spankmeister posted:

You don't go to def con for the talks tbqh

ratbert90 posted:

Taking a shower at the gym I realized that anybody flushing the toilets makes the water temp go up by 10F.

MitM attack if I have ever seen one.

ThePeavstenator posted:

Well this morning certainly has been interesting.

I work at a large global company that makes lawn equipment and engines. Our manufacturing line computers were infected with ransomware last year and had to be shut down until hundreds of thousands of dollars were payed out.

I work in the equipment testing lab. The lab manager (who btw owns) and I are the people that maintain and develop software that handles all the test requests and test data, among other things.

I go into his office this morning and we notice that a folder in the network drive where all of our test data is stored had a bunch of [document in the folder filename].locky files. We immediately wrote a ticket, which immediately got escalated to the head of global network security. I then noticed that all the locky files were 0 bytes and I right clicked on the properties to see the owner. Every file was owned by the same guy and we work fairly closely with him so we messaged him right away. He tries being all coy saying he had no idea what we're talking about *wink*. Turns out they're all just empty and it was just a "prank".

Our IT sends out almost daily memos reminding people what to look for in a phishing attempt after we had production shut down last year. They were making GBS threads themselves this morning and wanted to speak with him right away. We told him this and his defense was "well I was just trying to check up on you guys, IT sends out phishing tests to employees all the time too!!"

tldr: A genius at work this morning decided to put a bunch of blank [filename].locky files on a network drive where all of our test data is stored as a "prank".

anthonypants posted:

it is my understanding that this is how cylance works

Wrath of the Bitch King posted:

We enforce 45 days here. It sucks.

CRIP EATIN BREAD posted:

Russia Threatens Retaliation If Pentagon Bans Kaspersky Software

https://www.bloomberg.com/news/articles/2017-06-30/russia-threatens-retaliation-if-pentagon-bans-kaspersky-software-j4k2inwq

minivanmegafun posted:

https://youtu.be/lzAuXuxD0Oo

spankmeister posted:

Hmm slight chance I might be going to def con after all

ate all the Oreos posted:

i assume the only reason why anyone would buy a pastebin pro account is so they could write messages on it to prove they owned the bits coin?

cinci zoo sniper posted:

please use password manager from now on

cinci zoo sniper posted:

lastpass still not great at the specific part that makes it different from standalone cloud storage keepass, yes

cinci zoo sniper posted:

i use keepass too, "official" windows client with key file in onedrive

flakeloaf posted:

not that 2fa over sms isn't still poo poo but maybe the telco oughta be picking up on the fact that someone's tried to reset your password 219 times in the last hour and a half

physically going to the rogers store to unlock my phone is simple because the drat things are everywhere, i wonder if i can just have them forbid anything over the phone other than "i lost my phone cause i'm a moron, brick it pls"

Powaqoatse posted:

wish you would delete your SA account

ate all the Oreos posted:

serious question: is your threat model "someone could break into my house and steal a piece of paper and then use it to post terrible things to my facebook account"

Chris Knight posted:

lawyers suck

mrmcd posted:

"I mean we clearly state at the bottom of the man page that calling do_thing() without first calling dont_shoot_own_dick() will result in the users dick getting shot off. We can't be expected to handhold every single user of our library." --a C programmer, probably.

Rectus posted:

LP0 ON FIRE posted:

never mind your magstrip credit cards, don'tt even bring your iphone to DEFCON

mrmcd posted:

Also once you issue a "smart contract" you can never patch it. Hope you coded everything perfectly the first time!

hobbesmaster posted:

well, no rng on this hardware, guess we'll just need to put a seed in eeprom

*seed is always 0000000000000000*

ate poo poo on live tv posted:

Aren't gambling machines with real money one of the least likely to be a sec gently caress up since the company that provides them, and not the casino, are responsible for the payouts?

hobbesmaster posted:

a prng based on the clock isn't very good at all

at least use the LSBs from an adc to see a prng or something

A Pinball Wizard posted:

obviously exploiting oversights in the code but the article keeps calling it cheating and I fail to see how it's cheating

jre posted:

The 88% is over all players not individual players, so it doesn't mean you'll lose 12%. You can easily lose 100% or gain 100%

When I worked as a bar man the regulars complained about one of the other staff playing the machine because he would be able to watch it all day, see them losing their money and then jump on and clean it out. It is possible to make bank if you are able to watch the machine for hours, learn the behaviour so that you know when it's going to pay out a jackpot.

anthonypants posted:

https://twitter.com/VickerySec/status/886290921381179392 https://twitter.com/VickerySec/status/886351694459584512

My PIN is 4826 posted:

best part isn't even mentioned in this article - the STA database is public domain information, so it's passed around to advertisers as a service. however, this one time they all got an un-redacted database that included things like people in the witness protection programs.

the obvious solution would be to send out the redacted version and tell recipients to destroy the old one, but instead they sent out a list of who to remove from the first database

quote:

A Wisconsin company is about to become the first in the U.S. to offer microchip implants to its employees.

Yes, you read that right. Microchip implants.
Advertisement

"It's the next thing that's inevitably going to happen, and we want to be a part of it," Three Square Market Chief Executive Officer Todd Westby said.

The company designs software for break room markets that are commonly found in office complexes.

Just as people are able to purchase items at the market using phones, Westby wants to do the sam thing using a microchip implanted inside a person's hand.

"We'll come up, scan the item," he explained, while showing how the process will work at an actual break room market kiosk. "We'll hit pay with a credit card, and it's asking to swipe my proximity payment now. I'll hold my hand up, just like my cell phone, and it'll pay for my product."

More than 50 Three Square Market employees are having the devices implanted starting next week. Each chip is about the size of a single grain of rice.

Along with purchasing market kiosk items, employees will be albe to use the chip to get into the front door and log onto their computers.

Each chip costs $300 and the company is picking up the tab. They're implanted between a person's thumb and forefinger. Westby added the data is both encrypted and secure.

"There's no GPS tracking at all," he said.

No one who works at Three Square Market is required to get the chip implant.

mrmcd posted:

Employee ID implant chips + a company so cheap you have to pay for your lovely coffee and potato chips at work = Charlie Booker sighs wistfully and shreds another Black Mirror script draft.

OTOH, this was arguably already done in Fifteen Million Merits.

Cocoa Crispies posted:

magnets that apparently wear out in a matter of years lol