jeffmcjunkin

10 ms·

61.
by jeffmcjunkin 11y ago
Agreed! Burp Suite also has the ability to copy a request as a cURL command, which can definitely help with reversing mobile device API's as well.
62.
Injecting code into running process with linux-inject(lkubuntu.wordpress.com)
5 points by jeffmcjunkin 11y ago|0 comments
63.
by jeffmcjunkin 11y ago
Great info, thanks! (Very minor, but "ping" usually implies ICMP Echo Requests, and ICMP doesn't have ports)
64.
by jeffmcjunkin 11y ago
Agreed, that was bothersome. Here's the font: https://www.google.com/fonts/specimen/Roboto
65.
by jeffmcjunkin 11y ago
Phrased more broadly - everyone has biases in their opinions. Make sure you know what their bias is and take it into account when listening to them. Widgets-R-Us has a strong financial incentive to make their Widgets study as advantageous t
66.
by jeffmcjunkin 11y ago
Just an update - that URL is live now. I just downloaded Code for Linux.
67.
by jeffmcjunkin 12y ago
I'm not tptacek, but right now I think the answer is: "We don't know." There isn't an acknowledged proof-of-concept, so we're not sure that it's exploitable. It hasn't been made clear whether it'
68.
by jeffmcjunkin 12y ago
No. afl requires an instrumented (compiled with extra information) executable, and watches the code paths. When fuzzing a seed finds a new code path, it will recycle that fuzzed version as a new seed. ASLR can help prevent successful exploi
69.
by jeffmcjunkin 12y ago
The hackaday article [1] has an image of a printed piece, which helps give an idea of the resolution [1] http://hackaday.com/2013/12/07/a-rostock-welding-3d-printer/
70.
by jeffmcjunkin 12y ago
My interpretation: "You can manage your network hardware in Ansible and Git. We'll assume that everything else is using it, too." Still pretty attractive, and a lot less Buzzword Bingo.
71.
by jeffmcjunkin 12y ago
RAID 1 mostly gives more random read IOPS, not faster. You have two drives from which to read data, since they're mirrored. You do have more chances for the spindles to be near your data (especially with >2 drives in the array), w
72.
by jeffmcjunkin 12y ago
This means that DHCP clients that use bash and have DHCP server-controlled environment variables can have commands injected (as root) by a malicious DHCP server. Notably, attackers in an unhardened network can reply to DHCP clients themselv
73.
by jeffmcjunkin 12y ago
No, busybox is not affected.
74.
by jeffmcjunkin 12y ago
Very true. To be clear to other readers, busybox is more common in smaller embedded devices, though today's AlienVault blog post [1] showed that Mitel VoIP systems (which use Debian/ARM, if I recall) use bash and are vulnerable. [
75.
by jeffmcjunkin 12y ago
Note that this will affect devices without listening services. Embedded devices are very likely to be affected for a long time. A note for those trying to reproduce the PoC (as I was yesterday) - ISC's DHCP server only sends client-req
76.
Shellshock DHCP Remote Code Execution – Proof of Concept(trustedsec.com)
355 points by jeffmcjunkin 12y ago|155 comments
77.
Hacking the Seiki SE39UY04 (39“ 4K display)(zeroepoch.com)
12 points by jeffmcjunkin 12y ago|4 comments
78.
by jeffmcjunkin 12y ago
Though I respect both your opinion and Fyodor greatly, I have to disagree here. Mass-scale isn't really the issue. They have plenty of hosts to work with, so masscan wouldn't help. They're doing more than just open port detec
79.
by jeffmcjunkin 12y ago
Further on in that same thread, Bob Beck just asked about adding minherit() functionality[1] to Linux as well. LibreSSL might end up adding some very useful syscalls to Linux, which helps with their portability and helps future Linux userla
80.
Cheap Temperature Monitoring Using A Raspberry Pi(brandonkester.com)
3 points by jeffmcjunkin 13y ago|0 comments
81.
by jeffmcjunkin 13y ago
It looks like Newegg has a great deal on an 802.11ac wireless router (which DD-WRT seems to support, and likely other firmwares) and a free DOCSIS 3.0 modem (Motorola SURFboard SB6121): http://www.newegg.com/Product/Pro
82.
Real disaster recovery plans require preallocated resources(utcc.utoronto.ca)
1 points by jeffmcjunkin 14y ago|0 comments
83.
SSH keys shared with FUSE(sysadvent.blogspot.com)
2 points by jeffmcjunkin 14y ago|0 comments