spr-alex

9 ms·

31.
by spr-alex 2y ago
i cant speak to hetzner, contabo. i have tested this attack on aws, gcp a while back and their L2 segmentation was solid. VMs/containers should be VLANd across customers/projects on most mature providers. On some it may not be tho
32.
by spr-alex 2y ago
-p 127.0.0.1: might not offer all of the protections the way you would expect, and is arguably a bug in dockers firewall rules they're failing to address. they choose to instead say hey we dont protect against L2, and have an open issu
33.
by spr-alex 2y ago
We ( https://supernetworks.org/ ) have a Tailscale integration https://github.com/spr-networks/spr-tailscale and support Site destinations for devices. For our hardware products one thing we do need is t
34.
by spr-alex 2y ago
On Azure -- they've been playing catch up this year after repeated congressional inquiries from breaches. It's only in 2024 that Azure has started to build a better device inventory on their infrastructure networks and started doi
35.
Spoofing Internal Packets for Multihomed Linux Devices(anvilsecure.com)
1 points by spr-alex 2y ago|0 comments
36.
by spr-alex 2y ago
OpenBSD is an admirable operating system. We reported a local privilege escalation vulnerability in cron on openbsd due to a memory corruption flaw. Our research got surprisingly close to a reliable exploitation path and we opened up a cont
37.
Common pitfalls with Docker networking and how to firewall(twitter.com)
2 points by spr-alex 2y ago|1 comments
38.
by spr-alex 2y ago
you should know that docker doesnt make firewalling containers easy 1) devices one hop away can route directly to the container network, for example the WAN interface can make requests to 172.17.0.2 2) INPUT firewall rules won't help.
39.
by spr-alex 2y ago
Plugging https://www.supernetworks.org/ -- when on wifi/vpn all DNS will go up over DNS over HTTPS as plaintext DNS is DNAT'd to CoreDNS which is by default configured to use DoH.
40.
by spr-alex 2y ago
Quality companies building quality products do care, successfully.
41.
by spr-alex 2y ago
Regarding attribution to Volt Typhoon please see CISA's previous advisory where they have raised alarms about the targeting of critical internet infrastructure by this threat actor https://www.cisa.gov/news-events/
42.
Bluuid: Firewallas, Diabetics, and Bluetooth(labs.greynoise.io)
1 points by spr-alex 2y ago|0 comments
43.
U.S. lawmakers urge probe into security risks of Chinese TP-Link Wi-Fi routers(therecord.media)
7 points by spr-alex 2y ago|0 comments
44.
by spr-alex 2y ago
This exactly. Eeros, Nest/Google Wifi, and other cloud based mesh devices all likely have access to the password as they send it down to the app. I work on SPR @ https://www.supernetworks.org/,w e keep data self hosted
45.
Show HN: Bssid Randomization(twitter.com)
1 points by spr-alex 2y ago|0 comments
46.
by spr-alex 2y ago
My comment is not unsubstantiated. When implementing the feature we verified Probe Responses, Beacons, & EAPOL Handshakes work as expected with the randomized MAC for the BSSIDs.
47.
by spr-alex 2y ago
Not all are cryptographically signed, no. We have no special documentation but we are also not directly modifying closed firmware either. We are working with mediatek cards and will post more updates this summer. We last posted about our ap
48.
by spr-alex 2y ago
Also see https://en.wikipedia.org/wiki/Simjacker which was being exploited by bounty hunters and all kinds of adversaries
49.
by spr-alex 2y ago
SPR can run about anywhere docker can run. So if you have a linux system running docker with these, you should be good to go. We provide the OS images as one path to running SPR. We are currently looking at banana pi over rockchip but we ar
50.
by spr-alex 2y ago
We actually have an intern researcher working on a path towards an open source implementation of 802.11 for wifi 6 cards but do not have an ETA when our first proof of concept will be released. We've also reported mac leaks to vendors
51.
by spr-alex 2y ago
These amendments might not apply to BSSIDs/Access Points but refer to enhanced privacy features to stop the fingerprinting of stations as well as providing ways for APs to identify stations under randomization, across a complicated net
52.
by spr-alex 2y ago
Yes, We have some prototypes and will have some nice enclosures coming soon that we'll make available via our website at https://www.supernetworks.org
53.
by spr-alex 2y ago
I work at Supernetworks where we're building secure by default Wi-Fi routers. Our software had the ability to assign MACs to interfaces for a little while now, and as a response to this study we've now also added MAC randomization
54.
by spr-alex 2y ago
this was posted down into the comments already but geometry has nothing to do with https://www.nytimes.com/2021/09/02/business/renaissance-irs-... the simons foundation will have influence on machine lea
55.
by spr-alex 2y ago
Other consumables from meat with notable effects here are carnosine and taurine. Carnosine in particular helps with janitorial processes that happen during sleep.
56.
by spr-alex 3y ago
I think what you just mentioned here, at the time there was a lot more software for windows for assistive tech which was a much better experience, where mac os x's screenreader became difficult and buggy. previously macos just worked w
57.
by spr-alex 3y ago
so they had long been a mac user, but the screenreader support started to slip around ~2014 so they actually switched back to windows because it was just a much better experience since apple who used to rock had dropped the ball. i tried to
58.
by spr-alex 3y ago
You can give us a try, https://github.com/spr-networks/super , https://supernetworks.org/ . Wireguard is well integrated. We also have a tailscale plugin, and more vpn plugins on the way
59.
by spr-alex 3y ago
I once worked with a blind malware analyst. I was skeptical because of the working memory requirements for reverse engineering being hard in general... until we worked together and his screen reader gave him hex and assembly. He was beyond
60.
by spr-alex 3y ago
agree very much here. apple - we're missing many intuitive gestures. lets ditch the cursor paradigm eye tracking is set to work on. in the real world we have proprioception that lets us accurately interact with the environment without

More ›