bobedybobbob

4 ms·

1.
by bobedybobbob 10y ago
I was under the impression Google (or Google Ventures) owned part of Uber - surely this will make things complicated?
2.
by bobedybobbob 10y ago
Is that global or just the employees in California?
3.
by bobedybobbob 10y ago
I'm all for the Non-Proliferation of Nuclear Weapons but also find it amazing what their scientists can do working with such limited resources.
4.
This PNG is also a webshell (2012)(idontplaydarts.com)
2 points by bobedybobbob 10y ago|0 comments
5.
by bobedybobbob 10y ago
Phishing is generally 1. run a command or 2. give me your credentials. To prevent these you need good solid technical controls like U2F for password based authentication (which is origin bound). Similarly binary whitelisting will prevent mo
6.
by bobedybobbob 10y ago
With time, creativity and motivation a good offensive security team will always win. All we can do as defenders is to find ways to raise the cost of such an attack. A bit disappointed they seem to have started on the internal network rather
7.
Detecting curl pipe bash server side(idontplaydarts.com)
20 points by bobedybobbob 10y ago|0 comments
8.
by bobedybobbob 10y ago
It'd be nice to see support for U2F
9.
by bobedybobbob 10y ago
Nearly all door controllers are broken. I hope someone comes out with a secure alternative soon but fear that the cost of installation that comes with these devices will prevent many people from upgrading.
10.
by bobedybobbob 11y ago
Do we really need CVE numbers assigned for all of these? More or less every application out there is vulnerable to some form of timing attack
11.
by bobedybobbob 11y ago
The core issue is the same that leads to cross domain search timing attacks [1] (which can be prevented with CSRF tokens) With timing HTTP->HTTPS redirections maybe the issue is not that the response can be timed but that HTTP exists in
12.
Exploiting CSRF against search with Lucene(idontplaydarts.com)
23 points by bobedybobbob 11y ago|10 comments