ZeusCannon posted:

Innovative automated self touching poo pro ++

Subjunctive posted:

autonomous poop

apseudonym posted:

Did we touch the poop again?

ate all the Oreos posted:

wife just linked me this:



brilliant

JewKiller 3000 posted:

3do didn't have anything worth stealing either, though

unless you really like fmv

Wiggly Wayne DDS posted:

it's confirmed:
https://twitter.com/PolarToffee/status/879709615675641856

congrats on people not patching after the previous major incident

Wiggly Wayne DDS posted:

considering there isn't a domain to conveniently sinkhole just prior to the us business networks waking up ya

ratbert90 posted:

hahahhhahahahahhaa.

WAR DOGS OF SOCHI posted:

spankmeister posted:

You don't go to def con for the talks tbqh

ate all the Oreos posted:

serious post: other than putting books back and organizing stuff and otherwise managing a library what do you actually, like, do, i'm sure it's more than that but i've never really been clear

ratbert90 posted:

Taking a shower at the gym I realized that anybody flushing the toilets makes the water temp go up by 10F.

MitM attack if I have ever seen one.

syscall girl posted:

lol how do you nod in russian?

slav squat and a curious gesture of the eyes?

spankmeister posted:

I agree with both of you. To me it's abundantly clear what the purpose of this malware is.

infernal machines posted:

Another live fire exercise on Ukranian infrastructure, with a side of collateral damage, made to be plausibly connected to previous ransomware attacks?

spankmeister posted:

The initial infection vector is from a Ukranian company that makes tax return software. This company was hacked and made to push a malicious update to its users. A lot of businesses and government in Ukraine and businesses that deal with Ukraine use this software because it's one of the few that's allowed for use by the government.

So that makes it clear that Ukraine was the target.

Now the malware itself looks like a variant of Petya, which is an existing ransomware family. This is a false flag, smoke and mirrors. Why? Because there is no way of getting your files decrypted. This is because it generates a unique "Installation ID" which you're supposed to send along with your bitcoin wallet address that you made the payment from to an email address. They use a single hardcoded bitcoin wallet for every infection. This method requires manual verification and is completely ludicrous for a malware that has such aggressive spreading methods. Modern ransomware uses a more sophisticated backend that generates a unique bitcoin wallet for each infection which allows payments to be automatically verified over a tor backend.

Stupid verification method aside, the installation ID is completely random. There is _no_ way to link this ID to a specific infection. The malware authors cannot determine which key it belongs to. So there is no chance of this ever working as a "legitimate" ransomware.

And like Wiggly Wayne DDS said, Petya was a perfectly functional ransomware, there was no reason to make the changes that they did.

ThePeavstenator posted:

Well this morning certainly has been interesting.

I work at a large global company that makes lawn equipment and engines. Our manufacturing line computers were infected with ransomware last year and had to be shut down until hundreds of thousands of dollars were payed out.

I work in the equipment testing lab. The lab manager (who btw owns) and I are the people that maintain and develop software that handles all the test requests and test data, among other things.

I go into his office this morning and we notice that a folder in the network drive where all of our test data is stored had a bunch of [document in the folder filename].locky files. We immediately wrote a ticket, which immediately got escalated to the head of global network security. I then noticed that all the locky files were 0 bytes and I right clicked on the properties to see the owner. Every file was owned by the same guy and we work fairly closely with him so we messaged him right away. He tries being all coy saying he had no idea what we're talking about *wink*. Turns out they're all just empty and it was just a "prank".

Our IT sends out almost daily memos reminding people what to look for in a phishing attempt after we had production shut down last year. They were making GBS threads themselves this morning and wanted to speak with him right away. We told him this and his defense was "well I was just trying to check up on you guys, IT sends out phishing tests to employees all the time too!!"

ThePeavstenator posted:

I guess it should also be noted that he's not a computer toucher, he's an electrical technician, so I don't think he knew the level of reaction this was going to get.

ThePeavstenator posted:

hey man I never said he was smart

Meat Beat Agent posted:

i bet that dude will WannaCry after he gets fired lol

BangersInMyKnickers posted:

Anybody know what services or processes need to be whitelisted on the windows firewall to make updates work on an outbound deny default config? I've cleared both BITS and WU services but it still fails and I see something hitting 443 outbound and getting dropped but I am having a hell of a time figuring out what process or service its associated with. I made a blanket 443 out allow rule and it started working again but there's something else that is now a dependency for updates to work properly and this poo poo isn't documented by MS.

BangersInMyKnickers posted:

Windows firewall doesn't whitelist on domains, I need to know what process is initiation the connection.

Ciaphas posted:

Reminds me of that guy who "pranked" his fellows at some chemical lab by putting almond extract into an A/C intake

vOv posted:

it doesn't do anything per se but usually smelling almonds in a chemical plant means 'cyanide spill'

French Canadian posted:

Is it called cyber because trump called it cyber in a debate? So now they have to adjust their marketing?

spankmeister posted:

As a Mozilla dev I,

spankmeister posted:

Wish your posting rig would self destruct

French Canadian posted:

Indeed, and I know cyber "whatever" has been around forever but I am unaware of when just "cyber" became a term. It's like saying "I like mountain" and forgetting to add "climbing", "biking" or "making GBS threads".

Optimus_Rhyme posted:

c'mon son

Cocoa Crispies posted:

just because a fat orange shithead with holes in his brain got caught using it once last year doesn't make it mainstream

Shaggar posted:

this but unironically

Shaggar posted:

theres litterrally us cyber command. cyber is old as heck.