dguido

31 ms·

271.
by dguido 11y ago
I don't think the classification of most of those DoS bugs are correct. I also don't think there's a big difference between 100 vulns per year and 300 vulns per year. You go fishing and you find some each time.
272.
by dguido 11y ago
The chart you just linked (which doesn't show a timescale) shows Chrome with over 300 exploitable bugs. I doubt the denial of service label, that just usually means that a bug wasn't fully investigated. So, again, how is this diff
273.
by dguido 11y ago
In a way, yes, they do. Chrome pushes out a dozen or more fixes for remotely exploitable vulnerabilities every 2 weeks.
274.
by dguido 11y ago
Every piece of software you use is on a constant month-to-month patch train. Chrome, Windows, Firefox, Quicktime, Adium, hell even OpenSSL updates for security-critical bugs about once a month now. Flash is nothing special. All your softwa
275.
by dguido 11y ago
You think that any other software you use is any better? Flash gets it rough because it's widely used and independent of the browser (for the most part). If you're running an update to date flash, that means you're probably r
276.
Why startup rules don’t apply to Security Products(medium.com)
4 points by dguido 11y ago|1 comments
277.
by dguido 11y ago
Before you start shitting on OPM and the like, is this any different than what would happen if a dedicated attacker came after the most valuable data in your company? Clearly, OPM should know, but omg is the state of security poor.
278.
by dguido 11y ago
OP mentioned they had a dedicated computer, so I ignored endpoint security issues. DNS hijacking and other firms of network MITM are a risk, sure, but they are so incredibly rare to see in the wild that it's outside the scope of most p
279.
by dguido 11y ago
No one has the source or binary code for the webserver AWS uses. It would be nearly impossible to write an exploit for it blind like that. Even if you did write it blind, it would be a slow process that likely requires bruteforcing parts of
280.
by dguido 11y ago
Not through a web application vulnerability it can't (there is no application code to break!). Your biggest issues with that setup will be: 1. Credential and permissions management. Don't lose control of your access keys to AWS! S
281.
7 Teams Hack Their Way to the Darpa CGC Final Competition(darpa.mil)
2 points by dguido 11y ago|0 comments
282.
by dguido 11y ago
FYI anyone can integrate yubikey u2f logins on their website. It's easy, try it out: https://developers.yubico.com/U2F/Libraries/List_of_librarie...
283.
by dguido 11y ago
This looks like a perfect candidate for a Heroku button: https://blog.heroku.com/archives/2014/8/7/heroku-button
284.
by dguido 11y ago
The qualification round is happening right now . Here's a twitter list with the competitors and their robots: https://twitter.com/trailofbits/lists/cgc https://twitter.com/search?q=%23DARPACG
285.
DARPA's million-dollar search for software that can defend itself(theverge.com)
2 points by dguido 11y ago|1 comments
286.
Closing the Windows Gap – Practice Windows Exploitation with a new CTF Framework(blog.trailofbits.com)
3 points by dguido 11y ago|0 comments
287.
by dguido 11y ago
Related, LLVM Tutorial: https://github.com/trailofbits/presentations/tree/master/LLV...
288.
The Smartest Hackers in the Room (Hint: They're Not the Humans)(nextgov.com)
1 points by dguido 12y ago|0 comments
289.
by dguido 12y ago
https://s3.amazonaws.com/s3.documentcloud.org/documents/1690... This is not a "cyberware toolbox." This is an IDS. For real, I bet they are using Snort inside one of their codeworded intrusion detection&
290.
by dguido 12y ago
> Automated discovery and exploitation of architectural flaws is merely the next step in the evolution of software. > This has an end condition, of course - and that is the total loss of control over our technological infrastructure.
291.
by dguido 12y ago
Ironclad Apps from MSR: https://www.usenix.org/conference/osdi14/technical-sessions/...
292.
by dguido 12y ago
I'm surprised they didn't mention how amazingly insecure it is to be running a phone that old. If you're running a private messenger like Signal, you might not want to install it on a device vulnerable to bootrom exploits tha
293.
by dguido 12y ago
It stops iOS from saving screenshots of the app when it closes. When an app launches on iOS, it initially draws the UI from a saved screenshot while the app is loading. This creates a privacy risk since that image may contain sensitive info
294.
by dguido 12y ago
That works too! Why any of this software was running on a machine that can transfer $10mil+ is beyond me.
295.
by dguido 12y ago
The weakest link was that the computer with access to $10 million+ had access to the general web and was running a general purpose operating system at all. You don't need Qubes to secure this situation. You could use an iPad/Chrom
296.
by dguido 12y ago
> Finally, I think you're much more familiar with Mayhem than I am, but I call into question the bugs Mayhem found. How many were high severity and/or actually exploitable? (I'm actually asking because I've seen confl
297.
by dguido 12y ago
Sorry, but I'm not certain how you make a business model off that idea. To win, you need to ensure that people can build and use these tools to secure the world AND make money off it. Second, investing in security R&D is not that r
298.
by dguido 12y ago
Sheesh people, this is the second time this week that this topic has come up and no one mentioned the DARPA Cyber Grand Challenge! It was on 60 minutes this weekend for crying out loud. tl;dr DARPA is challenging companies to develop and im
299.
by dguido 12y ago
Nothing about "The FTC will sue you if you market an insecure device and put consumers at risk by using it." If you're not aware, the FTC has put a tremendous amount of resources over the last ~2 years towards enforcement act
300.
by dguido 12y ago
First, no the NSA does not have some kind of secret, hardened OS. Second, https://en.wikipedia.org/wiki/Security-Enhanced_Linux Third, https://www.nsa.gov/ia/mitigation_guidance/security_confi

More ›