lazy_gator

4 ms·

1.
by lazy_gator 9y ago
I agree that it is not a true backdoor, but I am simply pointing out that the goal is accomplished by hoarding 0-days or creating an actual backdoor. The 0-day you were not reporting gave you escalated access to iOS devices. If Apple had gi
2.
by lazy_gator 9y ago
We can debate the meaning of words, but the goal of a backdoor from the perspective of the government is to gain access to a system. The effect of a backdoor is accomplished through a literal backdoor or a figurative backdoor by hoarding ex
3.
by lazy_gator 9y ago
A unreported zero day is a de facto backdoor. The chain you mentioned has similar flaws as the current strategy. Step 3 would be incredibly difficult. It would be similar to detecting a virus signature, which are easily circumvented. The se
4.
by lazy_gator 9y ago
I am actually in a similar boat. I have done a lot of java work, and was active on the security side of things in my previous role. I mostly worked on compliance, but I did some pen testing. I can see compliance not being friendly to remote
5.
by lazy_gator 10y ago
Yes, that book completely changed my world view. I still think about it consistently almost 6 years later. He took a very empirical approach to a problem that is often discussed using less than thorough methods.
6.
by lazy_gator 10y ago
This is really cool. I saw that jjs was bundled with java 8, and saw this possibility. I wonder if it is compatible with node js frameworks like express. I think that node has a lot of native code to implement various functions, so it would