rilita

17 ms·

91.
by rilita 12y ago
The discussion was whether students could force the machine ( a laptop they could take home with them ) into a state where they could use it to cheat during tests. TPM chips generally provide the following: 1. An encrypted store that can on
92.
by rilita 12y ago
"many Americans... don't know... Few Americans know this" "wondering what hollowed out the middle class" Perhaps the clueless people who don't know anything about what things mean ( the people this article is t
93.
by rilita 12y ago
It's not very hard to build a keylogger using basic pic chips and install them into a keyboard. The same could be done against a dumb terminal. For bonus points, put a bluetooth module / picoduino inside so that you can read out p
94.
by rilita 12y ago
If you have physical access, just reset the bios and reinstall windows on the box from scratch. If the bios cannot be reset ( is such a thing possible ) then remove, clip, or melt the tpm chip in order to force the system to forget it'
95.
by rilita 12y ago
This code displays forward slash and backslash randomly over the entire screen. This may look a bit like a maze, but it is not. Title should read "How to display random garbage to the screen as slashes in 13 bytes". Still impresse
96.
by rilita 12y ago
Making the CFAA apply more broadly and criminalizing hacking behaviors that are currently misdemeanors will have the following effects imo: 1. As stated in the article, restrict legitimate security work and creation of useful tools. 2. Glam
97.
by rilita 12y ago
While I agree that this outlook applies to "programmers" I do not agree that this is a good plan for skilled engineers. Proper software development is not just about code. Things that you are skipping in your modes: 1. Comprehendi
98.
by rilita 12y ago
Cubicles do not have to be drab and have depressing lighting. Everywhere I have gone I decorate my cubicle so it feels happy for me and I often bring my own full spectrum lighting. The size of the cubicle has to be quite large for it to not
99.
by rilita 12y ago
Slack should be handled by effective management. Having clearly defined deadlines and checkups on progress prevents people from wasting time in a detrimental way. Instilling fear in your devs by threatening to expose them when they goof off
100.
by rilita 12y ago
This is an either-or way of looking at it. There are other options. Consider Valve; the most wildly profitable game company that exists: Their strategy is to allow people to move their desks around however they wish, anytime they want. Want
101.
by rilita 12y ago
I agree that it enhances creativity, so it may be a match for a gaming company, especially when the game itself is targeted at a college demographic, but I don't think it is good for developing corporate systems. In this sense, it may
102.
by rilita 12y ago
What I'm saying is that developers typically don't have their own hierarchy. Sometimes there is a "lead developer", but usually there is a non technical person over top a group of developers, and that person is given an
103.
by rilita 12y ago
Generally software developers at any level are treated as the lowest level of person at companies, even when the company specializes in software. As a result, they are packed in wherever they fit. The theory seems that developers benefit fr
104.
by rilita 12y ago
I confessed to the "crime" on the spot, and provided all proof that I did it immediately. There was a clear documented log of what I did. No "investigating" was necessary. I would have been chucked into jail for a year i
105.
by rilita 12y ago
Swartz was a member of a group that was intentionally pirating and distributing large amounts of copyrighted material to which he did not have permission to do so. He is also an idiot for killing himself. If he believed what he was doing wa
106.
by rilita 12y ago
Minimum sentences for certain non violent IT related "crimes" are also excessively long. I've been told one of the things I did in the past that hurt absolutely no one and had almost zero effect is punishable by a minimum 1 y
107.
by rilita 12y ago
Timing correlation. If you are monitoring traffic in/out of NK, you can correlate traffic by similar sequence of sized packets going into one IP and then coming out of another. This is the "secret sauce" that the FBI says the
108.
by rilita 12y ago
"They revealed their IP address" How many technical experts do we need to explain that IP address is not proof, especially when many random IPs and proxies are involved. Suppose I am a hacker who wants it to seem like NK did it. I
109.
by rilita 12y ago
There will be distinctly different patterns for the dates transferring in different ways. Suppose the source is a shared network drive. From share to external USB thumbdrive will have a different fingerprint than from external USB thumbdriv
110.
by rilita 12y ago
Rate limiting is not effective. Having copied many terabytes of data do/from usb devices, I can tell you that it is not a consistent throughput. The speed of transfer depends on an inverse square of the file size of sorts. ( sensitive
111.
by rilita 12y ago
It is the inode trail that I am referring to; not the simple forging of the dates ( which you could obviously do by just changing the date and duplicating the file as you've described ). Messing with the inodes is much more difficult.
112.
by rilita 12y ago
That is a very good point; in my attempts previously I simply went alphanumerically but windows at the very least does not follow that rule when copying. I think the easiest method would be to simply generate a bunch of files, do copies, an
113.
by rilita 12y ago
I have been faking date/timestamps on files contributed to both github and pause over the past 10 years. To me that information is private and I see no reason to give real dates out for files I put into the open source world. I messed
114.
by rilita 12y ago
Do we need more kids learning to create scripts on top of APIs without any fundamental understanding of computers in general?
115.
by rilita 12y ago
Besides reposting the notion that timestamps imply a USB2 file dump, I am seeing only speculation in this article and no "new data on attributing". I would like to point out that any skilled unix developer can create a script in a
116.
by rilita 12y ago
So what you are saying is that because Github provides a clean API we should be more careful about posting sensitive data to it versus other things where you can simply scrape index pages? I fail to see how the warning is meaningful. One sh
117.
by rilita 12y ago
TLDR: It won't save you because people could have copied the information before you deleted it. Duh?
118.
by rilita 12y ago
I think this article is extremely spun in the direction of paranoia and fear. Just because X VPN connections could be "decrypted" doesn't mean that current ones are. Unless there is a report pointing to which VPN connection m
119.
by rilita 12y ago
Sure there are things pointing to NK; but I believe this is intentional. Using an IP in NK, or one "associated with NK actors" doesn't prove it is NK. Consider all the discussion for piracy. IP doesn't prove anything. I
120.
by rilita 12y ago
The FBI and NSA are two very different entities. The investigation goes to the FBI because it is essentially an "in the USA crime". While FBI and NSA may both be looking into it, they don't share all of their data. Also, from

More ›