tkems

13 ms·

31.
by tkems 3y ago
Totally agree that this isn't a good full pentesting device, but I also think that such a device doesn't need to be in order to be popular. Just look at the IM-ME when Samy Kamkar showed it off [0] and it sold out. Most people don
32.
by tkems 3y ago
If you want to go deeper with RFID and can spend a bit more (~$50), I am pretty happy with my knockoff Proxmark3 Easy [0] I got on ebay. (Do some research to find a good seller as I have heard some sellers ship bad units). It can do both 12
33.
by tkems 3y ago
I got one not too long after the official launch and I've used it a decent amount (granted I am in cybersecurity and have a more real-world use cases then the average person). My favorite use case is the IR remote since phones no longe
34.
by tkems 3y ago
This sounds like a hold-over from an older system. I've heard stories of certain universities and banks using old mainframe systems for central authentication. In one instance I've heard that passwords were stored in plaintext and
35.
by tkems 3y ago
First time I realized this was possible was in the TV show Mr. Robot [0] and I thought it couldn't have been that easy. However, after my experience within the cybersecurity sector, I can see this happen easily. Old processes that requ
36.
by tkems 3y ago
While I get the appeal of having networked devices that you can access from anywhere, I want local control for everything. Sure, a cloud option on top is nice, but local first! I feel that the current solution to "control from anywhere
37.
by tkems 3y ago
From my understanding, the copyright is held by the photographer unless you have a contract stating such. I was shocked that most wedding photographers consider giving up copyright a deal breaker (unless you pay a huge amount more): https:
38.
by tkems 3y ago
I agree that patents are very broken, but I think that copyright and patents are different for these reasons: 1) Patents can cover broad topics. Copyright doesn't have a similar standard (from what I've seen). You can't just
39.
by tkems 3y ago
Another issue I've personally run into is historic and family photos. Since the person who took the photo is often the copyright holder, often times old photos with no known information can cause some issues with publishing or archivin
40.
by tkems 3y ago
I can see the issue with larger corporations having an easier time protecting works they create, I think a system where registration is simple would solve most of the issues. Patent applications are a complex process and I don't think
41.
by tkems 3y ago
Everytime I see complications with copyright I think that it should be similar to patents. Short length of time with an optional renewal if the work is valuable enough. I don't think it would be too much to ask for rights holders to be
42.
by tkems 3y ago
While this sounds like a cool idea, my first thought is: What happens when someone is able to remotely gain control?. Does the plane not accept commands other than "Please fly to point X. If you can't contact me again, land at Y.&
43.
by tkems 3y ago
This is a pretty good idea, but does have an issue with shared passwords. In most attacks, the data on that site is compromised and changing your password afterwards just prevents further exploitation by others. What some password manager d
44.
by tkems 3y ago
Even if passwords are salted and hashed, easily guessed passwords can still be brute forced (think password123). Even with good password hashing algorithms like PBKDF2 (I have no idea what Comcast was using, but this is what LastPass uses)
45.
by tkems 3y ago
Just as an example, my phone has 512gb of onboard storage and 16gb of RAM. I think it is safe to say that in the not-to-distant future, we will see the option to run multiple models on device with only a slight storage hit.
46.
by tkems 3y ago
I think that running AI on device is the clear next step in the world of super powerful portable phones/devices. I have a 2021 model phone with very powerful specs (granted it is the high end model that I got used). With nearly the sam
47.
by tkems 3y ago
I remember this video [1] from bigclive about it. I had no idea it was so common to have live wires in contact with water. At least they are grounded sometimes? [1] https://www.youtube.com/watch?v=cNjA0aee07k
48.
by tkems 3y ago
While I think this is a great idea, I've seen these in public places and the USB-A sockets almost always get damaged. I'd be worried about having to replace a $40-50 receptacle every year or two if I happened to bump the cable and
49.
by tkems 3y ago
Meaningful or not, some companies and organizations don't understand the difference between a CVSS score of 2.0 and 10.0. Being in the cybersecurity industry myself, there is a wide gap of knowledge in the risk of vulnerabilities. Foll
50.
by tkems 3y ago
A gentle reminder that the Security+ and Security+ 2.0 RF protocols have been reverse engineered ( https://github.com/argilo/secplus ). While they are not the most secure thing in the world, you can build a custom RF tra
51.
by tkems 3y ago
Sure! I found this documentation from Clover (a payment processor like Square): https://docs.clover.com/docs/understanding-level-3-data The Level 3 data isn't sent from all merchants, but I have a feeling that lar
52.
by tkems 3y ago
I'd love to see a digital option not tied to identities, but I think that is never going to happen due to the KYC (know your customer) laws in place. I hate bring cryptocurrency into this, but even with "distributed" currenci
53.
by tkems 3y ago
I recently started seeing advertising related to products that I had purchased at a large US supermarket. I did some digging on the payment card networks and found that they are sent a lot more data that I realized. Level 3 data (the highes
54.
by tkems 3y ago
I did some research after staying in a Vegas MGM property and the minibars [1] seem to use IR beams to detect if a product has been removed. They also can be hardwired via Ethernet or use wireless protocols like zigbee. It seemed that in my
55.
by tkems 3y ago
In my opinion SafetyNet is no longer about security and is mainly DRM at this point. I think you are right on the money about the out of date devices too. I was going through my Dad's old phone collection this weekend and noticed that
56.
by tkems 3y ago
Agreed. I have never and will never enter my email into one of those popups. Just let me read the content in peace! I also hate that there isn't an X. While I now know that I can just click outside the box, my first time I had to read
57.
by tkems 7y ago
https://web.archive.org/web/20200131195339/https://www.biorx...
58.
by tkems 8y ago
Thanks, great site! My username is TKems
59.
Photos of Mars Lander from NASA Mars Orbiter(nasa.gov)
14 points by tkems 10y ago|2 comments