netsec_burn

9 ms·

91.
by netsec_burn 5y ago
Wow, it exists. I dreamed about having something like this in the US, with the possibility of changing your private key if you visit the DMV. It would make a significant difference in the fight against identity theft, versus our current sys
92.
by netsec_burn 5y ago
AOSP/FDroid would be a middle ground for your requirements, no?
93.
by netsec_burn 5y ago
When you say most carriers, which ones are you specifically referring to?
94.
by netsec_burn 5y ago
I always find it strange reading (negative) articles about Linux's hardware support. I've used it for almost 15 years now, and in my experience the hardware support is unparalleled. Nearly everything worked out of the box, even wh
95.
by netsec_burn 5y ago
https://web.archive.org/web/20210725100120/https://www.emily...
96.
by netsec_burn 5y ago
Not the parent comment, but I believe they're referring to the cross compilation aspects which wouldn't be resolved by just using the rusqlite crate (I use rusqlite and have this issue).
97.
by netsec_burn 5y ago
First and foremost, the original vendor is always the most ethical place to sell it. That's where you stand the best chance of having it fixed for affected users. Second to the vendor are third parties that report vulnerabilities to th
98.
by netsec_burn 5y ago
I think I answered your question in my comment, no? It'll make cross platform builds easier instead of the current steps needed for FFI libraries. My experience with cross platform FFI builds are slim but last time I tried it, it was p
99.
by netsec_burn 5y ago
As a Rust developer (that's up to their neck in Rust projects) I'm really looking forward to a functioning sqlite clone. To the best of my knowledge, Sqlrite ( https://github.com/joaoh82/rust_sqlite ) was suppo
100.
by netsec_burn 5y ago
It's not that cut and dry, ethics and legality are a concern for a lot of researchers such as myself that sell zerodays. In my experience the actual price difference between unethical and ethical outlets is up to 4x, not two orders of
101.
by netsec_burn 5y ago
I believe the parent comment is referring to user freedom, not really user privacy. Freedom isn't Signal's strong suit (e.g. strict stance on third party clients and incorporating bloat into their application like MobiCoin), somet
102.
by netsec_burn 5y ago
Similarly, it shouldn't take a security breach for companies to care about security. Poor budgets are what is eliminating the safety nets.
103.
by netsec_burn 5y ago
Frankly I don't have the time in my day to entertain every perspective and still enjoy life.
104.
by netsec_burn 6y ago
The latest Chrome exploit released in the past day used it.
105.
by netsec_burn 6y ago
Why do you assume you are being trolled? And the last wormable, zero click RCE in Microsoft teams was only 4 months ago.
106.
by netsec_burn 6y ago
I've always thought reversing the order makes sense.
107.
by netsec_burn 6y ago
Hey there. I did a second 10 minute code review on Portmaster. First I want to say, well done on your modular source tree. It made it very easy for me to go through your open source project. Second, Portmaster is more vulnerable than EBPFSn
108.
by netsec_burn 6y ago
Software that can bypass the firewall for certain, and a possible local privesc (I don't want to promise the LPE yet, I've only looked for 10min). Some skepticism is understandable. I've followed up on a few of the replies he
109.
by netsec_burn 6y ago
Hey, security guy here that has worked on something like this for about 2 years. This is cool but has some vulnerabilities upon a brief 10min code review. I'll see if I can circle back in about 2 weeks and make a list of what vulnerabi
110.
by netsec_burn 6y ago
We'll take important steps to ensure the continuity of our species by making it multi-planetary. The risks are diverse and well known such as climate change, thermonuclear war, geomagnetic reversal, asteroid impacts, etc. Some of these
111.
by netsec_burn 6y ago
Yet? It seems the writer is debating a view that Elon doesn't have. His goal is to begin the process of making Mars habitable, I'm not aware of anyone with the position that Mars is currently as nice as Earth. Terraforming Mars is
112.
by netsec_burn 6y ago
A bit of both. I've read some articles about Apple's bounty program from people who were less than thrilled with it, and Apple went back and revised the bounty payouts when it ended up being bad PR/in the news. In the bug bou
113.
by netsec_burn 6y ago
$5,000 is the minimum for all categories . I have been unsuccessful at confirming with Apple that a local privilege escalation (LPE) to root is in any one of those categories, even though it's a widely understood type of vulnerability
114.
by netsec_burn 6y ago
Can't do it if there is no way to keep my lights on and food on my table.
115.
by netsec_burn 6y ago
In fact, I have given them technical details as to what the capabilities are and the affected macOS versions. I refuse to submit all of my research without them telling me roughly what the bounty ranges are for the vulnerabilities in the sa
116.
by netsec_burn 6y ago
I'm a different security guy from the one above. I have a root exploit in macOS that Apple has refused to discuss with me for half a year. I told them it affected Big Sur (even since the betas) and they were unfazed. I have reached out
117.
by netsec_burn 6y ago
Their press release from Feb 24th indicates that yesterday they were frozen. Perhaps not today, however. http://www.ercot.com/news/releases/show/225151
118.
by netsec_burn 6y ago
It's the last distro on my bucket list. I have vulnerabilities but nothing to drop a root shell.
119.
by netsec_burn 6y ago
Yes, I mentioned in another comment (at the time of your comment) that I planned on doing a more comprehensive writeup at a later date. If what you're saying is my claims are unverifiable, you're correct. I generally don't pu
120.
by netsec_burn 6y ago
I have. Only so far as to test if another zeroday I created worked. It did because it shares a lot of similarities with other Debian-based targets. I haven't tested Tails further, because there are no ethical buyers of Tails vulnerabil

More ›