tsujamin

12 ms·

121.
CISA directs federal agencies to disconnect Ivanti products by Friday midnight(cisa.gov)
97 points by tsujamin 3y ago|49 comments
122.
by tsujamin 3y ago
I remember when, in our high-school english class, the teacher asked us to reflect on Chapter 21 of A Clockwork Orange and a girl in the back of the class interjected "but there's only 20 chapters in my book!". Turns out the
123.
by tsujamin 3y ago
Let me just teach my mum how to run a HTTP server and generate QR codes to send me photos of our lunch /s
124.
by tsujamin 3y ago
Being able to fairly monetise your creative work and put food on the table is a bit rivalrous though, don’t you think?
125.
by tsujamin 3y ago
Makes me think of the sentient hell-class weapons in the Revelation Space series that (if I recall correctly) had to be goaded and convinced into firing
126.
by tsujamin 3y ago
Use one of the dial-outward mesh VPNs or authenticating proxies (Tailscale, MS AppProxy, CF Tunnels etc), block all incoming traffic and stop caring all together imo
127.
by tsujamin 3y ago
There’s a lot more footguns for attackers on modern windows than other operating systems. Most can be bypassed (EDR, AV, AMSI, ETW, UAC, controlled folders, App Control, block at first site etc), but it definitely raises the bar if your end
128.
by tsujamin 3y ago
Adding the ‘*’ record to ADIDNS during a penetration test and watching auth attempts for mistyped domains roll in is always good fun
129.
by tsujamin 3y ago
My mum could probably install on her phone, and configure an exit on her computer, without knowing what Wireguard or `-j MASQUERADE` means ;)
130.
by tsujamin 3y ago
Likewise, RockBox is the only thing I’ve run my my current iPod Classic. The first time I ever used Linux/gcc as a kid was changing the rockbox bootloader to boot rockbox by default on an iPod nano
131.
by tsujamin 3y ago
Ocean at the End of the Lane is a great 2nd to read if you enjoyed Neverwhere! I was also listening to Evan Doorbell’s telephone tapes [1] as I read Exploding the Phone, which was super interesting because you can see the events of the bo
132.
by tsujamin 3y ago
Not to spoil too much of the rest of the Hyperion Cantos if you’ve not read it, but I found the way each book brought into question the “reliability” of previous parts of the story super interesting. On the one hand - it can feel like a laz
133.
by tsujamin 3y ago
A pair of books I’d recommend for 2024, which I didn’t get the chance to reread this year, would be: - The Ocean at the End of the Lane (Gaiman), which is beautiful in a way I can’t quite describe - Century Rain (Reynolds), which is best de
134.
by tsujamin 3y ago
that seems like a wildly overcomplicated method of hacking a commercial organisation...
135.
by tsujamin 3y ago
+1 for endless sky, has that “just 30 more minutes” hook
136.
by tsujamin 3y ago
You mean the SEC _doesn't_ have a secret basement of blockchain precogs?
137.
by tsujamin 3y ago
Out of curiosity what's the source on that? AFAICS there's no clear legislation restricting it (although a lot of talk about such a bill in the future). It is in standard contract terms?
138.
by tsujamin 3y ago
The sad thing about this happening to Optus is that it _could_ have happened to any of the big telcos, this sort of technical cascading fault, but because it happened to Optus on the back of the data breach all the focus is on Optus, not on
139.
by tsujamin 3y ago
> ... service called Zapple Pay (which we covered here back in July), which initial goal was to help iOS users escape Apple's censorship on Zaps. You could then connect your Lightning wallet to Zapple Pay through NWC, paste your Nos
140.
by tsujamin 3y ago
His album during covid was 11/10 (very different though) https://simonposford.bandcamp.com/album/flux-contemplation-p...
141.
by tsujamin 3y ago
I presume OP forgot the /s
142.
by tsujamin 3y ago
Edit (I missed this): "In addition, users cannot add Community Notes to these ads either. Over the past few months, users have been utilizing Community Notes, the popular feature on the platform that allows users to add context to disi
143.
by tsujamin 3y ago
As a red teamer, I also wish it supported running python locally :)
144.
by tsujamin 3y ago
I sure hope the Archangel-class ships in the Hyperion cantos are Science Fantasy :’)
145.
by tsujamin 3y ago
Give H1 2023 has only just wrapped up I optimistically presumed it would be in production now, but I’ve got no idea what the lead time on these reports historically has been
146.
by tsujamin 3y ago
The glossary entry on warrant canaries is dated December 2020, but there is a more recent canary list in their 2022 transparency report ( https://www.cloudflare.com/en-au/transparency/ ) with the same 6 items in it.
147.
by tsujamin 3y ago
I did a training course on this the other day - loved how passionate the trainer (who worked on the ASM) was about the correct application of quotes within quoted passages
148.
by tsujamin 3y ago
Super cool. I've been wondering if something like this existed since I started listening to Evan Doorbell's Telephone Tapes that got posted a few weeks ago ( http://www.evan-doorbell.com/production/group1.htm )
149.
by tsujamin 3y ago
It’s not as if their network architecture or threat models were put on billboards prior to that..
150.
From Discord to 4chan: The Improbable Journey of a US Intelligence Leak(bellingcat.com)
10 points by tsujamin 4y ago|0 comments

More ›