dguido

35 ms·

301.
by dguido 12y ago
I'm happy to be a funded team in that challenge. There's another website with highlevel info for those casually interested in the challenge. If you want the hard details, there's a lot of code up on Github. http://
302.
by dguido 12y ago
Make sure to set it back when you're done! If you don't, then an unauthenticated RDP session can use this trick to login to the machine you fixed.
303.
by dguido 12y ago
This is a vulnerability. This attack does not require physical access. Do you really think that startup repair mode is required to swap the position of cmd.exe and sethc.exe?
304.
by dguido 12y ago
And then you can't set it back (since you don't know what it is), so the owner of the machine would immediately know you were there. They wouldn't be able to log in.
305.
by dguido 12y ago
Startup repair is not necessary to use the sethc trick.
306.
by dguido 12y ago
No, if I exploit your computer and have admin rights, I can use this technique to enable persistent access to it over RDP. This is a common technique that hackers use in enterprise networks.
307.
by dguido 12y ago
This trick is widely used by hackers to maintain persistent access to large enterprise networks. You can RDP around and press Shift 5 times to pop up the cmd.exe on machines you've modified. No malware needed. Performing this modificat
308.
by dguido 12y ago
> If I could summarize your point in a more even handed way, it would be that the view that government is a slow moving, inefficient behemoth, is disproved by its role in stimulating progress in Silicon Valley. I'll take it! > Lo
309.
by dguido 12y ago
Check out Intel MPX and execute-only memory. You probably want your code protected so that someone other than you can't modify it at runtime, from an external source... if you understand what I'm getting at.
310.
by dguido 12y ago
This is one of my favorite (if not my absolute favorite) computer history lectures. It's pretty ironic watching all the anti-government comments on this site while most people here are ignorant about where Silicon Valley came from. See
311.
by dguido 12y ago
If anyone trusts a rails app for real money, they're an idiot. Homakov made his report today and they'll patch these bugs but did he get them all? What about new code that is written? Will he watch every commit made in the future?
312.
by dguido 12y ago
Biggest change here is that it's becoming so hard to find bugs on Google-owned domains that they're starting to pay speculative bounties (before you've found anything). I'd really like to see how many bounties they paid
313.
by dguido 12y ago
Sorry, but did you even read either article before posting your unintelligible conspiracy theory? One does packet parsing and the other verifies ability to assess webapp vulnerabilities. https://github.com/USArmyResearchLab&
314.
by dguido 12y ago
If you're planning on scanning all of your web apps at scale, you probably want to know what you can find and what you'll miss. As for competitors, I think there is WavSep but I'm not sure how suitable it is for Yahoo's
315.
by dguido 12y ago
Welcome to (at least) 2004? http://eckbox.sourceforge.net/ EDIT: Should have just linked to the paper instead. It looks like their primary contribution was an ability to measure the susceptibility of a device to these kinds
316.
by dguido 12y ago
DRM can protect your own code as much as it can deny your rights. Repurposing many of these technologies for security, isolation, and verified freedom from malware could be the single largest step in computer security in recent history.
317.
by dguido 12y ago
If you're interested in security, you may want to look at the CTF Field Guide which is based on an older course at NYU-Poly, CS6573: Penetration Testing and Vulnerability Analysis. https://trailofbits.github.io/ctf&#x2F
318.
by dguido 12y ago
> 10/ cybersecurity budgets will explode in 2015 as every company, institution, and government attempts to avoid being Sony’d. VCs will pour money into this sector in the same way they poured money into the rental economy. and, yet,
319.
by dguido 12y ago
Works fine.
320.
by dguido 12y ago
Welcome to the club? PrivEscs exploits are becoming more common as sandboxes increase in popularity. Windows had a few such bugs exploited by real attackers as zerodays in the last month (check CrowdStrike and FireEye blogs). I don't t
321.
by dguido 12y ago
Here's a tinier, also fast one: https://github.com/stealth/lophttpd
322.
by dguido 12y ago
done: http://goodfet.sourceforge.net/hardware/facedancer11/
323.
Announcing the Speaker Lineup for THREADS 2014: Scaling Security(blog.trailofbits.com)
1 points by dguido 12y ago|0 comments
324.
by dguido 12y ago
Oh hey, we're working on MUSE! MUSE is a really unique program. I think the plan is for it to be entirely unclassified and for all the code and research to be published at its conclusion. We expect several performers will make use of a
325.
by dguido 12y ago
Goldman actually makes a huge number of these kinds of investments every year, and has since at least 2001. http://www.goldmansachs.com/what-we-do/investing-and-lending...
326.
by dguido 13y ago
Hey, Javelin product manager here. There's some discussion on Reddit that might prove interesting to readers here: http://www.reddit.com/r/netsec/comments/1ysg92/show_netsec_w... It'd be great
327.
Show HN: We launched Javelin, the product I've been working on(javelinsecurity.com)
11 points by dguido 13y ago|1 comments
328.
by dguido 13y ago
Is there any real information about this? All I've seen is a press release with more marketing info than details.
329.
by dguido 13y ago
You should consider combining CipherScan and SSL Labs into a Tools section, then adding SSLyze. It does nearly everything SSL Labs does from the command line: https://github.com/iSECPartners/sslyze
330.
UMD is hosting a secure-programming contest in January [Build It / Break It](builditbreakit.org)
1 points by dguido 13y ago|0 comments

More ›