richardowright

6 ms·

1.
Breaking down NOBELIUM’s latest early-stage toolset(microsoft.com)
3 points by richardowright 5y ago|0 comments
2.
by richardowright 5y ago
When the ID changes on the tag, a nearby device can link the two id's together since they're in the same 'position' (i.e. id x was at y position and now id z is there, so id x = id y). However, someone who is not there w
3.
by richardowright 6y ago
Does this include access to thinks like the Azure Control Plane components? In my mind, that code has a different exposure.
4.
Sunburst Additional Technical Details(fireeye.com)
1 points by richardowright 6y ago|0 comments
5.
Microsoft: Guidance on SolarWinds Attacks with Details on Persistence(msrc-blog.microsoft.com)
2 points by richardowright 6y ago|0 comments
6.
FireEye report on SolarWinds Backdoor(fireeye.com)
3 points by richardowright 6y ago|0 comments
7.
Solar Winds Used in hack of U.S. agencies and FireEye(washingtonpost.com)
3 points by richardowright 6y ago|0 comments
8.
by richardowright 6y ago
I've also been having this issue with ATT Fiber, but I'm out of Atlanta.
9.
by richardowright 6y ago
Try CDAP - https://cdap.io/ . Open source with Google backing it.
10.
by richardowright 6y ago
Or use the opensource take of it - https://cdap.io/
11.
by richardowright 6y ago
Seeing a translation of "(security) driver slayer". https://twitter.com/DAlperovitch/status/1293948157618003969
12.
Linux Malware “Drovorub” developed by Russian exposed by NSA and FBI(nsa.gov)
34 points by richardowright 6y ago|14 comments
13.
by richardowright 6y ago
They do have a very comprehensive simulation system with a large part of the work being done at Dobbins Air Force Base just outside of Atlanta. From what I understand, the team is quite small (<10).
14.
by richardowright 6y ago
Why not use reverse verbal passwords (i.e. have the bank give you a secret phrase)? That should eliminate a large amount of issues without the need for a call back.
15.
Google's Down – April 15, 2020(downdetector.com)
3 points by richardowright 6y ago|0 comments
16.
by richardowright 7y ago
Sprint's towers were built for it's CDMA network running in the 1900 MHz spectrum. However, their LTE network primarily run at the 2.5GHz spectrum which has far less range/requires a different cell tower spacing. As a result,
17.
Google's Down
99 points by richardowright 7y ago|65 comments
18.
by richardowright 8y ago
Full post from eclypsium https://eclypsium.com/2019/01/26/the-missing-security-primer... . Also I assume aws baremetal servers are not vulnerable due to the nitro security card ( https://m.youtube.co
19.
Hackers Can Slip Invisible Malware into 'Bare Metal' Cloud Computers(wired.com)
2 points by richardowright 8y ago|1 comments
20.
by richardowright 8y ago
I imagine you just "replay" the issued/signed JWT to Facebook, so you can act like that user.
21.
AT&T Dynamic Traffic Management(developer.att.com)
2 points by richardowright 8y ago|0 comments
22.
by richardowright 8y ago
Any plans to publish the results from the pbkdf2 version?
23.
by richardowright 12y ago
It seems to me like the breach may still be ongoing/the vulnerability may still exist. In the announcement, they use "have been" as in its actively occurring. Additionally, in the press release ( http://ir.homedepot
24.
Latest Data-Processing Benchmark: Redshift, Hive, Shark, Impala, Stinger(amplab.cs.berkeley.edu)
1 points by richardowright 13y ago|0 comments
25.
by richardowright 13y ago
I also think that since this would be exploited against non-state actors as well as states changes the payouts calculations significantly. Much, if not most, of the value is derived from exploiting non-state actors (i.e. Al Qaeda) who almos
26.
by richardowright 13y ago
Something still doesn't add up for me on this. 1. How does this explanation relate to the slide that the US is the World's Telecommunication Backbone? The only explanation I can think of is that Google, etc... were only providing