SCHiM

31 ms·

301.
by SCHiM 9y ago
> Avoid certification. IMO that should be avoid current certification. Avoiding all certification for all eternity would imply that training decent pentesters/hackers is something that cannot be done in a controlled methodical way
302.
by SCHiM 9y ago
Ahh well if you only compromised passwords then it depends on the domain policy. Often something like 90 or 180 days, but sometimes also only 1 month. But the ticket is different. An attacker can sign and create their own ticket and determi
303.
by SCHiM 9y ago
If you capture user credentials it doesn't really matter because you can just come back a month later. Especially if they had domain admin access and created a golden ticket. Also if you infect a user as opposed to a machine your infec
304.
by SCHiM 9y ago
That's all the more reason to harden it, not to weaken our collective defences. If you accept my stance that repeated exposure leads to resistance/strengthening of your mental barriers. Of course in the case of more subtle manipul
305.
by SCHiM 9y ago
Personally I'm opposed to this, assuming google's goal with these steps is to protect open societies. Not because I think you should be able to post content without restrictions, but because I think it serves society better to get
306.
by SCHiM 9y ago
I'm not a physicist or computer scientist. But I do think I recognize what the author is trying to explain when looking at code sometimes, or even differences in core mathematical operators. When looking at code and 'reading'
307.
by SCHiM 9y ago
In the end, this is a problem with _all_ cloud services that do more than just _store_ data. If it does anything with your information at all then it's possible for an insider to look at it.
308.
by SCHiM 9y ago
SS7 which is used to route calls, sms, can be spoofed. Any person with access to a cell tower (hop over a fence, break the padlock, plug your laptop in) or access to the Telecom backbone (hack a Telecom provider, buy a link). Can hijcak any
309.
by SCHiM 9y ago
Exactly, it's fine to make a point with a story, but it should not provide justification only clarity. To go back to the original point, I've never understood the problem with 'hubris', it's not as if we have eviden
310.
by SCHiM 9y ago
They can better control their supply chain maybe, but still not good enough if/when they're up against state sponsored espionage.
311.
by SCHiM 9y ago
When you go searching for meaning, chase all the leads, trying to separate wrong from right. What you find is that beyond all the pop culture tropes, the outrage and terror about the latest and greatest paedophile revelation, evil greedy ca
312.
by SCHiM 9y ago
The problem with the gun analogy in your particular argument is that a 'cyber weapon' or exploit is the flip side of a flaw in normal software. The NSA is in a very weird position because they have a task to protect the systems of
313.
by SCHiM 9y ago
I honestly can't imagine using any other tools to do my job than office. As a student I tried the Google suite/docs and years of usage has me relieved that I could leave them behind. Thinking back the only thing I remember about t
314.
by SCHiM 9y ago
Yeah. It's much more likely you blab about it to people you think are your friends, or random strangers on the internet with a pseudo anonymous user name that's trivially linked to your real identity!
315.
by SCHiM 9y ago
You do know that it's trivial to obtain these drugs (and tests) on tor marketplaces right? In case you did not, the alphabay sells both drugs and tests, and certain countries (like the Netherlands) also have labs that test your drugs f
316.
by SCHiM 9y ago
I've had many discussions with people who don't truly seem to grasp the concept of determinism. I think we should never accept a theory that proves everything is predetermined. If the theory is right it doesn't matter if peop
317.
by SCHiM 10y ago
Sadly I'm quite sure that these issues are always solved by force. I simply cannot imagine that countries with the means to get to <valuable space resource> will abide by the decisions of a foreign organisation which has just giv
318.
by SCHiM 10y ago
Those 'more modern' operating systems have roots and parts in their codebase that are just as old, if not older, than Windows. All platforms are continously adding new pieces and sometimes rewriting old. But I know for a fact that
319.
by SCHiM 10y ago
Can somebody explain what exactly the problem is with this? Did they not have a hand in any of the research? Do they provide a genuinely useful service yes/no?
320.
by SCHiM 10y ago
This is not a security feature, and should not be relied upon. For example, unelevated users can run the following command: 'PS> Set-ExecutionPolicy Bypass -Scope Process' to allow script execution in the current powershell pr
321.
by SCHiM 10y ago
That whole handle idea of the 'capability' system, but especially its implementation with 'handles', sounds exactly like Win32 to me. I haven't looked at the source, can anyone confirm or explain what exactly is dif
322.
by SCHiM 10y ago
The only fields in the PE header dealing directly with the stack are: SizeOfStackReserve: 0x00100000 SizeOfStackCommit: 0x00001000 Certainly nothing there that indicates which way the stack should grow. PE do
323.
by SCHiM 10y ago
Seems very easy: https://www.howtogeek.com/215730/how-to-connect-to-a-vpn-fro... I don't have and iDevice so I don't know for sure, why do you think this'd be a problem? Or am I misunderstanding your que
324.
by SCHiM 10y ago
Isn't manually locking and unlocking (as seen in the examples) frowned upon anyway? In any development I do, and with every developer I've ever developed a project internally, the use of std::lock_guard<> (which is a scope l
325.
by SCHiM 10y ago
Expert systems (which is what you're describing) are generally considered to belong in the AI category.
326.
by SCHiM 10y ago
I've found the No True Scotsman a hard one to judge. There's a grey area where both parties could argue that something is/isn't a logical fallacy. Popular/controversial/recognizable example: Terrorists are no
327.
by SCHiM 10y ago
Especially HyperText/DolDoc is something that seems like a very nice feature to have. Perhaps one day someone might port something similar for Linux shells? It seems like that is what the Linux 'text only' input/output s
328.
by SCHiM 10y ago
That's because there's some truth in that. Remember the time when searching for ' would spit out a detailed error message containing the database name and query that failed? Or adding <h1> to your profile page would bre
329.
by SCHiM 10y ago
You can use something called a data diode. These are used in high security networks to provide secure one way communication (insecure->secure). The idea is that if there _is_ communication it's not possible to exclude compromise com
330.
by SCHiM 10y ago
I've noticed this too, I don't think this is specific for people with a depression though. If I have about 4/5 hours of sleep I will be less smart the next day, but engaging with others or completing tasks despite the tiredne

More ›