Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
redleader
Aug 18, 2005

Engage according to operational parameters
so browsers, huh

https://twitter.com/anttiviljami/status/816585860661518336

Adbot
ADBOT LOVES YOU

redleader
Aug 18, 2005

Engage according to operational parameters
chrome's stored credit card stuff is actually super helpful when you're slamming through a buttload of test orders on your bespoke ecommerce system. and yeah, in my experience you still need to manually enter the cvv

i do wonder how many regular people use chrome cc autofill

redleader
Aug 18, 2005

Engage according to operational parameters

Subjunctive posted:

just post your resume here and a steadfast operator will notice it in the database

redleader
Aug 18, 2005

Engage according to operational parameters
remember, always feel free to roll your own crypto

redleader
Aug 18, 2005

Engage according to operational parameters
have there been any reports of malware taking advantage of av vulnerabilities?

redleader
Aug 18, 2005

Engage according to operational parameters

Shaggar posted:

a4 is trash for idiots. letter is better

why

redleader
Aug 18, 2005

Engage according to operational parameters
ah yes, for when i need to manually measure out my own pages from a larger sheet

redleader
Aug 18, 2005

Engage according to operational parameters
the aspect ratio is a fair but personal judgement. i can't say i've ever been triggered by the physical dimensions of a piece of paper

redleader
Aug 18, 2005

Engage according to operational parameters
i guess we have an ad hoc, informal backup test thing going on whereby most devs grab a recent copy of whatever production database they need and restore it on their laptops

redleader
Aug 18, 2005

Engage according to operational parameters

OSI bean dip posted:

have been on hiatus from twitter as of late

https://twitter.com/afreak/status/829927734344249345

https://twitter.com/afreak/status/829926867499048966

here's some cool poo poo i did today

this is badass

redleader
Aug 18, 2005

Engage according to operational parameters
apparently it's possible to detect if a file is vulnerable to this type of attack, so i guess that's good

quote:

counter-cryptanalysis... is able to detect known and unknown SHA-1 cryptanalytic collision attacks given just a single file from a colliding file pair

crypto is kinda voodoo to me. is there a tldr on this for an idiot anywhere? could this detection be bypassed?

redleader
Aug 18, 2005

Engage according to operational parameters
i'm not surprised that ragel was the origin of buttbleed. it's an unreadable garbage language that compiles to garbage c

redleader
Aug 18, 2005

Engage according to operational parameters

Truga posted:

the s in iot stands for security

redleader
Aug 18, 2005

Engage according to operational parameters
homegrown crypto question: how bad is it if you can narrow down the range of possible values for the IV based on, say, the current date/time?

redleader
Aug 18, 2005

Engage according to operational parameters
gently caress i love it when browsers decide to drop trust in a ca

redleader
Aug 18, 2005

Engage according to operational parameters
peentesting

redleader
Aug 18, 2005

Engage according to operational parameters
haha no loving way

redleader
Aug 18, 2005

Engage according to operational parameters
eh, seems like there aren't really any compelling reasons to choose either standard or nonstandard ports over the other option

redleader
Aug 18, 2005

Engage according to operational parameters

5


can't wait for various governments to crack down on this poo poo. it's gonna happen.

redleader
Aug 18, 2005

Engage according to operational parameters

Powerful Two-Hander posted:

security fuckup megathread: /* should we even bother? */.

this is too good

redleader
Aug 18, 2005

Engage according to operational parameters
and nomx responds


nomx posted:

Number of nomx accounts that have been compromised since inception: 0

Number of Gmail accounts that have been compromised in the United States (from 2014): About 5 million to 24 million depending on source

redleader
Aug 18, 2005

Engage according to operational parameters

Volmarias posted:

I'm not holding my breath.

we managed to regulate doctors, engineers, dentists. computers are too important to modern society to escape this forever, in my dumb and uninformed opinion

redleader
Aug 18, 2005

Engage according to operational parameters
https://twitter.com/Scott_Helme/status/857617936902754304

redleader
Aug 18, 2005

Engage according to operational parameters
turn all computers off imo

redleader
Aug 18, 2005

Engage according to operational parameters

this is iot as gently caress

redleader
Aug 18, 2005

Engage according to operational parameters

loving lol. this is a great future we're building here

redleader
Aug 18, 2005

Engage according to operational parameters

infernal machines posted:

what are the odds that thing is just directly on the internet, no firewall, port 139 flapping in the breeze?

1

redleader
Aug 18, 2005

Engage according to operational parameters
ah yes, XYN nONM

redleader
Aug 18, 2005

Engage according to operational parameters
wouldn't surprise me to learn that amazon are simply big enough to negotiate special deals with cc processors and banks that let them get away with not requiring a cvv

redleader
Aug 18, 2005

Engage according to operational parameters
i like groupon's approach to pci compliance. definitely beats the poo poo out of ours

redleader
Aug 18, 2005

Engage according to operational parameters

Migishu posted:

guys, help, what do I do?


redleader
Aug 18, 2005

Engage according to operational parameters
tavis time is the most terrifying time

redleader
Aug 18, 2005

Engage according to operational parameters
it's cool how there's this giant, freakishly insecure subsystem buried deep in every modern windows installation

redleader
Aug 18, 2005

Engage according to operational parameters

vOv posted:

this is if you can do unauthed reprogramming, if you have to auth then that obviously makes it harder because you can look at who changed it, figure out if their credentials got stolen, etc.

you're expecting non-default, non-root credentials on an embedded medical device?

Adbot
ADBOT LOVES YOU

redleader
Aug 18, 2005

Engage according to operational parameters
the .net reference source has the word 'race' replaced everywhere with four dashes. makes for confusing reading of any threading-related classes

  • Locked thread