Security Fuckup Megathread - v14.1 - Hello, is this a delivery order?

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v14.1 - Hello, is this a delivery order?

«‹›4 »

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

3do didn't have any kind of drm did it?

my old fz-1 is finicky, but it'll play burned discs without any mods

# ¿ Jun 27, 2017 05:00

Adbot: ADBOT LOVES YOU

# ¿ Apr 28, 2024 20:54

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Lain Iwakura posted:

zero

it just has a really wonky disc format that required me to setup a linux vm running kernel 2.6 to properly read them

operafs for win32 is still floating around, what were you using on linux that's so kernel specific?

e: never mind, yeah i see the linux version still only has up to 2.6 support

# ¿ Jun 27, 2017 06:18

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

ars has a peice on the anti-malware engine exploits tavis found

# ¿ Jun 27, 2017 17:19

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

a breathless and poorly written piece on the petya variant that hit recently

tl;dr: it's not really ransomware as it straight up overwrites the boot sector and subsequent blocks, there's no way to decrypt them because they weren't actually encrypted at all, presumably this is by design.

for some reason it ignores the existence of low level file recovery tools like testdisk and photorec, which will likely recover the file data regardless of mbr and mft damage

e: the implication being this is a state-level attack disguised to look like ransomware to generate a different narrative

infernal machines fucked around with this message at 23:14 on Jun 28, 2017

# ¿ Jun 28, 2017 23:10

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

were there any vulns found in apple's SMB implementation? they rolled their own sometime after 10.6 iirc

# ¿ Jun 28, 2017 23:26

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Another live fire exercise on Ukranian infrastructure, with a side of collateral damage, made to be plausibly connected to previous ransomware attacks?

# ¿ Jun 29, 2017 13:51

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

hey, guys, guys, guys.

cyberwar

# ¿ Jul 3, 2017 01:37

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

you really think someone would do that? just go on the internet and tell lies?

# ¿ Aug 15, 2017 06:17

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

jfc

this is better than the bitcoin wallet inspector

# ¿ Aug 19, 2017 03:12

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Avenging_Mikon posted:

You don't put your actual password in those, you use something of the same length and characteristics.

yes, a password inspector. don't use your actual password (any of them, for anything), just one you might use.

cool, no problem, and definitely something a layperson worried about wizardsec would use in the manner in which its intended.

# ¿ Aug 19, 2017 04:38

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Avenging_Mikon posted:

I dunno, I found them useful to demonstrate to people the importance of complexity.

what kind of complexity? how does it work?

# ¿ Aug 19, 2017 05:28

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Avenging_Mikon posted:

Short vs. Long, use of special characters, numbers, capitals. People are really dumb, and having something to show them to say "look, this simple change gives you way more protection without making your life more difficult" is useful. The thing just evaluates attack space and compares to brute force speed to get approximate time to crack.

okay, so the issue is a "complex" password isn't necessarily a harder to crack password. assuming you're going for a human memorable password, you probably just want a long phrase rather than something that has a bunch of special characters in it. but also, if the thing just scores Name<birthyear> as complex* it's not very good either

*microsoft online services, i'm looking at you

# ¿ Aug 19, 2017 16:25

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

because a tool that says "check your password here" is a stupid tool*.

look at this website: http://www.speedypassword.com (http!!!)

do you think "Test your password below to check its strength and find out how secure it is!" suggests you should enter your actual password?

a site that offers to generate username and password pairs for you?

seriously?

*to be clear, i'm talking specifically about this password inspector website (you know, the one the tweet was about), password strength indicators in general can be useful assuming they're part of the service you're creating an account for, and properly weight things. telling someone to put their password into a random website probably isn't doing them any favours though

infernal machines fucked around with this message at 22:07 on Aug 19, 2017

# ¿ Aug 19, 2017 21:57

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

quote:

> e.- StartCom has developed a new CMS system and website, using a new
> language, PHP, from scratch.

# ¿ Aug 19, 2017 22:43

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Wiggly Wayne DDS posted:

unfortunately i don't think that'd fit in the thread title

cis autodrag posted:

Security Fuckup Megathread - v14.1 - you're too busy hyperventilating to read sentences correctly

# ¿ Aug 20, 2017 01:08

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

correct battery horse staple

oh no! my brainwallet! how did they figure out my unhackable password?

# ¿ Aug 20, 2017 19:13

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

i bet now you'll think twice before committing a terror

# ¿ Aug 21, 2017 16:11

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

i thought FTDI was more of a "we're going to push an update that breaks knock-off chips"

# ¿ Aug 22, 2017 15:51

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

presumably that's why they did it.

