Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

flakeloaf posted:

hi I'm calling from Microsoft there's a security virus problem on your thread and it's hacking your computer

:ohdear:

Adbot
ADBOT LOVES YOU

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

Rooney McNibnug posted:

thank you for your service.

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

2018 went out with a bang at least

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

PCjr sidecar posted:

truly military grade encryption

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

apseudonym posted:

I have implemented enough trust management that I like to post about it.


If you want to know why most attempts to do certificate pinning using Java's standard Trust Management APIs is wrong I can talk about that too

:justpost:

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

jit bull transpile posted:

I don't think you trust
in my
self signed web certify

Captain Foo posted:

i
cry
when thinking 'bout PKI

:drat:

thank you apseudonym for just posting

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

BangersInMyKnickers posted:

goatse-wall as a service

Never forget

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

Shame Boy posted:

i love it when people who haven't posted in a thread ever suddenly show up to defend the honor and dignity of random internet dudes in the face of slanderous lies from BITCHES :argh:

I always wondered where these people came from. It turns they climbed out of the well, actually.

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

florida lan posted:

i was once on a plane with a number of women going to a conference of great clips salon managers

all i learned from this is that great clips salon managers view industry conferences as an excuse to get drunk even more than tech people do

Well they're sure not learning how to run a business that I'd ever want to go to again

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

Shame Boy posted:

i get the feeling you're pretty genuine, but when people say "please explain to me why i'm wrong" with regard to LGBT issues (especially in places not really about LGBT topics) they almost always mean "please argue with me about why i'm right". this is a big reason why people are very apprehensive about engaging you with anything other than "go figure it out yourself"

There's also a non trivial number of concern trolls, outright trolls, chuds, etc. who are actively trying to waste time and frustrate. Then there's people who will just immediately reset their opinions the moment they hear their favorite talk radio host blare their opinions again. Being willing to do a minimum of groundwork yourself shows that you're genuine in your interest and not just a sea lion.

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

CRIP EATIN BREAD posted:

the worst part of technology (and everything else) is the humans

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

Holy poo poo

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

chemosh6969 posted:

I woke up at 4am and just started digging myself a hole? I don't know what I was thinking.

I didn't want people to think that just because someone was LGBT, that I instantly assumed they were a flake. I probably get overly defensive when people think I'm toxic like that.

Maybe stop digging though?

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

florida lan posted:

security fuckup thread 17.1 - The attack you suggest, if it is possible, is not trivial to describe judging by the size of the description.

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...
Soviet query language

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

Shaggar posted:

oh. I know what it is. gently caress face idiot jonny ives decided he wanted you to see the live video of who was calling you so to make that work it creates the session setup required for the call even if you don't accept.

e: whatever code handles the event for adding a new party to the call is probably below the phone ui so theres no checking to see if the user accepted the call. it assumes that because theres an active call the user picked it up even though the UI automatically picked up in order to display the incoming video.

You mean Google Duo?

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

Shifty Pony posted:

using apple's business app distribution system to bypass an official App Store ban seems like a very bad idea...

https://twitter.com/zackwhittaker/status/1090393772159090688

:piss:

Sounds like Apple would be within their rights to nuke all of their certs at this point

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

Phone posted:

I fail to recognise the “bad practice” here. Researchers clearly asked for consent, in case of teens they have required parental consent as well, they have had clearly worded policy, they have generously paid for participation.

There is no other way to see the user experience in the whole without using VPN and custom root SSL certificate since every app is sandboxed and traffic is sent over HTTPS most of the times.

They definitely got a 13 year old to get informed parental consent in the form of them just personally clicking an "I agree" button which dispenses $20 for reasons the 13 year old doesn't fully understand.

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...



Cocoa Crispies posted:

we already knew malware could be encoded in DNA or RNA because viruses exist and kill people

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...
Anal is really just an endian issue?

