blincoln

49 ms·

541.
by blincoln 9y ago
I don't know exactly what happened in this case, because they're not sharing details, but I've done similar things in a lot of pen tests. Your assumption is pretty accurate. Whatever internet-facing device is compromised is t
542.
by blincoln 9y ago
An industrial control system that crashes when it receives an unexpected network request isn't built for someone that knows exactly what they are doing. It was built by someone who wanted to expend the minimum effort possible and mak
543.
by blincoln 9y ago
No one took him seriously because "I always have a radio on. It keeps the lasers out." is a textbook example of the kind of thing someone experiencing paranoid psychosis will say. i.e. there are certainly listening devices that op
544.
by blincoln 9y ago
The $50,800/gram figure seems to be based on the total cost of the entire Apollo project - $50,800 * 382 kilograms of material returned = $19,405,600,000, which is about 4/5 of the total Apollo programme cost listed on Wikipedia.
545.
by blincoln 9y ago
This is still my favourite example ever of a clever way to convince users to self-XSS themselves on just about any website one can imagine. Better hope that game's code isn't doing anything malicious behind the scenes :).
546.
by blincoln 9y ago
It depends upon what one is trying to do, and what resources one has available, IMO. If someone is actually working for an intelligence agency/criminal organization, or is part of an internal red team, then they have the time and resou
547.
by blincoln 9y ago
A lot of people realized that the dotcom bubble was a bubble well before it burst. The biggest sign was investors pouring money into startups that were sort of inherently incapable of generating the level of profit that would allow them to
548.
by blincoln 9y ago
Regarding the "learning progress bar", I implemented something vaguely similar in software that I wrote awhile ago[1], although it was within the context of a single set of tasks, not for multiple sets over time. IIRC, the length
549.
by blincoln 9y ago
AFAIK, J. Michael Straczynski was the first person to get a successful arc-based television series on TV, with _Babylon 5_ - the pilot aired in 1993. He had tried earlier with _Captain Power_ in 1987, but that only lasted a single season, a
550.
by blincoln 9y ago
If it incorporates a gantry design and a laser powerful enough to melt plastic, how hard would it be to make it a multipurpose 3D printer/2D (+depth) laser cutter? Getting two useful tools for the price (and space) of one would make th
551.
by blincoln 9y ago
One doesn't know if they're really going to like the game until they play it at least once, though. I'm with on_and_off - modern tabletop games have too much upfront rule-memorization required before one can even start playin
552.
by blincoln 9y ago
Counterpoint: I've written a lot of niche utilities over the years. Some of them are very simple, and some of them are very complex. They're specialized enough that in most cases, they are the only software that performs a specifi
553.
by blincoln 9y ago
My understanding is that it's not forbidden (wormholes would explicitly allow FTL travel, for example), but that in Einstein's model, FTL travel or communication would break causality, because it would effectively allow one to sen
554.
by blincoln 9y ago
If it were practical to separate them, it should really be up to them, once they're adults, but if I were in that position, I could see wanting to be separated for physical safety, if nothing else. Two bodies connected only at the skul
555.
by blincoln 9y ago
There's little reason to actually impersonate sudo, IMO. Just add a malicious PAM module[1] and log the credentials entered for the real sudo (as well as password-based logon, etc.). [1] e.g. https://github.com/ONsec-La
556.
by blincoln 9y ago
Yes. If you ever travel there for work, expect to find your hotel room well-stocked with decaf only.
557.
by blincoln 9y ago
Are there photos anywhere of the underground city mentioned in this writeup? It sounds amazing, but I've been unable to find any - just the surface-level city.
558.
by blincoln 9y ago
The same approach was originally used at Hanford in the US.[1] I've been on a couple of tours at Hanford, and the guides told us that the Soviet weapons programme was a carbon-copy of the one in the US - just scaled up, with many more
559.
by blincoln 9y ago
I agree - especially this part of Dodson's comment: "When sub-prime borrowers began to default in droves and the value of the private label MBS tumbled, investors also pulled away from the conventional MBS market as well, even tho
560.
by blincoln 9y ago
Maybe where you live. In the Seattle area[1], speed bumps are frequently installed on residential streets where the actual limit is 25-30 miles per hour (40-50 kilometers/hour using non-legacy units). It's typically done in "
561.
by blincoln 9y ago
It could easily be interpreted as a CFAA violation in the US as well. I'm a professional pen tester, and there's no chance I'd port-scan any system on an aircraft without permission.
562.
by blincoln 9y ago
Seems like the naval vessels should be using passive radar detection as well, if they're not already. That wouldn't protect them from everything, but it should catch all of the big commercial vessels, right?
563.
by blincoln 9y ago
These polyphenols are from strawberries. Tannic acid (like one is exposed to when drinking tea), and grapes also contain polyphenols. If polyphenols as a whole were really dangerous, it seems like it would be pretty obvious by now.
564.
by blincoln 9y ago
This is actually what digital forensics specialists do as well, although they've probably moved on from MD5 by now. I know there's been talk of "fuzzy hashes" as well, in order to catch files with trivial modifications,
565.
by blincoln 9y ago
There is no publicly-known "preimage" attack against MD5. One would need to craft an offensive file and a non-offensive file themselves so that the hashes would match, then somehow get the offensive file into the official databas
566.
by blincoln 9y ago
When I was young, my parents described Turkish Delight as being basically Applets & Cotlets, and that sounds like an accurate description based on this article. Substitute rosewater for apple/apricot/whatever juice and you&#x2
567.
by blincoln 9y ago
I came up with the same concept - and almost the same name[1] - as a joke at work last year, and could not stop laughing at the results, so I completely agree. The one improvement to the public project I'd suggest is from my own. Inste
568.
by blincoln 9y ago
Have you ever seen how chickens are raised for mass-scale meat production? I used to catch the bus across the street from a chicken-processing plant. They live in cages that are just large enough for the chicken itself, and the cages are st
569.
by blincoln 9y ago
Additionally, so much of the internet is ephemeral, compared to the content that students or researchers would have been photocopying when Umberto Eco wrote the piece that's quoted in the article. For this reason, if I find an interest
570.
by blincoln 9y ago
It can be useful in either case. It depends on what the attacker is trying to achieve. If they just want to get in as any user, then your hypothetical system with a billion regular users is going to be even easier, because if even a fractio

More ›