mmsc

16 ms·

271.
by mmsc 2y ago
>pretend it never happened I'm not suggesting this is what they have done here, but this is exactly what authoritarian governments do. Straight from the pneumatic into the furnace.
272.
by mmsc 2y ago
In many ways, anybody that leaves an management port open to the internet is to blame. It's not even security 101, it's sysadmin 101. It's like leaving a BMC open to the internet: these things are built with no security in mi
273.
by mmsc 2y ago
One of these for awk scripts would be amazing.
274.
by mmsc 2y ago
I'm sure if those workers picked up a dictionary and looked up the word dictatorship, they would agree. They have a vote. One person does not rule the country.
275.
by mmsc 2y ago
Canada is not "a semi-autocratic country on the verge of becoming a dictatorship."
276.
by mmsc 2y ago
In case anybody was wondering, OP is talking about Georgia the country.
277.
by mmsc 2y ago
Airlines do not search people's baggage for drugs. Postage services do not search people's packages for drugs.
278.
by mmsc 2y ago
Just think: all the companies that do illegal shit and get slaps on the wrist with a few thousand/million dollar fines. That's the only "consequence" for the executives that blew up the economy in 2008, the politicians t
279.
by mmsc 2y ago
Juniper had a backdoor in their firmware in 2015 which gave ssh access, inserted by hackers: https://blog.cryptographyengineering.com/2015/12/22/on-junip... There were some updates: https://www.zdn
280.
by mmsc 2y ago
And in 2010, a similar backdoor appeared in UnrealICRD: https://lwn.net/Articles/392201/ . Also in proftpd: https://www.aldeid.com/wiki/Exploits/proftpd-1.3.3c-backdoor . Both were done by
281.
by mmsc 2y ago
Good to know my single ipv6 address that my ISP gives my home router can be used to get the whole /48 ratelimited by ~everyone
282.
by mmsc 2y ago
the future is bleak: Attackers can just rent a /48 ipv6 block for a few dollars and have a billion IPs at their disposal.
283.
by mmsc 2y ago
What's it like to actually use this for any meaningful throughput? Can this be used for hash cracking? Every time I think about virtual GPUs over a network, I think about botnets. Specifically from https://www.hpcwire.com&#x
284.
Watch How a Hacker's Infrared Laser Can Spy on Your Laptop's Keystrokes(wired.com)
1 points by mmsc 2y ago|0 comments
285.
by mmsc 2y ago
There's some level of irony related to the first paragraph talking about annoying cookie banners, when theverge displays a full-screen cookie banner "We and our 848 partners store and access personal data".
286.
by mmsc 2y ago
>This is such an enormous attack vector for all organizations that use GitHub that we’re introducing a new term: Cross Fork Object Reference (CFOR) Have we stopped naming vulnerabilities cute and fuzzy names and started inventing class n
287.
by mmsc 2y ago
I think a better analogy is wandering around noting what locks random peoples' houses use, buying your own, breaking your own, informing the manufacturer of the flaw, and then informing the owners of the random peoples' houses. AK
288.
by mmsc 2y ago
And? Google uses Chrome to retrieve data about the user. Every Chromium-based browser has 'hidden' APIs only accessible on certain domains. That's how the custom (read: closed source) extensions work. "Component extensio
289.
by mmsc 2y ago
>I test the linux machines are dev machines just used for compiling/testing and basically have shared passwords, or they're servers for webapps or something else where normal users most who have a windows machine won't hav
290.
by mmsc 2y ago
>www-data should be set to noshell 99% of the time. Huh? execve(2), of course, lets to execute arbitrary files. No need to spawn a tty at all. https://swisskyrepo.github.io/InternalAllTheThings/cheatshee... >This
291.
by mmsc 2y ago
>People are generally not trying to get root via an SSH RCE over localhost. That's going to be a pretty small sample of people that applies to It's going to apply to the amount of servers that an attacker has low-privileged acc
292.
by mmsc 2y ago
How is it not? If fail2ban isn't going to blocklist localhost, then it isn't a mitigation for this vulnerability because RCE implies LPE.
293.
by mmsc 2y ago
>Mitigate by using fail2ban? In theory, this could be used (much quicker than the mentioned days/weeks) to get local privilege escalation to root, if you already have some type of shell on the system already. I would assume that fai
294.
"One of the most original expositions": The Vienna Poster Exhibition in 1888(austrianposters.at)
9 points by mmsc 2y ago|0 comments
295.
by mmsc 2y ago
It was a workplace, not school. My manager, not professor. The even paid me to be there:)
296.
by mmsc 2y ago
"People from country X do not generally have knowledge of continent Y because nationally they take an insular approach" is not racism, it's an identification of a root-cause which for anybody that lives in Poland, is quite we
297.
by mmsc 2y ago
>self-host your dependencies behind a CDN service you control (just bunny/cloudflare/akamai/whatever is fine and cheap). This is not always possible, and some dependencies will even disallow it (think: third-party supplier
298.
by mmsc 2y ago
So what? The vulnerability was patched. I assume hiding the details only helps the company save-face. In my last job we literally had "classes" teaching us how to deal with Asian colleagues (specifically in China, but SK has the s
299.
Shadow of the Sun (2021)(mattlakeman.org)
2 points by mmsc 2y ago|0 comments
300.
by mmsc 2y ago
It goes something like "not my fault, let's focus on others' problems not mine." You don't throw trash into the ocean so you feel like the real issue comes from something you are not knowingly contributing to with y

More ›