# ¿ Aug 22, 2017 15:56

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Subjunctive posted:

my echo is useless

it still works as a speaker in some fashion though doesn't it?

# ¿ Aug 22, 2017 16:10

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Trabisnikof posted:

It�s also important to note that OP believes that he never agreed to the FCC.gov TOS because he never applied for an API key, he just managed to get the URL through their faulty comment system, no hacking involved.

Ya' boy is hosed.

# ¿ Aug 31, 2017 06:54

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Jewel posted:

fcc is the new myspace

https://twitter.com/NO_BOOT_DEVICE/status/903285015936716800

so how hard do we laugh when they're charged with a felony for this?

# ¿ Aug 31, 2017 17:04

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Lain Iwakura posted:

on the subject of hdd destruction, my approach is going to take me a while

i have about 30 drives left

are you making an art? cause otherwise i just use a drill press, you can go through a stack of drives in five minutes

keep those magnets tho, just in case you ever have the need to attach a car to your ceiling or something

# ¿ Sep 1, 2017 01:44

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

the only downside is modern drives have tiny magnets compared to the old ide drives. real old school mfm drives had magnets that could break fingers.

# ¿ Sep 1, 2017 03:41

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

oh, so basically the inspiration for the office 2003 ui?

# ¿ Sep 6, 2017 05:22

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

ask peter watts about that

# ¿ Sep 17, 2017 07:29

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

because it's convenient, but you don't want the police to be able to rifle through your phone?

# ¿ Sep 17, 2017 08:08

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

actually they should do detailed and in-depth industry consultations, then implement the exact opposite of whatever recommendations they were given

# ¿ Sep 20, 2017 22:37

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

SVR Tracking leaks thousands of account credentials for vehicle tracking service, via everyone's favourite, unprotected amazon s3 bucket

# ¿ Sep 22, 2017 00:16

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

having worked with point of sale vendors i can assure you they know sweet gently caress all about security

the fact that there aren�t more high profile breaches of retail chains like target is purely because of the laziness of criminals

# ¿ Sep 22, 2017 16:55

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

WAR DOGS OF SOCHI posted:

Any credit/debit card infrastructure/procedural changes are part of the eternal battle between banks and merchants to foist any and all costs and liabilities onto the other.

capitalists duking it out among themselves over their ability to externalize costs to eachother will forever be the most beautiful part of capitalism.

# ¿ Sep 28, 2017 22:04

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

they're rotating at 15k rpm, so yeah vibration is bad

e: it surprising how resilient they are given the sensitivity

infernal machines fucked around with this message at 08:13 on Sep 30, 2017

# ¿ Sep 30, 2017 08:09

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

ate all the Oreos posted:

no it was just one rogue engineer! i totally heard him walking around the office loudly yelling HA HA HA THE ONLY WAY I CAN GET MY BONER ROCK HARD IS BY LIVING ON THE EDGE AND NEVER PATCHING SOFTWARE!!! I DON'T CARE ABOUT PEOPLE'S DATA AND HITLER HAD GOOD IDEAS! HAIL SATAN

i tried to stop him but i'm just a good honest american christian CEO, what could i have done???

Equifax hired James Damore?

# ¿ Oct 4, 2017 01:15

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

anthonypants posted:

the biggest risk in infosec is your self-important fuckhead users who won't report when something is wrong until months later http://www.politico.com/story/2017/10/05/john-kelly-cell-phone-compromised-243514

remember when this was predicted back in january?

# ¿ Oct 6, 2017 02:54

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

turns out letting people with security clearance byod is exactly as loving stupid as anyone with the least bit of sense assumed.

letting people with security clearance use android is just that much worse

# ¿ Oct 6, 2017 04:42

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Volmarias posted:

To be fair, the article says that his phone was issued, so it's probably not byod.

and in the image it's an iphone, so i'm 0 for 2 so far.

# ¿ Oct 6, 2017 05:38

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Lysidas posted:

yeah i have a envelope for my wife in a fireproof safe, labeled "open in the event of my death or long term mental incapacitation"

so how long ago did she open it?

# ¿ Oct 8, 2017 17:36

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

how else do you track your billables?

# ¿ Oct 9, 2017 04:21

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

hobbesmaster posted:

from the pc you use to send the file to the printer?

yeah, but sometimes you gotta photocopy, or god forbid, fax

gotta itemize that poo poo somehow.

# ¿ Oct 9, 2017 04:50

Adbot: ADBOT LOVES YOU

# ¿ Apr 28, 2024 20:54

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

well, no, you use a client code, or user specific access card

# ¿ Oct 9, 2017 05:36

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v14.1 - Hello, is this a delivery order?

«‹›4 »