sdmike1

I'm curious, in that case what properties do make steel interesting?

That or they nuked the private key

at a high, reductive level, yes. that is what motivated me to get mine.

He is also a very skilled SPPer which he will frequently demonstrate. He mentioned in the video the reason he uses so many low skill attacks is because they work so well on locks people *care* about.

Yeah, mostly .NET shops in my experience.

Have you considered any level of FoundryVTT[0] integration? That could be a really cool plugin!

[0] https://foundryvtt.com

In general the NSA functions more like 2 agencies, one focused on the "red" side (hacking, breaking crypto, sigint stuff) and one focused on the "blue" side (protecting US assets from being hacked, developing better/new crypto, providing guidance on security).

Both sides are good at their jobs and for what it's worth, my understanding is that the blue side really does want to keep your shit from being hacked.

This just isn't true. QR codes have a high degree of redundancy built into them via error correcting codes. For example there is the famous case of a bitcoin private key being recovered from a small amount of a qr code and a blurry shot of the full one[0].

[0] https://www.freecodecamp.org/news/lets-enhance-how-we-found-...

The book and the film where written and developed cooperatively so both really ¯\_(ツ)_/¯ However, they are both based on clark's 1951 short story The Sentinel[0].

[0] https://en.wikipedia.org/wiki/The_Sentinel_(short_story)

Just tried ASCII art and it doesn't work, I'll have to try playing with the width.

I love fun hacks like this!

Back in college, a group of students and I spent far too much time in some lab space that was on a separate LAN from the rest of the school network (Lab-LAN<->Lab-Router<->Campus-Router<->Internet which meant it bypassed the campus firewall which was nice). One of the regulars wrote a little chat client that abused ARP in some really creative ways to give us effectively an IRC type chat.

Specifically it took advantage the Hardware Address Length field and embedded the message in the Sender Hardware Address field. I can't recall why we didn't just embedded the message in a raw ethernet frame with its dest address set to broadcast... However, there was quite a lot of fun had with what was really a pretty simple hack!

For instance, there was the time we had a stack based buffer overflow which, after some work, one of the gals managed to get RCE with (we had basic stack protection and DEP, but she bypassed it with a ROP chain), which rapidly lead to shenanigans. There was the time some freshmen used it on the normal campus LAN and somehow triggered the shit out of the monitoring IT had in place.

Lots of fun, I'll have to see if I can't dig up the source code for it haha

Github repo the author put up: https://github.com/PaulKlinger/cnn_card/

Do they have a release of this? Github or otherwise?

I've never found the OpenDyslexia font to be particularly helpful, but I'll give it another go!

Right though! I'm super frustrated that I didn't bookmark it! As for building it with just CSS rules, does CSS have a way to detect if something is the last word on a line before a break? or the last n chars on a line before a break? If so it shouldn't be too bad... Add some JS to rotate through some highlight colors per-line and it should work no?

This looks helpful! I'll try it today! Its not exactly the plugin I recall, that one did all of the lines right away and used different colors per-line.

Thank you none the less for taking your time to find this! :D

Ah, yes, that one that did the fundamental research which enabled it right: https://www.nrl.navy.mil/accomplishments/systems/gps

Largely it's up to building choice. It's a tradeoff of throughput (more people in a single car) and rider privacy. If it frustrates you, grab a UTA key [0] and that will let you put many elevators into independant service mode where the buttons should do exactly what they say.

[0] https://www.ultimatesecuritydevices.com/Original-OTIS-UTA-ke...

After LulzSec was broken up they have had no teeth. Just a bunch of script kiddies these days :P

Desmos is the best thing ever! I'm certain I would not have passed Calc without it. I always struggled with math and put it off till the last year of grad school (funny enough, you can get into grad school for CS without it).

I only ended up doing calc because with it work could pay me ~$20k more.

As a security guy I think this is a REALLY bad idea because of the security implications surrounding it.

There is a tool used in malware analysis and computer forensics called Volatility[0]. It has some very powerful analysis tools and works on Linux Mac and Windows. In your case its ability to dump the memory of a running process without messing with the process state [1] may be very helpful! It also has the ability to run a Yara scan against the dumped memory which could let you find the region of memory containing the config file (so long as you know some of the strings in it).

Hope this helps!

[0] https://github.com/volatilityfoundation/volatility

[1] https://www.andreafortuna.org/2017/07/10/volatility-my-own-c...

The color out of Space[1] is pretty good! However the Dunwich Horror[2], The Shadow over Innsmouth[3], At the Mountains of Madness[4], and of course, the Call of Cthulhu[5] are all good.

[1] https://www.youtube.com/watch?v=TXyda5iiGEo

[2] https://www.youtube.com/watch?v=gKkya1pMhMQ

[3] https://www.youtube.com/watch?v=gviofDcypzE

[4] https://www.youtube.com/watch?v=e2iSmE129uQ

[5] https://www.youtube.com/watch?v=XM9Z39D1yyI

I enjoyed it, however I have something of a weakness for "cosmic horror" and the whole "mysteries beyond our understanding" thing that Lovecraft does.

It mostly holds up, but the proliferation of the themes explored by it and the memeification of Cthulu and the "Great Old Ones" does probably make it more tame than reading it without foreknowledge of the contents.

You can find most of Lovecraft's works (and some of his ghostwriting) as audiobooks on youtube if you want to give them a try [1].

[1] https://www.youtube.com/watch?v=XM9Z39D1yyI

I wrote a similar tool[1] for a cybersecurity competition I was helping to red team for. It would try a dictionary of username and password combos against a list of hosts generated from the results of a masscan[2], once it logged it it would run a bash script on the host to set up our persistence.

From there it would keep a session open on each host and allow you to run commands on a single host, a subset of hosts, or all hosts.

The advantage of this over hydra or some other SSH brute forcer is that it allows us to run our persistence tooling right away after finding a login and keep that SSH session alive so we can re-use it even if the password is changed.

The code is a tire fire, but it worked well for what we needed :)

[1] https://github.com/sdshlanta/ssher

[2] https://github.com/robertdavidgraham/masscan

I had one mechanically fail this summer and my options were turn it in or pay $3,600 and as much as I want to RE it I don't want to spend $3,600 on it. So far medtronic is doing a very good job of limiting the secondhand market on these. I do make regular ebay crawls looking for them through. so far nothing has really turned up :(

I had to take i earlier this year.

As a "reverse engineering hacker" who is a diabetic with one of these pumps (The 670G to be specific) I have black boxed the shit out of it, but because it is doing a good job of keeping me alive and the cost of a new one is high I have yet to disassemble it and do a thorough RE of it. In ~4 years when the warranty is up an insurance is willing to replace it then I will be disassembling it and hacking the shit out of it.

In SCIFs all non-approved transmitting devices are banned except for medical devices.

So when you consider new ones use wirelessly communicate with continuous glucose monitors (mine uses 802.15.4) which it then uses to adjust delivery of insulin. This feedback loop has been shown to give measurably better outcomes so it not something I would want to disable. Toss in that they connect via USB for reporting upload they become a potentially attractive platform for data exfil.

It doesn't have GPS tracking but it does have wireless communication with a continuous glucose monitor which it uses to adjust delivery of insulin which gives measurably better outcomes. It even connects to a computer via USB.

In SCIFs all non-approved transmitting devices are banned, so if you are an attacker an insulin pump has a potentially excellent exfil method.

So would this preclude anyone with a medical device form working there? say like an insulin pump?