dhx

41 ms·

301.
by dhx 5y ago
== Information on mitigating security controls in place that could have limited the severity of the incident == The screenshots show that LAPSUS$ had access via the account of the outsourced Costa Rican based Tier 2 TSE worker to view detai
302.
by dhx 5y ago
The screenshots show the account of someone who has a LinkedIn profile identifying themselves as a Tier 2 Technical Services Engineer [1] working for an outsourced services provider in Costa Rica. They've been in the job for just over
303.
by dhx 5y ago
These builds still have distribution-specific in-built API keys for some of the built-in services such as Google Safebrowsing, Google Location Services and Mozilla Location Services. See [1], [2], [3], [4], [5] and [6] for details and examp
304.
by dhx 5y ago
Kuinox could be referring to bit field types that are packed in a way that doesn't correspond to 8-bit alignments. See [1] and [2]. Kaitai Struct does support bit fields but they have to be aligned on 8 bit boundaries[3]. I can't
305.
by dhx 5y ago
Sorry for the confusing format. "[X]" is the notation used for references but "X." is just an item in an ordered list (nothing to do with references). The comment about compressed and encrypted sections of files relates
306.
by dhx 5y ago
Thanks for the example. Is there a way to perform a positive and negative look-ahead instead of just reading the remaining data to end of input?
307.
by dhx 5y ago
From the page you linked, it appears that the syntax can only handle cases where the size of a data structure is known ahead of reading the data? What about a more complex example of JFIF or ZIP where the parser has to read a data structure
308.
by dhx 5y ago
I contributed a number of file formats a few years ago (and attempted numerous others) but ran into a number of problems with certain file formats: 1. It's not possible to read from the file until a multiple byte termination sequence i
309.
by dhx 5y ago
Also remember to create tables using efficient structure packing and reordering[1], taking into consideration how the storage serializer operates (see [2] for PostgreSQL). An example provided by Gitlab[3] demonstrates structure packing and
310.
by dhx 5y ago
Column-oriented formats such as Parquet can be awful too. For example, if you have five columns of numbers you want to multiply together, Parquet is going to be the worst option available because of the extreme cache thrashing that the CPU
311.
by dhx 5y ago
The MITM proxy architecture creates a central system (or systems) with privileged in-band[1] access to all clear text traffic of the organisation. This central system would have an enormous attack surface because of the millions of lines of
312.
by dhx 5y ago
It's security through obscurity more than defense in depth because the failure mode of the two firewalls in series is the same, as observed by other systems on the network. Defense in depth would better describe the situation that even
313.
by dhx 5y ago
The company would be less secure because they would also be wearing the risk that independent of the vulnerability in firewall B, there is potentially also an unknown vulnerability in firewall A being exploited by a different attacker.
314.
by dhx 5y ago
In that example network, the Chinese, US, Russian, Israeli and other firewall vendors with their products in series could all have access to the network as each of them has implemented a backdoor that triggers on a hidden condition such a
315.
by dhx 5y ago
The scenario I had in mind is Firewall A and Firewall B are in series and they're different products from two vendors. Firewall B is found to contain a vulnerability triggered by a specially crafted IPv6 TCP packet (that firewall A is
316.
by dhx 5y ago
Use of firewalls in series from multiple vendors sounds like a good idea in theory but in practice, does it not make it easier for an attacker to exploit the network? Instead of the attacker having to find a vulnerability in a single produc
317.
by dhx 5y ago
I agree that the third car is almost certainly at fault. "Didn't have time to stop" is nonsense in every case except if some idiot cuts into your lane within your safe stopping distance and then immediately brakes. Drivers ne
318.
by dhx 5y ago
If a Model 3 decides to emergency brake without warning, can the driver still steer it to the shoulder of the highway, or are steering commands from the driver ignored? I'm guessing the first car crashed into the rear of the Model 3, c
319.
by dhx 5y ago
A particular example of why it's bad that you can't access all the data on your own device is the inability to audit security critical code. As a user, the only security guarantee you get is "trust us we are Vendor123" w
320.
by dhx 5y ago
The difficulty of using the manual trim wheels is also demonstrated in this simulator run showing the MCAS problem: https://www.youtube.com/watch?v=xixM_cwSLcQ&t=1011s There is some discussion amongst pilots at https:&
321.
by dhx 5y ago
Once an attacker has gained root access to the device they can: 1. Access any data on the device regardless of application security (including applications that may request a separate password be entered as this password entry can be captur
322.
by dhx 5y ago
The reason why the Windows Start Menu (and GNOME Shell hot corner) should be in the corner of a display is that for people using a mouse, quickly swiping the mouse into a corner doesn't require any skill or precision. Having a hot cent
323.
by dhx 5y ago
The RAND report "Mapping the Risks" (2004) [1] finds that only 6% of sampled US federal GIS datasets were useful to an adversary wanting to attack US infrastructure. The datasets sampled were quite varied and included the obvious
324.
by dhx 5y ago
What do the clauses look like? Do they actually mention "Israel" by name? Could it perhaps be poorly drafted clauses that are meant to convey a requirement that contractors to the government must equally consider procuring goods a
325.
by dhx 5y ago
It could theoretically be many different things: - To assess what the satellite is capable of doing - To geolocate where signals from Earth are originating - To analyse patterns of multi-spot beam steering and bandwidth re-allocation - Test
326.
by dhx 5y ago
Could you have perhaps been too accommodating? By being a little bit "harder to get"[1] you may be able to weed out[2][3] recruitment opportunities that aren't serious and would just be a waste of your time to follow through
327.
by dhx 5y ago
You may be interested in the National Image Interpretability Rating Scales (NIIRS)[1]. Spatial resolution alone is not enough to achieve a high score if the image is blurry, noisy or obscured by clouds or sun reflection, or if it is too obl
328.
by dhx 5y ago
Rollercoaster has a decentralised traffic-analysis resistant architecture whereas Signal is centralised. With a centralised architecture such as Signal, Eve could monitor when Alice sends a message and correlate it over time to which endpoi
329.
by dhx 5y ago
The Boeing program wanted Level B training only[1] which excludes flight simulator training, hence Forkner was trying to achieve that requirement by avoiding the need for pilots to undergo simulator training. Even if you were to remove Fork
330.
by dhx 5y ago
Thanks for the correction :) More background on usage at: https://english.stackexchange.com/questions/166332/how-did-y...

More ›