ryanlol

86 ms·

901.
by ryanlol 7y ago
How do you know there was no logging? Linux distros log by default, as does elasticsearch. Most networking setups also keep some sort of BW usage logs. Unless you have some insider knowledge it sounds like you’re full of shit. If you’re goi
902.
by ryanlol 7y ago
How do you know that? this data was exposed for a day or so, did you dump it yourself?
903.
by ryanlol 7y ago
Linux itself gives you decent data from procfs (see /sbin/ifconfig, shows you data transfer in/out per adapter), you can just compare data transfer from the server to any of the boxes that are supposed to connected to. I can’
904.
by ryanlol 7y ago
Looks like they don’t use TLS at all by default, just MTProto on port 443 or MTProto over HTTP. Comms to the telegram servers are always encrypted with MTProto, but tunneling MTProto over TLS would make any attacks on MTProto much harder (p
905.
by ryanlol 7y ago
Surely they’d still see any exfiltration in their bandwidth graphs. And anyways, ES spits out a lot of logs by default.
906.
by ryanlol 7y ago
According to this story MBS is an operative. If heads of state decide to become operatives, perhaps they should lose any protections that might normally be afforded to them.
907.
by ryanlol 7y ago
You do have a point here, but it doesn’t hold up when the DOJ has such an extensive history of going after other state sponsored hacking.
908.
by ryanlol 7y ago
>People selling drugs/credit card numbers/weapons I don’t think this really happens on Tor IRCs, at least not at any significant scale. >People who mentally unstable with paranoia. It’s mostly this, and pedophiles
909.
by ryanlol 7y ago
I can confidently state that the public onion IRCs are not what you want. The people looking for quality chats have been driven away by the crazies.
910.
by ryanlol 7y ago
> I figured every major figure on trial does the whole fake protest thing anyway. You really need to share some examples with us.
911.
by ryanlol 7y ago
For a very long time there was no TLS to Telegram servers, only their own MTProto. I think they introduced TLS wrapping at some point as an anti-censorship measure, not sure if that’s even deployed in all markets. E: Well, I took a look at
912.
by ryanlol 7y ago
> in the EU as a whole, all this is simply not possible. Not because of dark patterns being illegal, but rather because they would not be profitable. I don’t understand this argument. It costs Tesla literally nothing to reverse these pur
913.
by ryanlol 7y ago
Not really, Dubai blocks VOIP because phone carriers lobbied for that. This has the added benefit of forcing people to make insecure, easy to intercept, regular phone calls.
914.
by ryanlol 7y ago
You’re full of shit. There’s nothing theoretical about that vulnerability (almost certainly a deliberately planted backdoor), it allows the Telegram servers to selectively MITM private chats. > there has been no successful implementation
915.
by ryanlol 7y ago
Pavel Durov also shipped what looks very much like a intentional backdoor in Telegram https://m.habr.com/en/post/206900/
916.
by ryanlol 7y ago
Why care about such traffic? Blocking it seems like a pointless exercise.
917.
by ryanlol 7y ago
Who decides when the autogenerated CCs are good enough quality?
918.
by ryanlol 7y ago
Ah yes, it seems totally reasonable for netgear to not patch bugs they paid for.
919.
by ryanlol 7y ago
I guess it’s written by non-Germans who speak German then? Awful lot of BMW internals tend to be in German.
920.
by ryanlol 7y ago
> They already gave their "bribes" to get it fixed, by buying a product and expecting a reasonable level of support Ah yes, that certainly sufficiently compensates independent security research. Your complaints aren’t worth shi
921.
by ryanlol 7y ago
I don’t think it’s exactly unfair to describe the Aisin X1 as a “special BMW” :) It’s definitely a weird exception, and the kind of car you’d expect to suck. Sort of like the Mercedes CLA.
922.
by ryanlol 7y ago
> on a lot of BMW automatic shift knobs Isn’t that only with a couple of weird models built on the Mini UKL platform (and not even all of those)? Hardly what I’d call “a lot”. Pretty sure literally all other models use a button for park.
923.
by ryanlol 7y ago
I don’t doubt that the authors of this post are wonderful people. I just don’t think that there are too many people in this space working for free, only motivated by a desire to help people. I certainly don’t think that there’s anything wro
924.
by ryanlol 7y ago
Nah, disclosing these vulnerabilities is usually about CV-padding and publicity . There aren’t many people out there hunting bugs just to be nice.
925.
by ryanlol 7y ago
I have zero sympathy for end users who aren’t willing to hold the vendors accountable. And besides, there’s nothing stopping the millions of end users from offering their own bribes in order to get shit fixed. $10 from each would go very fa
926.
by ryanlol 7y ago
It should be noted that it’s essentially never the people who find bugs arguing for “responsible disclosure”. It sure is easy to tell others what to do with their work product when you have zero stake in the game. There exists a really ea
927.
by ryanlol 7y ago
Full disclosure is always perfectly justifiable, unless you’re stealing someone else’s work.
928.
by ryanlol 7y ago
>It just takes another tap of the stop/start or the volume knob to shut it of. Not even that, just getting out of the car and locking it will do the trick. I guess that won’t work if you’re terribly insecure about your music choices
929.
by ryanlol 7y ago
> Unkillable notifications for unneeded oil changes. “Unkillable”? You just go into the service menu and reset the oil change interval, this isn’t hard stuff. Just google “e65 reset oil change” or whatever model you had.
930.
by ryanlol 7y ago
Which iDrive version does your car have? The only notable software bug I’ve encountered on my G12 with the current gen NBT EVO (101172.3.214, 2017-04, Q18491l) is that carplay sometimes fails to connect until I restart the infotainment. I’v

More ›