dguido

45 ms·

421.
by dguido 14y ago
I just checked and all of the computers and devices I own for work have AES hardware in them (Mac Mini, Macbook Air, iPhone). Maybe NIST thinks that, through standardization efforts, they can encourage more people to integrate such hardware
422.
by dguido 14y ago
That's completely unnecessary and potentially risky for the attacker. Your theory is not based in reality. DOES NOT MAKE SENSE.
423.
by dguido 14y ago
Um, no. The reason they DDoS financial institutions is so they have a chance to cash out the stolen goods immediately. Stolen financial data has an expiration date and the DDoS extends that just long enough for it to be useful. DDoS'ing git
424.
by dguido 14y ago
Fine, you guys asked for it. https://news.ycombinator.com/item?id=259458 https://news.ycombinator.com/item?id=3859853 https://news.ycombinator.com/item?id=1674911 https://news.ycombinator.com/item?id=301296 https://news.ycombinator
425.
by dguido 14y ago
No grudge necessary. This comment thread is lulzy enough by itself. Watching an entire user community freak out over not being able to access their source code in real time over HTTP is a good enough payoff.
426.
by dguido 14y ago
What? You guys don't think that HN is enough troll bait for someone to spend $100 to DDoS a web property you care about?
427.
by dguido 14y ago
Probably should rename this to "billion reposts." Can we move beyond this simple issue and discuss more complicated aspects of security on HN?
428.
by dguido 14y ago
Probably to watch all of Hacker News squirm.
429.
by dguido 14y ago
I think he would have left after the first one if he wanted to.
430.
by dguido 14y ago
What makes you think he doesn't already have a job? He's going by a handle because participation in the contest would get him fired from his job.
431.
by dguido 14y ago
DEFCON CTF teams with points: 303 ( http://ddtek.biz/qualsDC20scoreboard.html ) CSAW CTF teams with points: 639 STRIPE CTF competitors: ~7,000 CSAW CTF competitors: ~9,100 Writeups are being posted in reddit.com/r/netsec: http://raider
432.
Largest CTF in the World: NYU-Poly CSAW CTF(csawctf.poly.edu)
1 points by dguido 14y ago|1 comments
433.
by dguido 14y ago
It looks like Jonathan Brossard was the author: https://twitter.com/jonoberheide/status/251902357720403971 I doubt this is widely known on Hacker News, but Hakin9 is one of the most spammy organizations in infosec. They constantly beg eve
434.
by dguido 14y ago
There are 700+ teams currently registered. The competition is open to anyone, but only students are eligible for the over $200,000 in prizes and travel scholarships to attend the final round in NYC.
435.
Liked the Stripe CTF? The World's Largest Student-Run CTF is this Weekend(csawctf.poly.edu)
11 points by dguido 14y ago|1 comments
436.
by dguido 14y ago
Yes, I'm sure that my analysis was correct. IE8+ on Vista+ run IE renderer's in Low Integrity, which means read-only access. It's not possible to further compromise (ie, install malware) on the exploited machine without a second exploit tha
437.
by dguido 14y ago
How many times do people need to talk about SQL injection before people writing web apps get it? This isn't news and this isn't hard to completely avoid. Just do it and stop being amazed every time someone puts a tick mark in an URL paramet
438.
by dguido 14y ago
This title is a bit misleading. This exploit will not be able to fully exploit anyone running on Vista or Windows 7, since Internet Explorer renderers run in low integrity processes on those operating systems (essentially, they are sandboxe
439.
by dguido 14y ago
Uh, it's marked FOUO, not Top Secret, and it's going to be made public when it gets issued anyway, troll.
440.
by dguido 14y ago
Nice! I was being somewhat facetious so hopefully people came to the conclusion themselves that the situation is nothing like what the title of this thread is describing. Pretty sad that the copyright lobby has poisoned the water so badly t
441.
by dguido 14y ago
Uhh, I was just going to say "Ruby 1.9 by default" but ok.
442.
by dguido 14y ago
Excuse my ignorance, but what is CISPA like about this? The Federal News Radio link talks about the EO is significantly more detail.
443.
by dguido 14y ago
They didn't say the currency they're using. It's millions because it's all in Facebook dollars (effectively ~$5 USD total).
444.
Samurai CTF, the winners of Defcon CTF this year, are doing an AMA on Reddit(reddit.com)
3 points by dguido 14y ago|0 comments
445.
by dguido 14y ago
People that use Outlook also tend to have more... valuable conversations in their inbox and demand more in terms of security and privacy from their mail providers. I hope that as part of courting this group of users to outlook.com, Microsof
446.
by dguido 14y ago
I would say the master->apprentice relationship is quite common. I'm surprised that no one mentioned my class yet, where I have some of the best people in the world talk about exactly how to learn this stuff. http://pentest.cryptocity.
447.
by dguido 14y ago
People that have received this warning so far: * @gesa, Obama campaign web developer says an infosec staff member got one: https://twitter.com/gesa/status/210184075149979649 * @dandrezner, international relations professor: https://twitt
448.
by dguido 14y ago
Hey, just wondering, did someone make that infographic by hand or is there some software that does it for you? EDIT: Made by a graphic designer, answered below. And now I will shamelessly take this moment to request a few features related t
449.
by dguido 14y ago
Parallel gzip, in case anyone wanted it: http://zlib.net/pigz/ I've used it to great effect during incident response when I needed to search through hundreds of gigs of logs at a time.
450.
by dguido 14y ago
Nope, I believe it. I bet they also didn't use SSL at all, just like they didn't in the iPhone app.

More ›