.

[Jeija] points out the all this was done without taking a Furby apart, only by sniffing the Bluetooth communication between the robot and the controlling app"

I can't wait to see furbies get remotely hacked

This rules but I can't believe this is the fourth furby

# ¿ Jan 24, 2017 22:06

AggressivelyStupid: Jan 9, 2012

Fuzzy Mammal posted:

https://assets.documentcloud.org/documents/3424611/Read-the-Trump-administration-s-draft-of-the.pdf

who knows if it's real

The Cyber Realm

# ¿ Jan 31, 2017 04:20

AggressivelyStupid: Jan 9, 2012

Wheany posted:

keep rear end

# ¿ Feb 3, 2017 20:16

AggressivelyStupid: Jan 9, 2012

Just use lynx, op

# ¿ Feb 15, 2017 20:09

AggressivelyStupid: Jan 9, 2012

My Linux Rig posted:

why does anyone still use LastPass, KeePass and SpiderOak are literally all you need and it's actual secure

# ¿ Feb 27, 2017 21:28

AggressivelyStupid: Jan 9, 2012

I rolled my own cloud storage

# ¿ Feb 27, 2017 21:30

AggressivelyStupid: Jan 9, 2012

anthonypants posted:

https://www.youtube.com/watch?v=xL-UfLci6_A&t=50s

why

# ¿ Feb 27, 2017 22:57

AggressivelyStupid: Jan 9, 2012

Bernstein is a wild rear end in a top hat jesus loving christ

# ¿ Mar 17, 2017 13:44

AggressivelyStupid: Jan 9, 2012

On a scale of 1 to 10 how bad is storing SSNs in plaintext? I'm asking for a friend.

E: along with pretty much every other piece of PII

# ¿ Mar 17, 2017 16:36

AggressivelyStupid: Jan 9, 2012

For clarification, I'm not the one storing them. If it were up to me I'd not touch that poo poo because I don't want to get owned and have it be my fault for being a big dumb idiot.

I'm just looking at my own unencrypted ssn right now and am kinda annoyed but resigned to the fact that I already am owned

# ¿ Mar 17, 2017 16:53

AggressivelyStupid: Jan 9, 2012

hifi posted:

Not wrong tho

# ¿ Mar 18, 2017 18:00

AggressivelyStupid: Jan 9, 2012

Wiggly Wayne DDS posted:

p good demo https://www.youtube.com/watch?v=yPZmiRi_c-o

paper: https://cmaurice.fr/pdf/ndss17_maurice.pdf

# ¿ Mar 31, 2017 09:45

AggressivelyStupid: Jan 9, 2012

anthonypants posted:

check out this thread https://twitter.com/kennethlipp/status/849464271104815104

I need this in my life right now

# ¿ Apr 5, 2017 18:41

AggressivelyStupid: Jan 9, 2012

im so excited

# ¿ Apr 5, 2017 18:55

AggressivelyStupid: Jan 9, 2012

https://twitter.com/kennethlipp/status/849684722150256648

# ¿ Apr 5, 2017 19:07

AggressivelyStupid: Jan 9, 2012

Cocoa Crispies posted:

unless you mean "cops" in which case you can just say "pigs"

# ¿ Apr 21, 2017 20:57

AggressivelyStupid: Jan 9, 2012

Powerful Two-Hander posted:

security fuckup megathread: /* should we even bother? */.

# ¿ Apr 27, 2017 10:27

AggressivelyStupid: Jan 9, 2012

wiper no wiping

# ¿ May 13, 2017 13:32

AggressivelyStupid: Jan 9, 2012

https://twitter.com/mikko/status/869539641090867200

# ¿ May 30, 2017 18:15

AggressivelyStupid: Jan 9, 2012

spankmeister posted:

I should point out that in this case it's the crappy implementation of Blackboard that the University of Amsterdam did that causes most of these issues, not Blackboard itself...

they're probably not alone in crappy blackboard implementations though

# ¿ May 30, 2017 20:31

AggressivelyStupid: Jan 9, 2012

Let's Play/Walkthrough

For the sake of this walkthrough, we assume you are a paranoid user who does not trust any one keystore with your credentials. You decide to spread your secrets across three keystores (at least two are required to use Horcrux) across three distinct datacenter regions in Amazon Web Services (AWS). You then plan to make a Facebook account with Horcrux and successfully login.

:thunk:

# ¿ Jun 19, 2017 15:22

Adbot: ADBOT LOVES YOU

# ¿ May 5, 2024 14:43

AggressivelyStupid: Jan 9, 2012

Lain Iwakura posted:

What is the worst that can happen? I am sure it has the highest quality code.

JavaScript code:


     // unique salt?
     const key = crypto.pbkdf2Sync(auth, '0945jv209j252x5', 100000, 512, 'sha512');

     console.log("Super secret auth key is: " + key.toString('hex') + "\n"); // '3745e48...aa39b34'

i'm the unique salt?

# ¿ Jun 19, 2017 15:31

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v13.69 - plugins may violate privacy