munin

94 ms·

811.
by munin 15y ago
the easier question to ask is what HASN'T Microsoft done? quick example: they paid millions possibly tens of millions for the best people from industry and academia to build automatic bug searching tools. these tools currently define state
812.
by munin 15y ago
okay, when would you need to purchase a 0day vulnerability from someone else to exploit thousands of other systems as part of legitimate system engineering?
813.
by munin 15y ago
port scanners, password crackers, vulnerability identification tools, all have legitimate system engineering uses. consider the black hole exploit kit, or the poison ivy RAT, or zeus. these are tools that have one purpose: exploit specific
814.
National Month of Pushing Spacebar(national.month.of.pushing.spacebar.org)
2 points by munin 15y ago|0 comments
815.
by munin 15y ago
bugs DO happen. the root cause is in the kernel component that deals with memory inappropriately though. user space should be free to blast whatever into kernel space via system calls and ioctl and rely on the operating system to not crash,
816.
by munin 15y ago
> MegaCli is still the ultimate cause strongly disagree! no kernel component should introduce memory corruption, and especially not in response to an ioctl from any user mode code. they say: > Specifically, various offsets provided
817.
by munin 15y ago
I love how we have surrendered the "gains" from the "unix security model". "yeah, there's a separation between root and user, but... there's only one user account ... and its password is the same as the root accounts password thanks to sudo
818.
Mike Daisey - "Work of Non Fiction"(artsjournal.com)
1 points by munin 15y ago|0 comments
819.
by munin 15y ago
I didn't see the discussion on HN :) it was posted to some (private) mailing lists I'm on, and I posted exactly the same thing there.
820.
by munin 15y ago
this was blindingly obvious to anyone that does anything with compilers and reverse engineering. there are some really big clues: the access to C functions from win32 is direct, with no visible FFI. the generated code has a lot of qualities
821.
by munin 15y ago
FYI: http://www.nsa.gov/about/faqs/oversight.shtml#oversight5
822.
Someone leaked Microsofts proof-of-concept exploit for RDP vulnerability(aluigi.org)
4 points by munin 15y ago|0 comments
823.
by munin 15y ago
FYI, code is not shared freely in biology and physics, it's a big problem. academia is not a hegemony. there are a few people in academia that share beliefs with stallman, there are many others that have no problem with making money off of
824.
by munin 15y ago
a lot of people view the project work that they do in college as "sacrifice". but really? if you have a challenging curriculum, those projects become successes (perhaps your first successes) that you build on professionally. your friends ne
825.
by munin 15y ago
I think fewer people would have a problem with this if the outlet for sociopathic aggression didn't involve detonating women and children
826.
by munin 15y ago
the code still has to run. stuff like this is trivial to invert using a virtual machine that records what executed and also records modifications to code. you also suffer from the problem / weakness of having the decryptor for your code, in
827.
by munin 15y ago
> the area is described as home to “thieves, ravers and squatters,” one local told the Le Figaro newspaper. somehow I think making it a hacker haven won't do anything to endear you with the locals ...
828.
HBGary bought by big defense contractor(marketwatch.com)
2 points by munin 15y ago|0 comments
829.
by munin 15y ago
appreciated, however I don't think that people mean "design" as in aesthetic design when they say "invented" for example, the spinning beach ball is patented... I think we have passed the point where "patented" has anything to do with what
830.
by munin 15y ago
"CLAIM The ornamental design for packaging, as shown and described." really?
831.
by munin 15y ago
in the presence of compromised hosts using ForwardAgent is basically analogous to copying your private key around! (somewhat)
832.
by munin 15y ago
I want to believe things like this could be useful, since I spend most of my professional time researching and developing systems to mechanize the process of testing and flaw discovery, however reading this was sobering and depressing. symb
833.
by munin 15y ago
>When I turn my computer on, it should just be on. Ready to go. Kind of like—well, like my phone, for example. Which is, after all, my real computer. what phone does he use? every phone that I know of takes at least two minutes to come
834.
by munin 15y ago
"On February 25, 1991, <redacted> Security Clerk, Status and Inquiry Branch, DISCO, Columbus, Ohio, was personally contacted and she advised she located the following security clearance in their files identifiable with the appointee
835.
by munin 15y ago
the furor (at least, that I saw) was that the devices stored this information and would potentially let others look at it later. it shouldn't be upsetting that your computer knows what keys you're pressing or what network you are affiliat
836.
by munin 15y ago
open source software can collect exactly the same information on you. there was a furor recently where it was revealed that OS X and Windows collect data on what access points you have associated with. what was omitted was that linux does e
837.
by munin 15y ago
a lot of people think that "locking" someones account is setting their shell to /bin/false or something.
838.
by munin 15y ago
this has been a problem with AWS/EC2 for the last four/five years (since its creation): http://www.gossamer-threads.com/lists/nanog/users/105399
839.
by munin 15y ago
probably, no one would use it
840.
by munin 15y ago
there is a dangerous tendency to say "someone told me my idea is dumb, but lots of smart people have had their ideas ridiculed and later gone on to success". it's true, many good ideas have been ridiculed by simple minds. however, you never

More ›