bsamuels

25 ms·

181.
by bsamuels 8y ago
I dont remember anything in the snowden docs about the NSA trying to track the movement of all american citizens. Comparing what the NSA does to what China does is like comparing the treatment of women in the US and Saudi Arabia
182.
by bsamuels 8y ago
not terribly uncommon in the hardware world - injection moulds are expensive!
183.
by bsamuels 8y ago
lol, let me introduce you to the new gmail ui
184.
by bsamuels 8y ago
adding a database lookup is adding state
185.
by bsamuels 8y ago
Unfortunately I don't have much reading material to provide. It's a bit of an arms war, so the latest and greatest countermeasures are typically kept secret/protected by NDA. The rabbit hole can go very deep and can differ fr
186.
by bsamuels 8y ago
Modern cred stuffing is done by botnets. When I see a cred stuffing attack, it's maybe 1-3 attempts per IP address spread over 100-500k IP addresses. Often you'll have a family of legitimate users behind an IP address that's
187.
by bsamuels 8y ago
yes, but you probably wont have the benefit of the map editor
188.
by bsamuels 8y ago
that kind of detail isn't terribly important when you're trying to move fast & break things
189.
by bsamuels 8y ago
injections would require too much articulation, finding veins, etc loading a tranq dart with caffeine and shooting them at drowsy people would be much more cost effective
190.
by bsamuels 8y ago
this is probably a silly question, but why isnt the smallest possible quantization just planck length, or planck length cubed?
191.
by bsamuels 8y ago
lung transplantees only live for around a year post-transplant. rejection is much more common with lungs than other organs
192.
by bsamuels 8y ago
nobody is going to spend the atrociously high cost of cloud gpus to crack someones home wifi password in an un-targeted attack. your home wifi threat actor is your neighbors kid playing with aircrack. in a corporate environment, use wpa2-en
193.
by bsamuels 8y ago
The US government will just give the AI contract to Raytheon/Northrop instead of Google. What's your point?
194.
by bsamuels 8y ago
it doesn't matter where you store the key as long as it's not easy to figure out for the disassembly program
195.
by bsamuels 8y ago
if you find this article interesting, highly recommend reading The Seventh Sense. does a great job at explaining how networks will redistribute power and change power dynamics
196.
by bsamuels 8y ago
giving average joe the opportunity to lose all his money in cryptocurrency/day trading doesnt strike me as redistribution of wealth
197.
by bsamuels 8y ago
I won't provide a source but i'll provide a modified real life example, since i'm pretty sure this vuln is still in the wild. I was doing a pen test on a router whose manufacturer decided it would be an OK idea to use GET req
198.
by bsamuels 8y ago
that's quite the stretch since the TCP 32764 issue was unique to sercomm routers, which is a Taiwanese router ODM. they write the firmware and create the hardware, then rebrand the UI for however linksys/netgear/whoever wants
199.
by bsamuels 8y ago
Nintendo did more than just dump Sony, they humiliated them. Originally, Sony was supposed to be Nintendo's partner for the CD-i machine. Nintendo went behind Sony's back and partnered with Phillips. At the summer 1991 CES when So
200.
by bsamuels 9y ago
if you have to spend 15-20 minutes pulling out books and looking up commands/registers every hour, you lose a lot of productivity. that was the reality of programming before the internet
201.
by bsamuels 9y ago
do you have evidence that something like that has happened before with such a specifically worded bill?
202.
by bsamuels 9y ago
yeah reverse engineering another company's IP so you can steal it is definitely ethical behavior
203.
by bsamuels 9y ago
you can never 100% eliminate the risk of data theft. all you can do is implement controls that manage that risk based on how valuable the data is. certain controls like mandatory 2FA give a very good bang-for-buck, highly recommend it for a
204.
by bsamuels 9y ago
you think swatting is a prank?
205.
by bsamuels 9y ago
You're the only person who ever writes about exploiting people's CI tools, so I end up quoting your work a lot. Would love to see a swing taken at Pandemic Legion's new forum background watermark, it's a lot more interes
206.
by bsamuels 9y ago
There's two kinds of text-based data that counter intelligence ops try to protect: Forum posts and 'fleet pings'. For forum posts, an adversary can do exactly what you say - just take the meaning of the forum post and write
207.
by bsamuels 9y ago
No, counter intelligence tools in EVE are a closely guarded commodity. The automatic ones I've seen leave a lot to be desired. There's one group that I'm nearly certain is running one that works well but I don't have evi
208.
by bsamuels 9y ago
This is a pretty common method of watermarking sensitive content in EVE Online alliances, however we've found it suffers from some serious drawbacks. Zero-Width characters tend to cause lots of issues when they are copied and pasted, w
209.
by bsamuels 9y ago
why would you dump $2,000 dollars into a crypto coin you don't understand
210.
by bsamuels 9y ago
how many hours in the air do you have that you've used to make that decision?

More ›