korzun

28 ms·

211.
by korzun 12y ago
Privilege escalation is not static. I know systems where bash has been patched to allow execution by certain users, etc. With this, you can inject commands before such check takes place. Etc.
212.
by korzun 12y ago
Major impact of this is elevating privileges, both Debian and Ubuntu will be impacted just like any other system. I don't think anybody is worried about software on the system that is using /bin/bash .vs /bin/sh.
213.
by korzun 12y ago
FreeBSD appears to be affected.
214.
by korzun 12y ago
What in the world are you talking about.
215.
by korzun 12y ago
Did you just link to an article about people in South Africa using mobile phones in 2012? You realize that SA has been rolling out good infrastructure for a while now? Right? Do you think people in South Africa need this thing to read about
216.
by korzun 12y ago
I'm talking about the end-user. From server perspective, I would argue that it depends on the impact. With a proper setup you should be able to tell if you are dealing with something on the kernel level .vs typical script kiddie style
217.
by korzun 12y ago
Everybody in Africa has portable devices, they are just missing this useless $10 hotspot gimmick with pre-loaded Wikipedia to get their information on Ebola.
218.
by korzun 12y ago
> We've specifically implemented an Ebola prevention section, as Seed 1.0 will be deployed in Africa. Stop using Africa for your advancement. You obviously live in a bubble.
219.
by korzun 12y ago
> Immediately re-image system Yeah, no thanks. This is a mostly detectable payload and you can figure out if you are infected or not (using their own links). Without any evidence this is a case of fear mongering.
220.
by korzun 12y ago
Did you copy and paste the comment from ValleyWag? He has been there for just a few months. I would bet that he is too busy for selfies.
221.
by korzun 12y ago
What a start-up horror story. > At least Clinkle employs 128-bit AES encryption This is ground breaking.
222.
by korzun 12y ago
That's really easy to say when you're not the one who is paying for it. This is pretty typical. Every single business owner out there knows that the non-paying users generate more noise and complaints than an average paying custom
223.
by korzun 12y ago
A bit of exaggeration on my part. But one of my applications was in a review stage for 20 ish days due to delays within their review process a while back.
224.
by korzun 12y ago
> read up on Operation Mockingbird Did you read anything I posted? In what instance was somebody bribed AND blackmailed at the same time during the Mockingbird? Please go back to Wikipedia and try again.
225.
by korzun 12y ago
> Startup owners in exchange for creditability had to give time - thats one of the main currencies in this scene. In this case I wont trust them from now on expecting them to do the same with any other new startup they will launch in fut
226.
by korzun 12y ago
He could have asked for a second opinion elsewhere. The feedback would have been the same as Apples. Going through 15-60 day review process for that is ridiculous, just like the post in question.
227.
by korzun 12y ago
All of what you mentioned takes time. While it's 'trivial' and 'not hard', the time it self is priceless.
228.
by korzun 12y ago
> Set up a VM with a slightly-broken application in a slightly-broken Apache and Tomcat, and get them to ssh in and document the process of fixing it. That might work on college students. To me that screams that you can't properly i
229.
by korzun 12y ago
Touched a nerve kiddo? Link me to a case where NSA/CIA/FBI blackmailed AND worked with / gave money to an individual at the same time.
230.
by korzun 12y ago
> You don't bribe someone for information unless you have dirt on them That's not a bribe. Learn the difference between strong-arm tactics such as blackmail and bribes. Two completely different approaches.
231.
by korzun 12y ago
That's not how bribery works. > is to find something they are really really embarrassed about I don't think NSA needs to employ high school level tactics. If they want to pin something, they will. True or not.
232.
by korzun 12y ago
I'm pointing out that this tool is essentially useless from security perspective. Most of the payloads will have different hash results due to extensive use of packers. If you are going to get hit with variant #11929 before the online
233.
by korzun 12y ago
> $6m is not a lot of money It's a shit load of money that tons of companies would kill for. You are living in a fantasy land.
234.
by korzun 12y ago
Cool idea. But using raw md5 hashes to verify against a blacklist is kind of useless. Especially now. You should be using smarter file signatures: http://hooked-on-mnemonics.blogspot.com/2011/01/intro-to-cre...
235.
by korzun 12y ago
TLDR: I received a single traffic spike for a game I just released and looking to make a quick buck, take everything and make me an offer before traffic goes away. There are so many things wrong with that blog post.
236.
by korzun 12y ago
> BS in psychology Ah yes. Do you also give philosophical advice by any chance? Displays like this are standard on a lot of high end performance vehicles. The teams who worked on stuff like this can run circles around your BS in psycholo
237.
by korzun 12y ago
Ironically, half of HN is circle jerking DuckDuckGo as some sort of privacy king pin every other week. They are either in bed with NSA or will be very soon. I laugh how gullible some people are. "But they owner told me that they will s
238.
by korzun 12y ago
Is that the only thing you are getting out of the discussion?
239.
by korzun 12y ago
> Some people have $0 and literally can't afford anything Did you just find that out? Congratulations. Most of cyclists in NYC are probably making more than you. Save your tears. If you really cared and understood the dynamics of th
240.
by korzun 12y ago
> economically discouraging cycling If $10/month puts you off biking then you should not bike in highly populated areas. Period. This is classic case of poor financial planning. You don't need $10/month insurance? Too expe

More ›