Security Fuckup Megathread - v14.1 - Hello, is this a delivery order?

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v14.1 - Hello, is this a delivery order?

«‹›5 »

flakeloaf: Feb 26, 2003; Still better than android clock

faaaaaart

# ¿ Jun 26, 2017 23:08

Adbot: ADBOT LOVES YOU

# ¿ Apr 29, 2024 04:10

flakeloaf: Feb 26, 2003; Still better than android clock

syscall girl posted:

i'm worried anime may have been a pre-existing condition

i'm not bad i was just drawn that way

# ¿ Jun 27, 2017 03:38

flakeloaf: Feb 26, 2003; Still better than android clock

Shifty Pony posted:

the whole wannacry worm seemed like someone hosed up and shipped a beta build.

do you mean wcry or windows

# ¿ Jun 27, 2017 17:36

flakeloaf: Feb 26, 2003; Still better than android clock

Migishu posted:

Looking forward to the Wiggly Wayne DDS overview of Defcon videos

the best part of defcon

# ¿ Jun 27, 2017 18:02

flakeloaf: Feb 26, 2003; Still better than android clock

i'll be the version that wipes out everything if that file exists

# ¿ Jun 28, 2017 00:47

flakeloaf: Feb 26, 2003; Still better than android clock

google is a librarian

# ¿ Jun 28, 2017 16:15

flakeloaf: Feb 26, 2003; Still better than android clock

the existence of sci-hub has greatly simplified what used to be microfiche and journal research and good loving riddance to those things

# ¿ Jun 29, 2017 03:27

flakeloaf: Feb 26, 2003; Still better than android clock

vOv posted:

systemd continues to be a garbage fire

problem: "you give root to invalid usernames"

solution: "blame the guy who makes accounts with invalid names"

erm no

# ¿ Jul 3, 2017 00:45

flakeloaf: Feb 26, 2003; Still better than android clock

Shifty Pony posted:

never. android will forever be a source of security fuckery.

or at least as long as the devices ship loaded with auto-updating un-deletable bloatware with permissions like this:

apparently after the most recent rounds of updates it uses the "draw over other apps" permission to cause full screen popup ads systemwide and send notifications even if people disable notifications. additionally it uses that permission combined with the "prevent the device from sleeping" and "power device on and off" permissions to effectively replace the device lockscreen with its own.

this isn't a new trick for peel remote, it's been doing this poo poo to me for months

if you even look at its lock screen widget, a giant ad will be waiting for you when you unlock

its chat heads widget loves to steal focus from other apps' useful buttons too, that's pretty fun

# ¿ Jul 7, 2017 16:37

flakeloaf: Feb 26, 2003; Still better than android clock

just let us use our own rsa dongles already

# ¿ Jul 7, 2017 23:13

flakeloaf: Feb 26, 2003; Still better than android clock

quote:

Dear Mr. Loaf

We wish to welcome you to [vendor]

You are now registered with our store and have account privileges: With
your account, you can now take part in the various services we have to offer
you. Some of these many services include:

Order History - View the details of orders you have completed with us.

Permanent Cart - Any products added to your online cart remain there until
you remove them, or check them out.

Address Book - We can deliver your products to an address other than yours!
This is perfect to send birthday gifts direct to the birthday-person
themselves.

Products Reviews - Share your opinions on our products with other customers.

