dfc

35 ms·

541.
by dfc 10y ago
Your commment makes it seem like you may not be aware of nessus?
542.
by dfc 10y ago
Allegedly there is an extended version of the paper here: http://crcs.cz/rsa But the site is not responding and archive.org has no information either.
543.
Shin GRR: Make Fuzzing Fast Again(blog.trailofbits.com)
1 points by dfc 10y ago|0 comments
544.
by dfc 10y ago
Yeah, I picked that up from reading the press release[1] that OP had originally included in the comment. What I was surprised to discover was the 404 error page when I clicked the individual links for the different standards. My expectation
545.
by dfc 10y ago
404 for every link to the standards. Awesome!
546.
by dfc 10y ago
I am not sure why this is newsworthy. 4.3 is EOL upstream. https://www.virtualbox.org/wiki/Changelog-4.3
547.
by dfc 10y ago
I can't figure out what the app does to "detect" surveillance cameras?
548.
by dfc 10y ago
But "I wanted to spare developers from suffering...if we don’t allow developers to provide the experience users need , we’re not doing anyone any favors"
549.
by dfc 10y ago
> Developer Experience Is More Important Than UX — Wrong When would "developer experience" ever be more important than "customer experience"?
550.
by dfc 10y ago
I am not the author but I imagine this was not included as a joke: "All charts were made using R and ggplot2."
551.
by dfc 10y ago
How did you "avoid" sample bias? How many of the passwords come from databases that were dumped in cleartext or cracked with 100% success? Meaning every account on that system was included in cleartext or 100% of the passwords fr
552.
by dfc 10y ago
The problem with this type of analysis is that it treats the 10million passwords as if they are representative of all passwords. A more descriptive title would be: "Analyzing the Patterns of Numbers in 10 Million passwords that were no
553.
by dfc 10y ago
It looked at the original schedule for the UHK and some of the recent updates. It looks like they are a little more than a few months late? I wish them all the best but I don't think they are going to be around long enough to deliver o
554.
by dfc 10y ago
Another nice thing about Debian's certificate package is that debconf will prompt you to accept each new certificate if you have debconf set to show low priority questions. I have not seen anything similar in other distributions or OSX
555.
by dfc 10y ago
The Ergodox EZ is the closest competitor that I can think of and it is $295. $250-350 is what I would expect a pre-assembled two piece (split) mechanical keyboard to cost.
556.
The American chess champion challenging Iran’s hijab fetish(washingtonpost.com)
99 points by dfc 10y ago|163 comments
557.
by dfc 10y ago
Yeah, this is showing one way to copy data from a computer using busybox's ftp client. Where is the surreptitious smuggling? I like my exfil to atleast have a hint of James Bond, MacGuyver, or Rube Goldberg; otherwise it's just co
558.
by dfc 10y ago
I was browsing through the Mozilla security blog and saw that they did some work on OWASP's "alternative" to Burpsuite, ZAP. Which was a little surprising. That project could certainly use a little influx of cash/develop
559.
by dfc 10y ago
What is your definition of exfiltration? Or more importantly how do you distinguish between exfil and normal transfer by an authorized user?
560.
by dfc 10y ago
That was a let down. Is it really "exfiltration" when you use a protocol designed for mass data transfer and you use it in the exact manner it was intended to be used? The less linkbaity title is "Transferring files with Busy
561.
by dfc 10y ago
I'm not trying to be a jerk, I am just curious if I missed something. Where is the humor?
562.
Boofuzz: A Fork and Successor of the Sulley Fuzzer Framework(github.com)
2 points by dfc 10y ago|0 comments
563.
by dfc 10y ago
What is DTA? And why is it so bad for use in some code that seems to be for testing?
564.
by dfc 10y ago
I think this "wisdom" or "best practice" is targeted at the overwhelming amount of the population that are concerned with using SSH on a computer they control and are therefore not concerned with leaving footprints behin
565.
by dfc 10y ago
I apoligize I don't have my copy of Garner in front of me. Why are you saying serious is only used comparatively?
566.
by dfc 10y ago
I always thought you were not supposed to enable flow control on a network with mixed 100 and gigabit devices. From the list of things OP has hooked up to network I would be surprised if they are all operating at 100 megabits.
567.
by dfc 10y ago
Are there any credible sources that indicate the crash was something other than pilot error potentially exacerbated by technical difficulties?
568.
by dfc 10y ago
Why do you need to frequently change email headers?
569.
by dfc 10y ago
After 18 I decided to stop. As I was closing the tab I caught 23 out of the corner of my eye and realized stopping was the right decision. I don't understand how you can reconcile 1 and 18.
570.
by dfc 10y ago
Pedantry: The Nautilus article claims that the disease entered the US via a shipment of furniture. This is incorrect. Dutch elm disease came to the US in unprocessed logs. You only need to read the NYT article that is cited: "The fung

More ›