mercora

37 ms·

331.
by mercora 11y ago
It seems like most people do not know that grub can actually boot kernels from an encrypted boot partition. It does not protect the MBR or EFI partition, so a manipulated stage1 loader might be able to pull off some attack but i am always s
332.
by mercora 11y ago
I guess the most obvious thing is what it not has, which is a massive GUI. It is much faster to work with when you know what you are looking for in my opinion. In most cases running wireshark without tcpdump first is really inadequate.
333.
by mercora 11y ago
I think it did some harm to have "i3way" announcing a port to wayland and even phrasing it like it already is a thing, when it seems like there has nothing been done yet for years. My bet is if this would not have been the case th
334.
by mercora 11y ago
I previously worked for a large Bank and they had authenticated email using Lotus Notes. While i would not recommend using that, it was nice to see them taking this serious. It was required to use it for every internal communication and act
335.
by mercora 11y ago
They could at least try harder to cover the new access method. I really wonder why they did not. They should have assumed that this particular backdoor will be disclosed. So even in the event of having legitmate use cases for access like th
336.
by mercora 11y ago
After boot.kernel.org and netboot.me seem dead now i like to see this kind of thing available again. I acknowledge the threat of downloading these boot images over the internet but think it is actually not that much different from downloadi
337.
by mercora 11y ago
I would agree but the running costs[0] did not change much since that switch for reasons not clear to me. [0] https://de.wikipedia.org/wiki/ARD_ZDF_Deutschlandradio_Beitr... (German content)
338.
by mercora 11y ago
Sorry but i can not recommend any device in particular. I noticed that most of the cheap devices ship with a Z3735F/G CPU. I bought this[0] one but the main reasoning was getting it cheap. I think most of the Baytrail SoC based devices
339.
by mercora 11y ago
I recently bought a windows tablet to toy around with it. It has an Intel CPU (Baytrail SoC) and was very cheap. It comes with an integrated Intel graphics one is used to see in Desktop CPUs and for which free drivers do actually exist. It
340.
by mercora 11y ago
In Germany it is even worse. You have to pay the fee regardless of you having any devices capable of receiving. It is a flat per household fee. It used to be like you said it is in Sweden now but they changed 3 year ago to a pseudo tax.
341.
by mercora 11y ago
I don't know. I have not thought about this being malicious, so i did not note which spots caused this. But its clearly starting with a spot and end with it. Could also be some kind of issue in the TV with some color combination or stu
342.
by mercora 11y ago
I noticed hearing strange high pitched background noise i normally tend to hear from power supplies but only at certain advertising spots. I thought the TV might be about to fail, it may is, but this sounds plausible too.
343.
by mercora 11y ago
I do not think that it is that useful. While i have seen people greatly overestimate computing complexity of simple tasks like comparing numbers, i do not believe knowing how long such instructions take gives you much more. Especially inter
344.
by mercora 11y ago
I guess they would be used in a service that sells voice recordings, are developed for internal use or are born in research.
345.
by mercora 11y ago
A year ago i canceled cable TV subscription in Germany because i had most important channels anyhow via DVB-T. I had internet subscription for years with them and was satisfied so this had to be kept working. Knowing a bit about how these c
346.
by mercora 11y ago
One feature i really like about cyanogenmod is the ability to revoke most privacy related permissions or deploy a dialog when accessed, asking for permission on a case by case basis. I think it should have been that way from the beginning f
347.
by mercora 11y ago
In my opinion just knowing that your activities are monitored alters your behavior. Which for me is enough to be seriously concerned...
348.
by mercora 11y ago
if you increase the ttl it goes on much further (27 hops in 162.252.204.0/22)
349.
by mercora 11y ago
if someone ever wondered why ipv4 address space is exhausting so fast: this is part of the reasons ;D
350.
by mercora 11y ago
I thought about using pwgen locally with a combination of domain, username and password as a hashed seed. But like you mentioned, trying to remember how often i had to change the password (or had restrictions applied only at a particular si
351.
by mercora 11y ago
I don't think it is possible to use recursion for this. At least not reliably, as its quite likely you will hit a cached record. Which means the file would not have been transferred completely to your authoritative server... (using som
352.
by mercora 11y ago
Thanks for clarifying. Exploiting vulnerabilities in the service itself, mishandling opsec and fingerprinting traffic seem obvious.
353.
by mercora 11y ago
Is the illustration really accurate for hidden services? If so, for what reason isn't the last hop encrypted too?
354.
by mercora 11y ago
A former colleague has written something quite similar[0] few years ago, which we used to backup encrypted disks (actually snapshots of encrypted disks to be precise). [0] http://chunksync.florz.de/
355.
Google Refugee and Migrant Response(onetoday.google.com)
4 points by mercora 11y ago|0 comments
356.
by mercora 11y ago
Ok the linked[0] blog post from Check Point has more details into whats actually happening. [0] http://blog.checkpoint.com/2015/09/08/whatsapp-maliciouscard...
357.
by mercora 11y ago
I wonder why this should only be exploitable on the WhatsApp web application. If it is possible to trick browsers into launching arbitrary applications by using vcards, this should affect many web application using vcards and the the securi
358.
Refugees on Rails – Refugee Code School in Berlin(refugeesonrails.org)
1 points by mercora 11y ago|0 comments
359.
by mercora 11y ago
On first use, i guess i have checked these parts one way or another. To assume things work the way you expect them might be the reason the bug was present in VS (if it ever actually was).
360.
by mercora 11y ago
No.

More ›