Your account login details, which you can use to review your purchase, are
as follows:
Username: [my email address]
Password: [A PLAINTEXT loving PASSWORD]

barvo

# ¿ Jul 8, 2017 00:17

flakeloaf: Feb 26, 2003; Still better than android clock

also 0-day makes me think of buh'weat

# ¿ Jul 8, 2017 00:19

flakeloaf: Feb 26, 2003; Still better than android clock

nowt you've done it

# ¿ Jul 8, 2017 02:39

flakeloaf: Feb 26, 2003; Still better than android clock

don't drink coke oh

# ¿ Jul 8, 2017 14:06

flakeloaf: Feb 26, 2003; Still better than android clock

not that 2fa over sms isn't still poo poo but maybe the telco oughta be picking up on the fact that someone's tried to reset your password 219 times in the last hour and a half

physically going to the rogers store to unlock my phone is simple because the drat things are everywhere, i wonder if i can just have them forbid anything over the phone other than "i lost my phone cause i'm a moron, brick it pls"

# ¿ Jul 8, 2017 23:10

flakeloaf: Feb 26, 2003; Still better than android clock

James Baud posted:

Popup note on your customer file that a rep may or may not even read, easy to socially engineer your way past because people genuinely want to be helpful.

jennifer joy
secured her toy
and zachary zugg
helped breach it

wanna be helpful? don't let anyone who isn't me feel free to be me

# ¿ Jul 9, 2017 00:11

flakeloaf: Feb 26, 2003; Still better than android clock

spankmeister posted:

By the way the plural is zeroes day

it's pronounced jeeroes day

# ¿ Jul 9, 2017 14:09

flakeloaf: Feb 26, 2003; Still better than android clock

Powerful Two-Hander posted:

"note: this is not a phishing mail"

# ¿ Jul 10, 2017 12:48

flakeloaf: Feb 26, 2003; Still better than android clock

cinci zoo sniper posted:

crypto based on a quadratic function

all over 2fa

# ¿ Jul 10, 2017 19:40

flakeloaf: Feb 26, 2003; Still better than android clock

he's expected to bugger off and let the man handle his bakhsheesh

quote:

*As an unrelated aside, it�s important to remember to kill tcpdump after you�ve started it. Not doing that is a great way to obliterate your VPS disk space with DNS data, which was an unexpected additional impact of this . Please note that any DNS data recorded for debugging purposes has now been purged for the privacy of the users of the .io TLD/its domains.

# ¿ Jul 10, 2017 20:02

flakeloaf: Feb 26, 2003; Still better than android clock

well roboto is completely unreadable on my screen so i chanaged it to calibri

# ¿ Jul 12, 2017 14:58

flakeloaf: Feb 26, 2003; Still better than android clock

my bitter bi rival posted:

Calibri more like Sans Sharif

# ¿ Jul 12, 2017 18:45

flakeloaf: Feb 26, 2003; Still better than android clock

camoseven posted:

I also bought some NSA branded socks for some reason.

might wanna give 'em about 20 seconds in the microwave just to be on the safe side

# ¿ Jul 13, 2017 16:43

flakeloaf: Feb 26, 2003; Still better than android clock

quote:

Additionally, considering the nature of supply chains, it is entirely conceivable that companies thinking they have purchased legitimate parts are now being impacted as well. With the difficulty of ensuring that components in a supply chain are genuine, this action by FTDI serves as a disincentive to use any part labeled FTDI in the future.

can't have a counterfeiting problem if nobody wants to buy your gear in the first place

# ¿ Jul 13, 2017 18:59

flakeloaf: Feb 26, 2003; Still better than android clock

mrmcd posted:

From what I hear those guns aren't even loaded most of the time. The "sit out by the highway in a concrete box under a hot sun" job isn't exactly the one they give to the top of the graduating class. Unlike most police forces the military doesn't think it's a good idea to let some goober gun down civilians everytime they get started by a stray shadow.

well that and cookoffs are a real thing and blowing an ND into aunt agnes' bridge group is going to raise some funny questions

# ¿ Jul 14, 2017 17:16

flakeloaf: Feb 26, 2003; Still better than android clock

atm load letter

# ¿ Jul 17, 2017 13:55

flakeloaf: Feb 26, 2003; Still better than android clock

Phone posted:

