patcheudor

12 ms·

61.
by patcheudor 9y ago
Microsoft is still actively patching Skype. Here's an example of them patching what sounds like a similar DLL flaw just last year: https://www.cvedetails.com/cve/CVE-2017-6517/
62.
by patcheudor 9y ago
As a security researcher who tends to focus a bit on user interaction and phishing vectors you are 100% correct, but also representing part of the problem. Too often we discount vulnerabilities which users have to click-through to execute.
63.
by patcheudor 9y ago
Freezing and locking up would be preferable to what their last mobile application did: https://www.fastcompany.com/40468811/heres-why-equifax-yanke...
64.
by patcheudor 9y ago
>If this fails, it is quite possibly the last nail for Kodak.. The equivalent of the founder taking all the remaining company funds to Vegas and betting it all on black.
65.
by patcheudor 9y ago
It's not even about deskilling. I raced road bikes for years and in large part drive like I rode: highly defensive (bordering on aggressive as I've been lectured by LEOs). I commuted for years in my roadster with a manual transm
66.
by patcheudor 9y ago
>you probably need a better WiFi router. That's the right answer. Last time I rebooted a router or AP: never. Unless there's a power failure they run years on end without intervention (DD-WRT on a Buffalo AP, DD-WRT on Netge
67.
by patcheudor 9y ago
My daughter had severe acne. She changed her diet from vegetarian to full vegan and it cleared right up, in fact most of the past scaring is also now gone. She still consumes sugar (vegan sugar - yeah that's a thing: https:/&#x
68.
by patcheudor 9y ago
Because of inventory, ergo a factory ships a mattress, a customer buys a mattress, there's something for investigators to grab onto. This would on the surface make it seem to not be very good for money laundering unless the retailer a
69.
by patcheudor 9y ago
>Are there thousands upon thousands of sessions coming from the same IP address? As someone who routinely works behind proxies, I can sympathize strongly with this statement: "The one thing that I was really trying to get across in
70.
by patcheudor 9y ago
A natural progression of the ten immutable laws of computer security: https://technet.microsoft.com/en-us/library/hh278941.aspx "When you attach your computer / computing device to the Internet it's
71.
by patcheudor 9y ago
My lesson from my personal experiments with Lavarand: you must have more than one lamp, not necessarily for more entropy, but for fail-over and uptime. At approximately ~30 hours, my vintage 70's lamp 'gives up' - the fluid
72.
by patcheudor 9y ago
Please buy my tone rocks. For just $2000 you'll get a set of not one, but four tuned rocks which you place precisely 66.7mm away from your midrange speaker. They enhance the undertones and make midtones shine. You've never expe
73.
by patcheudor 9y ago
That's pretty much where I road most of the time when I was racing but never underestimate how much road rage that causes. It was fine when I was training in Bend, OR. Those drivers were very polite and in fact would always move into
74.
by patcheudor 9y ago
This! I was a semi-professional (CAT 1/2) racer in college and routinely road in the 22 to 30+ MPH range. 30+ MPH is surprisingly easy on busy roads with a good draft coming off traffic. A day wouldn't go by while riding in the
75.
by patcheudor 9y ago
It's not illegal (in the US in most jurisdictions, not a lawyer so check before you buy) to own one. In fact, they are sold to private entities all the time, mostly event venues. You can even buy one right now on eBay: https:/&
76.
by patcheudor 9y ago
It also apparently sucks if one of those private roads you turn down happens to be a private driveway and you are a car thief. https://www.linkedin.com/pulse/google-maps-digital-trespass-...
77.
by patcheudor 9y ago
We've known for quite awhile that WPAD/PAC is a problem and supporting it by default is even worse. Exploiting browsers via JavaScript: https://www.youtube.com/watch?v=3vegxj5a1Rw Rendering JavaScript and other b
78.
by patcheudor 9y ago
John Sotos, Chief Medical Officer of Intel covered the dangers of this technology quite well at DEF CON 25. If you've not seen his talk, watch it now, it's in my top ten of the best talks I've been to in the eleven years I&#
79.
by patcheudor 9y ago
The real key is that automakers have failed to think creatively when it came to answering customer complaints in implementation. Take the one at the end of the article: "'I wish it was smaller and easier to park,' is probabl
80.
by patcheudor 9y ago
>So, when I use your proxy you can see and store my http and https traffic (assuming I install the certificate in my device) Not just see and store, but obviously also tamper with if you want to be thorough in a risk statement. For years
81.
by patcheudor 9y ago
These are very popular laws in the US with every state having some level of certification requirement for certain professions. https://en.wikipedia.org/wiki/Regulation_and_licensure_in_en...
82.
by patcheudor 9y ago
> My only issue is if the drones can be 'heard' flying over a location. Surveillance drones are quiet and fly high enough they can't be heard and are hard to spot. The only reason to fly them low enough to be heard or see
83.
by patcheudor 9y ago
This happens quite often. Report a bug to Apple through CERT as an example and they run with a well known 45 day disclosure timeline. For researchers who don't want to get into vendor conflicts this is a good path because CERT ultima
84.
by patcheudor 9y ago
I'm now seeing cases of non technical people trying this because they heard about it and it's easy. To them, it just unlocks some system preferences thing. Guess what those people are not doing after they try it? 'passwd r
85.
by patcheudor 9y ago
> Apple only responds reliably to PR storms They've been quick (within 45 days) to patch every major bug I've reported to them and where the bugs were cross platform, impacting Windows, Android, etc., they've consistently
86.
by patcheudor 9y ago
I get it, I really do, but it's not like he was complaining about a bad Uber driver. Disclosure in this way has real-world impacts up to and including harming people and we shouldn't ever consider it as something which is remotel
87.
by patcheudor 9y ago
Apple makes it pretty easy to report vulnerabilities to: product-security@apple.com They also respond to security@apple.com but prefer the product-security address. Further, there are any number of legit bug bounty programs out there like Z
88.
by patcheudor 9y ago
>When she changes to another app, our video chats go dark; there's no Termux or GNURoot equivalent (that I'm aware of)... LOL! At the point you expect 99% of phone users to know what Termux or GNURoot are, let alone use them,
89.
by patcheudor 9y ago
A good talk covering the issue: https://www.youtube.com/watch?v=hNDChDM1hEE
90.
by patcheudor 9y ago
VPN can be a problem, especially on these older devices as those services themselves are vulnerable due to underlying OS issues. In terms of WiFi, keep in mind LTE is effectively broken because of the emergency tower redirection implementa

More ›