Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
AARP LARPer
Feb 19, 2005

THE DARK SIDE OF SCIENCE BREEDS A WEAPON OF WAR

Buglord
right on, thanks!

Adbot
ADBOT LOVES YOU

spit on my clit
Jul 19, 2015

by Cyrano4747
https://twitter.com/ABCPolitics/status/879720646699229185

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum
five pages, a new record

AARP LARPer
Feb 19, 2005

THE DARK SIDE OF SCIENCE BREEDS A WEAPON OF WAR

Buglord

uh...i've been to many a library conference and depending on the crowd, they tend to be a bunch of librarians pissing and moaning about how to get the respect they deserve and to prove their worth to the world. ala is better than most but still ain't nobody talkin' about archiving at these things and internet privacy to a librarian means putting a polarized screen on the desktops so that their patrons can continue to watch rape porn in the childrens room

Wiggly Wayne DDS
Sep 11, 2010



i'll get out the stick i swear

spit on my clit
Jul 19, 2015

by Cyrano4747
I just thought it was funny, i'm sorry.

Wiggly Wayne DDS
Sep 11, 2010



more than just a rumour me-doc are saying they're spreading it http://www.me-doc.com.ua/vnimaniyu-polzovateley

and maersk use me-doc

https://twitter.com/wanapagan/status/879769249715286016

in the possibility that this was somehow meant to be contained to ukraine i have serious questions. like where the hell are any attempts at containing it

Workaday Wizard
Oct 23, 2009

by Pragmatica
maersk got popped

Workaday Wizard
Oct 23, 2009

by Pragmatica
also rosneft

sucks to be an oil company IT right now

Cocoa Crispies
Jul 20, 2001

Vehicular Manslaughter!

Pillbug

Wiggly Wayne DDS posted:

eh i never do defcon (nor ever have), rarely anything of value. based on their speaker page for this year there's only a handful of interesting talks, and even then it's just further details of public research (sha-1 collision)

yeah they didn't accept my talk but i haven't been to a talk there in over five years

(go for contests and the friends you only see once a year)

Shifty Pony
Dec 28, 2004

Up ta somethin'


doesn't it only spread via SMB? that's some level of containment. it probably jumped out of Ukraine on VPNs or that one computer in an organization that was used to do business in Ukraine and had the accounting software on it.

if you want to get a bit :tinfoil: Ukraine has basically become a live fire bombing range for Russian cyber weapons and "loving every company doing business with the Ukrainian government so people think twice about such associations in the future" would be kind of be a plus as far as the Russian government is concerned.

on the other hand you would expect the government to not run the risk of hitting Rosneft.

fishmech
Jul 16, 2006

by VideoGames
Salad Prong

Optimus_Rhyme posted:

"Hi, this is you bank calling. We've had some gently caress up with a new teller. Can you take a picture of your check and confirm your account number is 443567843?"

"how do i take a picture?"
"ok here you go *picture of check from their grandma from 1998*"
"i tried faxing it but it didn't work"
"ok here's my real check *picture of parking ticket or something that doesn't look like a check at all*"

Shifty Pony
Dec 28, 2004

Up ta somethin'


what the gently caress...

https://twitter.com/0xAmit/status/879778335286452224

https://twitter.com/0xAmit/status/879789734469488642

Ulf
Jul 15, 2001

FOUR COLORS
ONE LOVE
Nap Ghost
thats great! see you all again in a month

flakeloaf
Feb 26, 2003

Still better than android clock

i'll be the version that wipes out everything if that file exists

Shifty Pony
Dec 28, 2004

Up ta somethin'


Ulf posted:

thats great! see you all again in a month

no you see this solved the problem forever and nothing bad will ever happen again.

Shame Boy
Mar 2, 2010


this sounds suspiciously like one of those old "prank" articles that were like "you should delete system32 because that means your system has 32 viruses!!!!"

aardvaard
Mar 4, 2013

you belong in the bog of eternal stench

no it's because bill gates added system32 to make the computer slower to force people to upgrade windows, dummy

Subjunctive
Sep 12, 2006

✨sparkle and shine✨

if you want to avoid notpetra, why not just patch to current? does it use undisclosed vulns?

scottch
Oct 18, 2003
"It appears my wee-wee's been stricken with rigor mortis."
it's using wmi and psexec with shared creds to spread to local subnets in addition to exploiting ms17010

Daman
Oct 28, 2011
when is there going to be a patch that alerts people to horrifically hosed up AD setups

Cocoa Crispies
Jul 20, 2001

Vehicular Manslaughter!

Pillbug
https://twitter.com/pinboard/status/879858163478011904

Carbon dioxide
Oct 9, 2012

I ordered some stuff from a webshop and had it delivered to a pick-up point in a local supermarket because otherwise I wasn't going to be home to get it from the delivery person.

Because of the ransomware, the delivery company was a day late with sending me the e-mail saying the package is ready to be picked up. This malware is truly evil because I'm getting stuff a day later.

That was my story.