(as i type my password into gchat for the 50th time)

focus is wonderful isnt it

# ¿ Jul 18, 2017 15:52

flakeloaf: Feb 26, 2003; Still better than android clock

FAT32 SHAMER posted:

nice

# ¿ Jul 18, 2017 17:41

flakeloaf: Feb 26, 2003; Still better than android clock

here it's warnings -> lockout

Shaggar posted:

anyone who doesn't lock their comp @ work leaves themselves open to being hosed w/

by me

"b-b-b-b-but we're in a secure area" great good for you now tell me which of your colleagues is 50k in debt, go on i'll wait

integrity and reliability are a function of your options

# ¿ Jul 18, 2017 18:05

flakeloaf: Feb 26, 2003; Still better than android clock

ultramiraculous posted:

i’m trying to conjure a direct quote but basically “if you’re going to stand by and let your coworkers openly futz with someone’s laptop, i’m within my rights to fire all of you”

I didn't notice because I was working sir

# ¿ Jul 19, 2017 13:00

flakeloaf: Feb 26, 2003; Still better than android clock

Carbon dioxide posted:

Twitter's own @support account has been suspended from Twitter.

https://twitter.com/support

!kjv numbers 22:21

# ¿ Jul 19, 2017 19:24

flakeloaf: Feb 26, 2003; Still better than android clock

BangersInMyKnickers posted:

aslr and dep opt out on compile. gaben get your stupid company in order

can't hear you too busy rubber stamping animu "dating" sims

# ¿ Jul 20, 2017 19:08

flakeloaf: Feb 26, 2003; Still better than android clock

LP0 ON FIRE posted:

also their entire site is down

this doesn't ogur well

# ¿ Jul 21, 2017 18:32

flakeloaf: Feb 26, 2003; Still better than android clock

LP0 ON FIRE posted:

is this a shrek joke?

no it's a hungary joke but it's a reach even for me, i just couldn't bring myself to say "ural in trouble now"

# ¿ Jul 21, 2017 18:45

flakeloaf: Feb 26, 2003; Still better than android clock

ate all the Oreos posted:

looks like it overflowed

maybe because the screen is a big drain on resources

faucet

*moen*

# ¿ Jul 21, 2017 20:24

flakeloaf: Feb 26, 2003; Still better than android clock

shutting off the ac and killing grandma sounds like the sort of thing you shouldn't be able to do via internet

# ¿ Jul 21, 2017 23:29

flakeloaf: Feb 26, 2003; Still better than android clock

Powaqoatse posted:

yea thats what i think they do but i have no idea.

that's literally what my dad did and he came home with some very fat stacks

he also lost a pile of cash, a marriage, two businesses and a house to that sort of hubris and spent his last lucid moments trying to negotiate a trip to the loving casino so take that for what it's worth

# ¿ Jul 22, 2017 05:16

flakeloaf: Feb 26, 2003; Still better than android clock

maskenfreiheit posted:

defcon party tricks dot txt

the auditing software we use has the same problem so everyone whose scanners create documents dated in 2032 has to be checked manually

# ¿ Jul 23, 2017 14:25

flakeloaf: Feb 26, 2003; Still better than android clock

maskenfreiheit posted:

so maybe being inside a 98.6� human is bad for the magnets? 🤔

getting slammed around a few hundred times a day because it's a tiny magnet in the fingertip of a touch typing nerd is probably a deciding factor

# ¿ Jul 24, 2017 13:15

Adbot: ADBOT LOVES YOU

# ¿ Apr 29, 2024 04:10

flakeloaf: Feb 26, 2003; Still better than android clock

Shifty Pony posted:

they also afaik are extremely simple inductively coupled devices with hard coded ID numbers and zero authentication. the inductive coupling makes it hard to overload and the simple data structure doesn't take a fancy chip that could be hiding fun security vulnerabilities.

yes my dog's name is Fido, 300 hundred letter js, then \x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\xb0\x0b\xcd\x80

# ¿ Jul 24, 2017 13:22

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v14.1 - Hello, is this a delivery order?

«‹›5 »