fabulist

33 ms·

301.
by fabulist 12y ago
Why is bash the only program which has special permission to trust its input?
302.
by fabulist 12y ago
I really don't think making protocols less understandable by humans will solve anything. This has always been and always will be a hard problem. Consider this quote which I found in The Shellcoder's Handbook: "Wherever terms
303.
by fabulist 12y ago
I agree. This is an interesting idea, so I upvoted the paste. But I don't think this author knows how deeply the bug runs, either; the most recent way to exploit it is to export an environment variable of, say, ls to a bash function. [
304.
by fabulist 12y ago
You're right, and I didn't find this out until after I couldn't edit my post. My mistake. I still contend that its a good idea. Most shell scripts used by the OS are written to dash in my experience; if you break ones you&#x2
305.
by fabulist 12y ago
Test your local machine: export evil='() { :;}; echo vulnerable'; bash -c echo; Vulnerable computers will print 'vulnerable'. Test a CGI: curl -i -X HEAD " http://website" -A '() { :;}; echo &qu
306.
by fabulist 12y ago
Setting an environment variable is often pretty easy, but the Host: header is the wrong way to go. The webserver will usually ignore a bad Host: header. User-agent: is much more availing.
307.
by fabulist 12y ago
Google brings up 410 .bash CGIs. Every one of them is almost guaranteed to be vulnerable at this point. Of the 1.2 million .sh CGIs, some are surely vulnerable. By this time, many of them are already be in the process of being owned. CGIs a
308.
Windows Privilege Escalation Fundamentals(fuzzysecurity.com)
2 points by fabulist 12y ago|0 comments
309.
by fabulist 12y ago
I think the methods are crude but the motives are quite clear (if the story is true); Comcast doesn't like Tor for the same reason the NSA doesn't like Tor. Comcast doesn't have a good track record for handling traffic ethica
310.
by fabulist 12y ago
Ross Ulbricht was an economist who knew some PHP, not a super-hacker.
311.
by fabulist 12y ago
This is obviously not a sufficient defense on its own, but my first reaction was that the HTTPD should have been bound to 127.0.0.1 and proxied to Tor; that way, it didn't know its IP and couldn't be accessed over the clearnet (al
312.
by fabulist 12y ago
> Hopefully the idiots who call themselves security experts will stop making me answer "what's my mother's maiden name". This is done by developers, not security experts. If security experts had their way, it would be
313.
by fabulist 12y ago
This SHODAN search query will show you other 418s: http://www.shodanhq.com/search?q=port%3A80+HTTP%2F1.0+418+te...
314.
by fabulist 12y ago
I have some issues with this list. 1. If we know who they are, are they really the best? David Smith is, as the article says, the only person to go to jail for writing a Macro virus, the past time of script kiddies everywhere (at one point
315.
by fabulist 12y ago
Perhaps. It reminded me of another incident; I tried to access EFF's Panopticlick, and got a certificate signed by "OHAI THAR" or something like that.
316.
by fabulist 12y ago
I'm in a similar boat, and I'm about to embark on my first idea. All I can tell you is, keep at it! Think of ideas, and write them down; draw diagrams of the architecture; investigate what other people are doing. I came across thi
317.
by fabulist 12y ago
Would you or others care to share the story of how they got hacked? The only time I've been aware of getting hacked, my friend handed me his computer and said, "You're a nerd, find me a live pirate stream of the Big Game. Qui
318.
by fabulist 12y ago
> If I were to screw you, I can very well do it with an open source product and pre-compiled binaries. This is even easier to do to closed-source products, and if you're worried about security than compiling your own binaries is a p
319.
by fabulist 12y ago
This was my immediate reaction as well. But upon further contemplation, maybe there was more wisdom behind donning the name Dread Pirate Roberts than Ulbricht realized. Power is a corrupting influence, and theres the old saying about what h
320.
by fabulist 12y ago
I believe I originally heard that here: https://we.riseup.net/riseuplabs+paow/openpgp-best-practices
321.
by fabulist 12y ago
CAs are unfortunate, but the reality is that all data is sensitive to some degree. TripIt's data is more sensitive than, say, which Wikipedia article I'm reading, but that still gives away a huge amount of information about what m
322.
by fabulist 12y ago
Its important to note that they're pointing the finger at the MIT PGP keyserver, which has long been notorious for being poor in the security department. This is not even the worst of their crimes; for a long time (perhaps still?) they
323.
by fabulist 12y ago
Would another shape reduce the amount of surface area/external pressure? I've long dreamed of having one of these ships, but it doesn't seem to be in the cards.
324.
by fabulist 12y ago
The idea is hardening; disallow anything extraneous to your purpose which may negatively impact your security. So, get a computer with built-in peripherals (a laptop), or only leave the ports unglued which you intend to use. An old-fashione
325.
by fabulist 12y ago
I think its unwise to underestimate nature; what if a retrovirus went undetected at it moved through a large portion of our population, then suddenly turned lethal? Maybe it would be trivial to treat it, but it could still be devastating.
326.
by fabulist 12y ago
Ouch. I was thinking, "What if you unplugged the monitor cable...?" but thats even worse. Still, when I was going to go on a tour of LANL (I decided it wasn't worth divulging my SSN, in case it was misplaced), they made it ve
327.
by fabulist 12y ago
Maybe so. The only person I know with security clearance says that when they have to renew it, people come and interview them, their neighbors, family members, etc. To go to that trouble without checking their internet history seems foolish
328.
by fabulist 12y ago
Maybe I'm missing something in the article, or disclosed elsewhere, but we don't know who s/he is. If the CIA put Thorium in their sushi, we'd have no way to connect the dots. Edit: I think they'd be far more likely
329.
by fabulist 12y ago
I have no idea about the legality, but it could make your life difficult if you (or someone close to you) want to get a security clearance at some point, or have one and would like to keep it when the time comes to renew it.
330.
by fabulist 12y ago
3 - Don't use Windows. Remember this gem? https://en.wikipedia.org/wiki/NSAKEY Filling ports with glue is a pretty good idea. Clipping the leads might be necessary though; I'm not sure how well the glue will

More ›