amckenna

16 ms·

91.
by amckenna 12y ago
For any that were not aware, this is the same Zalewski that did a lot of great work around the Shellshock bug. He found 2 additional issues with the parsing function after the initially reported bug. CVE-2014-6277 and CVE-2014-6278 http:&#
92.
by amckenna 12y ago
I don't think this has to do with a lack of knowledge of documentation, it has to do with simple spelling errors. Quite a number of times I type a method name wrong and upon scanning the code don't see the missing, duplicated, or
93.
by amckenna 12y ago
If anyone is curious what a real vs fake FTDI chip looks like under the hood (de-capped chip) this is a great analysis and some beautiful pictures. http://zeptobars.ru/en/read/FTDI-FT232RL-real-vs-fake-supere... E
94.
by amckenna 12y ago
There was a great talk several years back at Blackhat/Defcon by the late Barnaby Jack about hacking ATMs. He targeted the generic ATMs typically seen in gas stations, but some of the same techniques apply. part 1 of 3 - https:/&#
95.
by amckenna 12y ago
I watched it a few nights ago and it was pretty good. It was cool to see each of the vehicles/capsules, their insides, and the facilities that are building them. Definitely recommend watching.
96.
by amckenna 12y ago
Yup you are correct. The chip acts as a proof of presence and a second factor of authentication. It is technically possible to export the cert off of the chip but it would cost several hundred thousand dollars and a lab with a Focused Ion B
97.
by amckenna 12y ago
It doesn't protect the information but it does protect a user from the re-use of the information because the physical card is needed to perform an EMV transaction. Banks are switching to the EMV system because they can place the liabil
98.
by amckenna 12y ago
I think you are forgetting that EMV cards introduce the concept of digitally signing a transaction. That signature is then checked by the payment card processor and if it matches then the charge goes through. The signatures are performed by
99.
by amckenna 12y ago
There is a lot of more classroom style learning on: http://opensecuritytraining.info/Training.html I also like: https://pentesterlab.com/exercises/ for web based attack walkthroughs and practice. http
100.
by amckenna 12y ago
The answer to #1 is in the wired article about Project Zero: "When Project Zero’s hacker-hunters find a bug, they say they’ll alert the company responsible for a fix and give it between 60 and 90 days to issue a patch before publicly
101.
by amckenna 12y ago
The part that really gets me is that Universal isn't even trying to help people "do the right thing". In the email from Greg Morris he states: "The problem I'm having is the ambiguity of the feedback. For example,
102.
by amckenna 12y ago
For those wondering what the program does: TL;DR - The program writes a Brainfuck program that writes the text you inputted. Pretty neat First copy the text of the letter (excluding the x86 interpreter in hex on the right, or in the case of
103.
by amckenna 12y ago
The extra byte he needed to shave off was in the 8086 assembly language brainfuck interpreter (in hex on the right of the letter) so it would fit nicely in a rectangle.
104.
by amckenna 12y ago
Not sure why you are getting down-voted. I assume you are referencing the SSD forensics article that was on here a while back that brought up the fact that TRIM on an SSD can cause forensic recovery issues. Basically blocks can be cleared e
105.
by amckenna 12y ago
What did you do in that case?
106.
by amckenna 12y ago
I think the comparison was to draw attention to just how deadly the Spanish Flu was. In history class we were taught about the Black Death as this huge and earth shattering pandemic, yet we hear nothing about the Spanish Flu. A lot of peopl
107.
by amckenna 12y ago
I'm surprised no one has mentioned the IRIS by 3DRobotics. It uses a brushless gimbal to provide the image stabilization and is made largely of plastic components that can be replaced easily. I have their hexa-copter (built from a kit)
108.
by amckenna 12y ago
Are the blades proprietary? If so how much will they be? I have quite a bit of quad/hexa-copter flying and the #1 problem I have had is replacing blades. Luckily my more expensive copter I have uses the same blades as RC planes so they
109.
by amckenna 12y ago
Thanks! Unfortunately I don't have a checklist of sorts. Most of what check for is just from habit and memory. I have a project I'm working on that will involve putting one together but that's still a few months out. If I rem
110.
by amckenna 12y ago
A couple security issues after a quick look: > No secure flag set on your session cookie > No HttpOnly flag or secure flag set on auth-token cookie > Password reset doesn't require the old password > Password policy require
111.
by amckenna 12y ago
Watching the video it struck me that the lights embedded in the barriers between lanes are a really good idea. It provides illumination of the road and the barrier without large poles lining the road which block the view and are expensive.
112.
by amckenna 12y ago
From the article: "A dark swathe of North Dakota that appears to cover the geography of the oil and gas boom stands out as well."
113.
by amckenna 12y ago
The original post debuting the hexapod design: http://zentasrobots.com/2014/03/17/morphex-mkii/
114.
by amckenna 12y ago
What an awesome design. I would love to build one of those if they had a kit you could buy.
115.
by amckenna 12y ago
These chips look pretty cool. That's quite a bit of power in one package. On a side note - for a press release it seemed kind of casual: "And because the only thing sadder than a selfie is a selfie that cannot be shared, remember
116.
by amckenna 13y ago
An idea: This would require more information storage, but would it be possible to hash an image and take snapshots of the hashing algorithm as it processes the image, say after each block of hashing (hashing digests a block - such as 64 byt
117.
by amckenna 13y ago
There was also a great talk at Defcon 21 (last year) walking through a similar process all the way to using a picture of the ROM and image recognition to pull binary data. The first half is about building the lab to do this kind of work so
118.
by amckenna 13y ago
You may be able to use it for a home server but unless you have a particular need for the NVIDIA parallel processor you're better off with other cheaper systems. If you're looking for a tiny home server check out a Raspberry Pi or
119.
UK firm behind Malaysia Airlines flight MH370 breakthrough(bbc.com)
2 points by amckenna 13y ago|0 comments
120.
by amckenna 13y ago
While it's an interesting idea it will come at the detriment to other musicians using the platform. Spotify's payouts are largely based on subscriber's monthly fees divided over the total number of plays for a month (to get p

More ›