Moo Cowabunga
Jun 15, 2009

[Office Worker.




wtf old thread didn't make it to 219

Thanks Ants
May 21, 2004

#essereFerrari


we're taking this one up to 420 to make up for it

syscall girl
Nov 7, 2009

by FactsAreUseless
Fun Shoe

Thanks Ants posted:

we're taking this one up to 420 to make up for it

we can do it!


i attempted to re-open infernal machine's opsec thread to vent political nonsense here

https://forums.somethingawful.com/showthread.php?threadid=3825132

spankmeister
Jun 15, 2008






https://steemit.com/shadowbrokers/@theshadowbrokers/theshadowbrokers-monthly-dump-service-july-2017 posted:

TheShadowBrokers is having special invitation message for “doctor” person theshadowbrokers is meeting on Twitter. “Doctor” person is writing ugly tweets to theshadowbrokers not unusual but “doctor” person is living in Hawaii and is sounding knowledgeable about theequationgroup. Then “doctor” person is deleting ugly tweets, maybe too much drinking and tweeting? Is very strange, so theshadowbrokers is doing some digging. TheShadowBrokers is thinking “doctor” person is former EquationGroup developer who built many tools and hacked organization in China. TheShadowBrokers is thinking “doctor” person is co-founder of new security company and is having much venture capital. TheShadowBrokers is hoping “doctor” person is deciding to subscribe to dump service in July. If theshadowbrokers is not seeing subscription payment with corporate email address of doctor@newsecuritycompany.com then theshadowbrokers might be taking tweets personally and dumping data of “doctor” persons hacks of China with real id and security company name. TheShadowBrokers is thinking this outcome may be having negative financial impact on new security companies international sales, so hoping “doctor” person and security company is making smart choice and subscribe. But is being “doctor” persons choice. Is not being smart choice to be making ugly tweets with enough personal information to DOX self AND being former equation group AND being co-founder of security company.

Straight up blackmail lmao

Wiggly Wayne DDS
Sep 11, 2010



microsoft have a good writeup on petya https://blogs.technet.microsoft.com/mmpc/2017/06/27/new-ransomware-old-techniques-petya-adds-worm-capabilities/

no confirmation for the email vector

waterhole attack being mentioned though
https://twitter.com/craiu/status/880011103161524224

so far the petya/notpetya arguments are on the dropper, which has changed in the past, so further analysis required

spankmeister
Jun 15, 2008






Much is unclear right now, but imo it's clear that it was targeted against Ukraine. Hmm who would want to do such a thing? :thunk:

neutral milf hotel
Oct 9, 2001

by Fluffdaddy

WAR DOGS OF SOCHI posted:

uh...i've been to many a library conference and depending on the crowd, they tend to be a bunch of librarians pissing and moaning about how to get the respect they deserve and to prove their worth to the world. ala is better than most but still ain't nobody talkin' about archiving at these things and internet privacy to a librarian means putting a polarized screen on the desktops so that their patrons can continue to watch rape porn in the childrens room

I'm a librarian for real and this is a stupidly bad post

Captain Foo
May 11, 2004

we vibin'
we slidin'
we breathin'
we dyin'

i'm on the first page but there was a buffer overflow

Shame Boy
Mar 2, 2010

BeOSPOS posted:

I'm a librarian for real and this is a stupidly bad post

serious post: other than putting books back and organizing stuff and otherwise managing a library what do you actually, like, do, i'm sure it's more than that but i've never really been clear

cinci zoo sniper
Mar 15, 2013




ate all the Oreos posted:

serious post: other than putting books back and organizing stuff and otherwise managing a library what do you actually, like, do, i'm sure it's more than that but i've never really been clear

community outreach, collaboration with municipal entities (especially education-related), event planning and organising - if it's anything like in latvia. my mother has been working as a librarian for more than 30 years and ive spent a lot of time at her job

cinci zoo sniper
Mar 15, 2013




library managing like giving and taking books back is mostly computer these days. actual library book work is more related to catalogue and archive expansion/deprecation/maintenance

cinci zoo sniper
Mar 15, 2013




also, in a rural latvian library, there's a lot of basic it skill teaching done by librarians. how to use computer, what is google, how to write a cv, etc

communism bitch
Apr 24, 2009

WAR DOGS OF SOCHI posted:

uh...i've been to many a library conference and depending on the crowd, they tend to be a bunch of librarians pissing and moaning about how to get the respect they deserve and to prove their worth to the world. ala is better than most but still ain't nobody talkin' about archiving at these things and internet privacy to a librarian means putting a polarized screen on the desktops so that their patrons can continue to watch rape porn in the childrens room
There's apparently an international cohort of 60, 70, and 80 year old ceos, owners, and senior managers who still think that archives and libraries are basically the same discipline, with the same requirements and only cosmetic differences. It was catastrophic for archives in the early-mid 20th century, when a lot of well-intentioned and respectable librarians were put in charge of archives and tried to organise them on the same lines as libraries. My archive is still trying to recover 40 years later from the inadvertent damage this approach caused.
I don't think this was ever a problem the other way around for libraries because what a library is, and how you organise it, is really kind of intuitive - but it doesn't work at all for archives. Anyway it's interesting to hear the two disciplines still being lumped together by old people who dunno wtf they're doing.

*something about internet security here*

neutral milf hotel
Oct 9, 2001

by Fluffdaddy

ate all the Oreos posted:

serious post: other than putting books back and organizing stuff and otherwise managing a library what do you actually, like, do, i'm sure it's more than that but i've never really been clear

there's many kinds of libraries and many kinds of librarians. there's def the front-facing access/public services kind which is the traditional role and the stereotype.
I'd say modern librarianship (and leaning more towards the academic library side) is more about the study of information; the linking of disparate data sources; the sharing of information; and the presentation of it all.

but all in all it's a service oriented job; we help people find the information they are looking for. for instance a lot of my job is studying how we can remove barriers both in information access and user interfaces.

and there's definitely a heavy IT side of things and user privacy is one of the most important aspects of the job. for instance librarians were the ones fighting the FBI on unwarranted access to patron records and there's a lot of advocacy on privacy issues relating to technology.

*gets off soapbox*

flakeloaf
Feb 26, 2003

Still better than android clock

google is a librarian

Wiggly Wayne DDS
Sep 11, 2010



finally a new attack on sha2 https://github.com/laie/WorldsFirstSha2Vulnerability

Adbot
ADBOT LOVES YOU

compuserved
Mar 20, 2006

Nap Ghost

lol

  • Locked thread