nostoc

8 ms·

31.
by nostoc 5y ago
How about selling legally to a state actor for 100k ? Bug bounties need to be higher, because the black market is not the only alternative.
32.
by nostoc 5y ago
Have you ever used a for loop? You don't know how long it'll take, but you know how many iterations, and at any given point you can know how long past iterations have taken. Extrapolation is not hard, even if not always accurate.
33.
by nostoc 5y ago
Except "Everybody goes inside and stops spreading" is not something that is unique to a variant of concern. When everybody goes inside, all the variants stop spreading. The pressure is the same on every variants, so there's n
34.
by nostoc 5y ago
The IQ tests are not designed by gods, and while this is not the intention, education could very well have an effect on IQ. In fact that's the conclusion of the study here.
35.
by nostoc 5y ago
I'll agree to this, but it's still a lot better than trying to implement it yourself.
36.
by nostoc 5y ago
Java and deserialization vulnerabilities are one of the most iconic duos of infosec.
37.
by nostoc 5y ago
> just a wrapper around printf which adds a timestamp and a log-level That's a pretty naive view of what's needed in an enterprise logging solution. logging to files, separate logging, remote logging, log rotation, logging 3rd
38.
by nostoc 5y ago
Don't do that, it's obviously a phishing site
39.
by nostoc 5y ago
JS-fuck is trivial to unpack if you have access to a javascript repl. Your code does a simple : alert(1); here's how you do it : https://i.imgur.com/fBDLD8z.png
40.
by nostoc 5y ago
Is meta analysis of unpublished result really such an established scientific practice?
41.
by nostoc 5y ago
Those were all Peer2peer services, but none of them were torrenting.
42.
by nostoc 5y ago
What does this even mean? Of course a month is an arbitrary amount of time, but so is a day, a year, a minute. This is still an interesting data point.
43.
by nostoc 5y ago
It's also quite easy to do intuitively. Since Misha is missing only one kopeck, had Masha owned any amount, the sum would have been enough to buy the book. Therefore, Misha doesn't have any money, and the price book is what Misha
44.
by nostoc 5y ago
That analogy wobbly at best, if not downright dishonest. Google is not hosting your public content on behalf of any government.
45.
by nostoc 5y ago
Looks like this data has been collected through the official API, so you could just query yourself in there.
46.
by nostoc 5y ago
Could be, but ransomware gangs are a dime a dozen, and many are simply financialy motivated. It's just a very profitable business model.
47.
by nostoc 5y ago
Learning a piano piece is simply building up muscle memory, through repetitions. If you practice and make mistakes, you are building up muscle memories for the wrong notes. As a piano player, what OP says wrings very true. It's temptin
48.
by nostoc 5y ago
That's not a failure of OOP, but a failure of design. This could have easily been avoided if `join` would have been a method of the list object, not the string object. But we're stuck with this now.
49.
by nostoc 6y ago
As a bonus, you'll also see ransomwares, disk encryption software, http servers, browsers... And what if the miner uses it's own crypto lib, and doesn't rely on the OS crypto API?
50.
by nostoc 6y ago
Grit and salt are two tools used for different temperature. Salt is better when the weather is close to 0 celcius. Grit is better when it's colder.
51.
by nostoc 6y ago
Anticompetitive? Is parler competing with amazon in any ways, shape or form?
52.
by nostoc 6y ago
A scripting language is generally thought as a language suitable for quick easy project, less so for large scale software engineering. Verbosity of syntax, compilation, presence of boilerplate code, static typing are all things that make ja
53.
by nostoc 6y ago
That's not the point. encoding 9 bytes doesn't give any '=', because 3 bytes encode to 4 b64 characters.
54.
by nostoc 6y ago
You're welcome to choose as you will, but RE is your job, know that you're shooting yourself in the foot.
55.
by nostoc 6y ago
Unless it changed since it incorporated Ghidra, SANS FOR610 has a very shallow look into actual static reversing of native code. It's a good introduction but does not venture far.
56.
by nostoc 6y ago
It is closed source, but the templating language is amazingly useful, and nothing in the open source comes close to what it offers. If you need a hex editor for RE purposes, I'd highly recommend at least trying it out.
57.
by nostoc 6y ago
Most ransomwares don't do C&C. They don't need to, and it's stealthier that way. Actors that do exfil typically have other malware in their toolkit to do just that.
58.
by nostoc 6y ago
And it's 10 year old now...
59.
by nostoc 6y ago
If you don't learn proper technique but type often, you will organically develop some method of typing that may work for you. But it's easy when learning a skill without guidance to end up into a local maximum. It's easy to e
60.
by nostoc 6y ago
I'm talking about Canada, where the first wave has been quenched. The U.S. is a very different picture, in many states the first wave never really went away.

More ›