neilwillgettoit

8 ms·

31.
by neilwillgettoit 12y ago
This is correct. If you ever look into how social media botnets are constructed and run, the good ones already do all the command and control through headless webkit tools. It's one of the primary reasons that it is so difficult to fil
32.
by neilwillgettoit 13y ago
This is how you get sued and/or arrested.
33.
So you want to hack a TV station?(l8security.com)
2 points by neilwillgettoit 14y ago|0 comments
34.
by neilwillgettoit 14y ago
If you want some details about it: http://l8security.com/post/36715280176/uv-281284-samsung-pri...
35.
by neilwillgettoit 14y ago
Customer service 101: don't publicly shame a negative review. It only helps your ego, not your business.
36.
by neilwillgettoit 14y ago
ideally you would think they would pay more than the blackmarket rates for the bugs. it's a capitalist economy in the bug markets.
37.
by neilwillgettoit 14y ago
For the Bug mentioned in this post it was $500.
38.
by neilwillgettoit 14y ago
you're a hero of mine. thank you for this. seriously.
39.
by neilwillgettoit 14y ago
It's actually two different utilities. I use tamper data all the time, but HackBar is great for generating the initial GET/POST.
40.
by neilwillgettoit 14y ago
Correct. It's really nice just because it splits each field into an different \n.
41.
by neilwillgettoit 14y ago
I would if I didn't feel like it would be a waste of my fucking time.
42.
PayPal Bug Bounty - a lesson in not being a fuckup(l8security.com)
168 points by neilwillgettoit 14y ago|25 comments
43.
by neilwillgettoit 14y ago
The best response from Google that could happen here is that they implement a notification feature as to when a OTP is generated.
44.
by neilwillgettoit 14y ago
Yeah, I wasn't trying to focus so much on SSLstrip, but rather that it's possible to get into an account that has Two-Factor enabled, and generate a OTP that will allow for sans Two-Factor logins going down the line.
45.
Beating Google Two-Factor Authentication with App Specific Passwords.(l8security.com)
8 points by neilwillgettoit 14y ago|13 comments
46.
by neilwillgettoit 14y ago
1. third party zone transfers 2. Anycast DNS 3. Use more than one provider. 4. warm spares that are not in delegation until needed.
47.
by neilwillgettoit 14y ago
No. It is not sane. It means that you are afraid that you do not have the tools, team, or talent to execute on it.
48.
Civil GPS spoofing attacks - practical use cases. (zingcheckout.com)
3 points by neilwillgettoit 14y ago|0 comments
49.
Mom Hacks into a school computer 110 times to change her children's grades(mashable.com)
2 points by neilwillgettoit 14y ago|0 comments
50.
by neilwillgettoit 14y ago
I'm shocked no one has mentioned http://www.cedexis.com/ yet.
51.
OpenDNS 2012 Sysadmin Awards Applications open(opendns.com)
1 points by neilwillgettoit 14y ago|0 comments
52.
by neilwillgettoit 14y ago
This site has an ssl_error_bad_cert_domain. irony. https://www.ssllabs.com/ssltest/analyze.html?d=idea.popcount...
53.
by neilwillgettoit 14y ago
Well that's a nice piece of advertising.
54.
by neilwillgettoit 14y ago
I'm still waiting for Dwolla to produce an RFC on this before I even bother looking into it.
55.
by neilwillgettoit 14y ago
There's an EC3?
56.
by neilwillgettoit 14y ago
tmux
57.
Festi BotMaster Igor Artimovich Responds to Kerb's Article about Him.(krebsonsecurity.com)
3 points by neilwillgettoit 14y ago|0 comments
58.
by neilwillgettoit 14y ago
The #1 reason I'm completely okay with the RAM being soldered to the mobo: NO CHANCE FOR A COLD BOOT ATTACK.
59.
by neilwillgettoit 14y ago
Another poster on r/netsec ( https://pay.reddit.com/r/netsec/comments/ui0k4/cloudflare_wa... ) mentioned that it was 4chan.org.
60.
The Critical Security Flaws that Resulted in Last Friday's Hack(blog.cloudflare.com)
189 points by neilwillgettoit 14y ago|48 comments

More ›