spydum

30 ms·

331.
by spydum 7y ago
1. Google/bing dorks still work well, burp suite.. 2. Phishing still works, a few platforms steal MFA input - u2f/Fido is pretty robust tho. The trick is to find apps and federation that don’t enforce 3.you would see all kinds, n
332.
by spydum 7y ago
Have seen these guys, met the founders a while back at AppSecUSA: https://funcaptcha.com/ It’s those puzzles/games as captchas.
333.
by spydum 7y ago
Then they are probably full of vulnerabilities and exposed to the internet
334.
by spydum 7y ago
As much as people hate when vulnerabilities get sweet names like shell shock, heart bleed, dirty cow, and whatever else we come up with, you do have to admit that bit of marketing flare gets more eyeballs on it, and generally noticed and re
335.
by spydum 7y ago
They know, it is measured with some degree of accuracy by the platforms, but nobody wants to remove those numbers from their marketing, except the person paying for the ad..
336.
by spydum 7y ago
No, solution still fits the problem space but requires more than investment to improve efficiency/quality/etc of future management of the technology. The cobol example is great - it is code still solving the problem but is no long
337.
by spydum 7y ago
I can’t WAIT until we have to deal with time dilation problems on networks and certificates.
338.
by spydum 7y ago
I always wondered if someone had created a biz for the purpose of hoarding IPv4 with intent to “sell them”. We talked about this kind of abuse back in the 90s when I worked for a hosting company. Part of my job was filling out ARIN template
339.
by spydum 7y ago
I think this is a long time trend of kids in their 20s with more disposable income or poor financial judgement than anything else (count myself in that group in the past).
340.
by spydum 7y ago
Look at something like wolfmqtt or equivalent - this is like 3-4kb, if you are targeting mqtt.
341.
by spydum 8y ago
Indeed the real sad part is you can’t lead teams there early (premature optimization). Everybody seems to make the same rough transition on their own.
342.
by spydum 8y ago
I suspect this is because you generate power all year round, while a shade tree doesn’t help heat your house in winter..
343.
by spydum 8y ago
Maybe simply that you can install Gcc9 package?
344.
by spydum 8y ago
Simulation proves only the theory - sampling and experimentation proves the implementation. Otherwise it might be entirely possible for the packaging process to fill an exact match at a far higher rate - and for the mix to NOT be random.
345.
by spydum 8y ago
They pitch it as a “discount” if you complete it and meet goals.
346.
by spydum 8y ago
Last I saw black hills had a filter as well - but this is a problem. If companies have adopted Azure AD I believe they have some new options (sorry fuzzy on the details)
347.
by spydum 8y ago
Front door accounts should be vaulted away for when SSO is broken only.
348.
by spydum 8y ago
Even there - the lions share of electricity is consumed COOLING those electronics, but it is a fair point.
349.
by spydum 8y ago
Incase others like me don’t know - OKR is Objectives and Key Results. https://en.wikipedia.org/wiki/OKR I honestly have never seen that acronym but apparently popular from Intel management practices?
350.
by spydum 8y ago
agree, I think there is a massive distinction between a buffer overflow, which can end up rewriting memory of the stack vs an integer overflow, which might cause the value in the specific segment of allocated memory to represent a different
351.
by spydum 8y ago
if he saw this as a young man/child, chances are it was cool and interesting, but informing law enforcement/environmental agencies was not top of mind.. its only when you cross paths with some other bit of information, your memory
352.
by spydum 8y ago
To be fair this isn’t solved via constitutional rights in the US either - look up eminent domain law.
353.
by spydum 8y ago
Exactly.. figuring out why one host out of 500000 you probed got hung up is generally not a wise use of a bot operators time. Now if enough of these tar pits start showing up you can be sure they will quick patch a time limit to defeat stal
354.
by spydum 8y ago
I think obviously no: language definitely contributes to SOME vulnerabilities, but it does not solve all or even most of them. java apps are great example of memory safety, type safety, and still huge vulnerabilities exist in java apps.
355.
by spydum 8y ago
To which I think we land on the recommendation: seek good examples and mimic them. Trouble is finding them.
356.
by spydum 8y ago
Agree - that job just got a bit easier (less data to protect)!
357.
by spydum 8y ago
In fact, when making this post - max planck institute and cern so on came to mind, but was not confident it was a schools vs research Institute ? Certainly there is no shortage of great minds from universities around the world, it’s just th
358.
by spydum 8y ago
Suppose so but doesn’t it become one well to poison? It just surprises me a bit (mainly because I was NOT familiar with EJBCA and have moderate awareness of PKI)
359.
by spydum 8y ago
Sooooo all the big players depend on one CA PKI package: EJBCA - is that not a major concern ?
360.
by spydum 8y ago
Have to admit my American ignorance here, but outside of music schools I cannot think of any major elite universities outside of maybe oxford and Cambridge? I’m curious if Europeans could name a few Ivy League American universities? Maybe I

More ›