dguido

36 ms·

331.
by dguido 13y ago
They look like whatever you want them too. Here's a typical defense-oriented phish from China. Obviously it means a lot more to the recipient than it would be to you. Point is, it's been customized. Don't worry, someone in yo
332.
by dguido 13y ago
Probably the best article on security I've ever seen come up on Hacker News. I would take the security@ recommendation and move it up a few notches though. It costs nothing and you get tremendous benefit if someone is trying to tell yo
333.
by dguido 13y ago
Feedback welcome! Interested to hear how others do GHE backups.
334.
Encrypted Backups to S3 for GitHub Enterprise(github.com)
1 points by dguido 13y ago|1 comments
335.
by dguido 13y ago
If clicking one link leads to your company losing all of its intellectual property, then you have a technology problem. Lazy security "professionals" who can't design good solutions are far too quick to blame users.
336.
by dguido 13y ago
Press release with no real info. Not sure how a "PRISM-proof Tor server" even makes sense. People you don't like can still run as many backdoored exit nodes as they want, and it's up to you to properly use crypto so they
337.
by dguido 13y ago
Forum is here: http://www.darpa.mil/cybergrandchallenge/ Full BAA is here: https://www.fbo.gov/index?s=opportunity&mode=form&id=2d589ae... Shorter Rules document (includes open track info): ht
338.
by dguido 13y ago
... and they won't put impact sensors in their players helmets to track potential brain injuries.
339.
by dguido 13y ago
Compelling argument to switch to iPad cash registers? har har Btw, if anyone wants to buy one, you can here: http://www.keelog.com/wifi_hardware_keylogger.html
340.
by dguido 13y ago
Reproducing an earlier comment I made on Reddit ( http://www.reddit.com/r/netsec/comments/1mn2nk/ssltls_deploy... ): If you want the short version for Apache, Nginx and OpenSSL: http://blog.ivan
341.
by dguido 13y ago
:-), my bad. Shane doesn't work for us. His name is listed on the research page, but I should add his name to the software page to credit him there too.
342.
by dguido 13y ago
If you want to know more about KARMA, we came up with it in 2004 and the original docs and code are on our website: http://www.trailofbits.com/software/#karma
343.
by dguido 13y ago
Here's the list of people registered already: https://ctf.isis.poly.edu/competitors/ If you want to join, register here: https://ctf.isis.poly.edu/register/
344.
10,000 people are playing CTF this weekend. Do you want to join them?(poly.edu)
1 points by dguido 13y ago|1 comments
345.
by dguido 13y ago
Cool to see Paulo up on Hacker News. One of our employees wrote a book with him and his wife recently, examining the proliferation of cyber espionage and "cyber war" in the last decade or so. We think it's one of the only sob
346.
by dguido 13y ago
[replying to my own post] Just a note, I talked with Authy on Twitter and they indicated they're making Bluetooth an opt-in feature in the future and that their management console has the ability to restrict all use of it by managed cl
347.
by dguido 13y ago
Nope, nope nope nope nope. Authy's latest "innovation" where bluetooth on the host can grab a new code from your mobile device provides a direct link between your two factors (reducing them to one). I don't think their t
348.
by dguido 13y ago
This kind of stuff has been around since 2005: http://difrwear.com/ If you want to turn off your cellphone... turn off your cellphone. It has an off switch and airplane mode. This kind of protective casing is really only ne
349.
by dguido 13y ago
Yes, and they have a wildly different opinion than HN: http://www.reddit.com/r/netsec/comments/1kkvei/user_reports_...
350.
Why Everyone Is Pissed Off About Google Chrome’s Sound Security(wired.com)
9 points by dguido 13y ago|0 comments
351.
by dguido 13y ago
This entire article is based on an unsubstantiated rumor from Steve Blank, someone who is not a security expert at all.
352.
iPhone users now have an easy way to ensure their phones are free of malware(blog.trailofbits.com)
2 points by dguido 13y ago|0 comments
353.
The ODNI Defends NSA Surveillance Programs - Schneier on Security(schneier.com)
3 points by dguido 13y ago|0 comments
354.
by dguido 13y ago
I think the surprising part about this is the following statement: "The DGSE entirely designed the program and no data protection representative is overseeing it." I differentiate between these programs more with "It's n
355.
India sets up elaborate system to tap phone calls, e-mail. No oversight.(in.reuters.com)
3 points by dguido 13y ago|0 comments
356.
by dguido 13y ago
That would only be accurate if you could trigger one of these bugs remotely.
357.
by dguido 13y ago
You're welcome to step in and explain, but I think it's pretty obvious why local vulnerabilities in non-setuid binaries aren't exactly "critical."
358.
by dguido 13y ago
Yes, all of those vulnerabilities in non-privileged applications like 'ls' are worth millionssssss.
359.
by dguido 13y ago
Why is it "Hacker News" that someone who is not physically harmed is being examined by a doctor? I thought this website was about startups?
360.
by dguido 13y ago
lol: "NSA Is No Match for the FSB" http://www.themoscowtimes.com/opinion/article/nsa-is-no-matc...

More ›