notepad0x90

89 ms·

1411.
by notepad0x90 2y ago
In a twisted way, Crowdstrike just gave western civilization a disaster recovery and resilience forced test. an actual attack won't be rolled back within an hour. In case you don't know, Crowdstrike is hardly the only company with
1412.
by notepad0x90 2y ago
Yes, we do have a counter factual, they catch actual APT's they investigated the DNC hack in the 2016 elections and stopped many more attacks. You are utterly clueless in this area to make a comment like that honestly, I don't mea
1413.
by notepad0x90 2y ago
In the 3-4 decades of the security industry, testing signature files to see if they trigger a corner case system crash has never been practiced. You and others are proclaiming yourselves to be experts in an area of technology you have no ex
1414.
by notepad0x90 2y ago
well, this is windows not macos. I don't know what you can do with driverkit for example. maybe microsoft should learn from apple?
1415.
by notepad0x90 2y ago
because the thing that uses them is in kernel mode, and the sensor needs to be performant. at some point, the content must be consumed by the kernel mode sensor. user mode edr's exist but bypassing them is trivial, intercepting syscall
1416.
by notepad0x90 2y ago
they need to be processed in kernel mode where the monitoring happens, user mode EDRs are trivial to bypass. they have to be processed by whatever is going to use them, and in this case it is the "lightweight" sensor code in kerne
1417.
by notepad0x90 2y ago
working in software, you should know how insanely complex software is, even google, amazon, microsoft, cloudflare and such have outages. mistakes happen because humans are involved. it is the nature and risk of depending complex systems. br
1418.
by notepad0x90 2y ago
they reverted it after about one hour. but sure, they didn't need to target all customers all at once, that's a good point.
1419.
by notepad0x90 2y ago
This "channel file" is equivalent to an AV signature file. Crowdstrike is the company, the product here is "Falcon" which does behavioral monitoring of processes both on the device and using logs collected from the devic
1420.
by notepad0x90 2y ago
You know, I wanted to troll a bit by critiquing a 7 year old but I'm genuinely impressed. I love sites like this, her age aside that is. it is simple html and I can discover the desired information without any hassle. 10/10 from m
1421.
by notepad0x90 2y ago
my theory is, they may have passed away before seeing bitcoin's glory days. the anonymity is purely coincidental.
1422.
by notepad0x90 2y ago
maybe i was conflating the two, but my point was cost of implementation. niche or not,minimizing hardware cost is important to consumers and vendors alike. On the other hand, for general purpose computing, complex instructions can provide a
1423.
by notepad0x90 2y ago
sorry, yeah I meant the other way around.
1424.
by notepad0x90 2y ago
it sounds to me like complex instructions are unavoidable unless the use case is restricted to microcontrollers. A modern ISA should CPU feature flags that allow implementers to disable complex and expensive instruction sets. Would it be fa
1425.
by notepad0x90 2y ago
because the speed of light is really the speed of information, much like the clock-speed of the processor if the universe was a simulation.
1426.
by notepad0x90 2y ago
to say useful is an understatement, there are forensic collection tasks that can only be done, at least to my knowledge, only using a nirsoft tool.
1427.
by notepad0x90 2y ago
like a sibling comment mentioned, process injections can also happen. but besides that, if your busybox wasn't already on the system then what's the value of bringing it when you suspect a rootkit? userland or not, a memory acquis
1428.
by notepad0x90 2y ago
ld_preload is the lazy way of doing userland rootkits. there are other ways. For example, you can patch libc, and by patch I mean there are different ways of patching. a simply binary patch is unreliable because it'd be pinned to a spe
1429.
Dice Keys(dicekeys.com)
3 points by notepad0x90 2y ago|1 comments
1430.
by notepad0x90 2y ago
Rights are one thing, their protection is another. Most rights are granted by the state, some rights though are beyond the state's authority to grant. This belief and concept is the literal founding cornerstone of america as a nation.
1431.
by notepad0x90 2y ago
you're right about force being the ultimate authority, if a government derives it's powers from it's force alone you would be right. but even in dictatorial regimes, the dictator needs support from various underlings and fact
1432.
by notepad0x90 2y ago
Think of the basic needs of a human being. Buying food and water, paying for shelter and living in a safe environment. For these things, proving one's identity should not be required, nor should a person be required to do business with
1433.
by notepad0x90 2y ago
I thought I could pass the OSCP with only two weeks of study. I could not. I abandoned it for over a year, and took my time (almost 90 days) practicing and doing every lab/challenge, then I passed it and did quite good on it. But that&