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

Captain Foo posted:

unbelievably savage

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

LastInLine posted:

you say it as a joke but if facebook starting raising an army of the dead i feel like thered be some complaints about that too

What, exactly, do you think ghost profiles even ARE?

:thunk:

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

salted hash browns posted:

many other companies (incl. Fb/goog) have done the right thing and chose not to operate in China.

Lol, just lol if you think it's because "it's the right thing"

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...
This is definitely some kind of gently caress up


https://www.secjuice.com/security-researcher-assaulted-ice-atrient/ posted:

Following a serious vulnerability disclosure affecting casinos globally, an executive of casino technology vendor Atrient has assaulted the security researcher who disclosed the vulnerability at the ICE conference in London. This is the story of a vulnerability disclosure gone bad, one involving the FBI, a vendor with a global customer base of casinos and a severe security vulnerability which has gone unresolved for four months without being properly addressed.

...

These kiosks and the back end server communicate the personal details of their users and send data like drivers license scans (used for enrollment), user home addresses and contact details, as well as details about user activity, unencrypted over publicly accessible internet. When the researcher discovered that the unauthenticated reward server was directly connected to the kiosks on the casino floor they realized that the API the kiosks used was wide open and extremely vulnerable to criminal abuse.

The researchers told me that every single kiosk was calling home to the server in plain text and all data sent from the kiosks to the server clearly visible on the network. Because there is no SSL protection and because the API is wide open and vulnerable to abuse, it is possible to identify kiosks by their MAC address and use the unsecured API to change details, track users and add credit to user accounts and even spin up a kiosk on a virtual machine in order to have your own personal kiosk at home.

Atrient were not segregating these kiosks into vlans, their FTP access was wide open and unencrypted, and all of this was discovered using the Shodan search engine, all of it was publicly visible to anyone on the internet who knew where to look.

Atrient is a market leader in selling these loyalty kiosks to casinos and because these kiosks have been sold to casinos all over Las Vegas, the United States and (via their partnership with Konami) to casinos all over the world. Considering that Atrient COO Jessie Gill said in the media recently that they "don’t have a different version for different operators; we integrate all functions in a single product", there is a very high likelihood that this vulnerability affects all of their customers, including their white label partners Konami who rebranded Atrient's tech for sale to their own customers.



Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

CRIP EATIN BREAD posted:

"He was also charged with possession of child pornography, an offensive weapon and drugs. He remains overseas."

so uh. yeah.

:eyepoop:

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...
.

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...
What does your heart tell you?

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

GWBBQ posted:

bezos sexting is awkward and cringe inducing to read

Who gives a poo poo?

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

Jeoh posted:

that's one way to get to inbox zero

Yikes

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

One-Man-Bucket posted:


google translated article:

quote:

- We have checked this out with our IT, and what you say is completely impossible, says Davide Nyblom CEO at Medicall. 

But I have the files in front of me now? 

- I've checked with our IT and it can't happen. 

Do you want me to play a file? 

Here Davide Nyblom hangs up the phone. 

That's the good stuff right there.

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...
https://twitter.com/thomasareed/status/1097152433724289024

Discuss.

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...
*opens browser, types an address*

:cool: I'm in.

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

fisting by many posted:

actually show him a password manager

"This is going to be too complicated for me us"

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...
Security Fuckup Megathtead - v17.0 - Getting caught was an error on our part.

Mods, please

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

Rufus Ping posted:

forget to close youtube after watching one instructional breast exam video and you will wake up the following day surrounded by dangerously horny teenage boys from india

That sounds like a shortcut at least a few people would enjoy though.

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

duz posted:

the it aup we all had to sign at my school included that we would not use the computers to influence the vote of a senator

Did you?

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...
Securitae gently caress Uppe Maegethreade

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

Krankenstyle posted:

gandi seems more of a WinNuke kinda guy

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

Wiggly Wayne DDS posted:

there's a new zachatronics out??

Adbot
ADBOT LOVES YOU

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

akadajet posted:

nice goatse mirror

dsyp

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply