@RegularGDPR bugs.chromium.org/p/project-zero/issues/detail?id=1532

@Bob Lol

> I am having difficulty reporting this issue, as Samsung's vulnerability reporting page (security.samsungmobile.com/securityReporting.smsb) requires agreeing to a number of legal agreements, including some that are in Korean only and some that include language about disclosure. I have reached out to some contacts at Samsung to figure out how to report these issues without these agreements.

@RegularGDPR Yea, more about that here: googleprojectzero.blogspot.com/2018/08/…

@RegularGDPR Still, I just found it interesting given our earlier discussion about automatic APN config

@Bob Interesting a "WAP OMACP push requires authentication"

That's... news to me

Also it's a recent RCE that could be used to root an unpatched device

Maybe without a Knox trip :P

@Bob :-o wait what

@RegularGDPR btw apparently I didn't misremember the auto-config

> As it turns out, our rig was able to send these messages to these devices and they were received and duly processed, despite no authentication details being present in the message. May we introduce CVE-2016-7991. It appears as though the ‘omacp’ app completely ignores the security field of the message!

contextis.com/blog/wap-just-happened-my-samsung-galaxy

S7 in 2016

though it does say it's still supposed to prompt the user... hm

I haven't seen a pushed config prompt since my S4

@Bob I get them all the time. Legitimate config messages do prompt the user, but that's after it's received, processed, and dumped into the configuration message folder

(And you then select the notification drop down to actually activate it)

@RegularGDPR Maybe local networks no longer send them. idk

@RegularGDPR not root RCE, I misread

@Bob Awww

bleepingcomputer.com/news/security/…

> This ransomware strain was first spotted in July 2017, and it first made news headlines in August 2017 when it hit a string of Scottish hospitals.

Interesting. I don't recall that...

> The infection took root on late Friday, August 25. NHS Lanarkshire officials acknowledged the incident right away.

Oh, Lanarkshire. The part of Scotland nobody cares about

Hi folks

I'm on my way to the airport

Wish me luck

@rahuldottech ...airport?

@Bob he is moving no?

o.O

@Bob ...I'm moving to Bhutan. Where've you been?

though

that did move quicker than I expected

@rahuldottech uhhh. asleep, probably

@JourneymanGeek oy got confirmed day before, so yeah

Also the security check dudes just took away my ATF approved wallet ninja and now I'm pissed

ATF?

There's kinda yer problem

Also, personally I would have suggested sticking stuff like that in checkin. Or anything interesting.

Cause the security check dude probably just got a cool toy....

(also shouldn't that been the TSA?)

@JourneymanGeek yeah, TSA

Ajsjdjdjjfjf

ATF is air traffic control? Sorry, got mixed up, my bad

@JourneymanGeek honestly I've had it in my wallet for three years and never had a problem at an airport before...

ATF - All the stuff you need for a great time in Texas. Alcohol, Tobacco and Firearms.

So it wasn't a conscious decision to carry it. I just chucked my wallet in my bag and forgot all about it

@JourneymanGeek haha

Ya

I quite literally think the security check dude thought it was cool, and it went right into his pocket once you were out of sight

I miss the good ol days when they'd ask you to hand it over at a counter, and return it at the other side, or let you mail it over

@JourneymanGeek The reason he gave was that "tools" weren't allowed, and then pointed to the spanner thingy

Which is so ridiculous

._.

Ahh security theature

cause teenage terrorists are going to take apart aircraft. One bolt at a time.

Taking off

The air hostesses are really cute :p

See y'all.

Good luck.

Morning

morning

morning

morning

GUYS

I REACHED

...

This place is magnificent

@rahuldottech Bhutan?

@allquixotic yep

@rahuldottech by "magnificent" I assume you don't mean modern/advanced/industrialized but more along the lines of very pretty natural scenery what with it being nestled in the himalayas and such

you going to be forced to wear the gho?

@allquixotic nup, since I won't be going to school or working. It's compulsory for them during working hours. Looks very comfortable and we'll suited to the weather tho

@allquixotic yes, but it's also not that technologically backward. WiFi in most places, 4g, etc.

@rahuldottech You stopped panicing now then?

I think the fact it allows your mum to get away from your dad is a blessing.

@rahuldottech What are you doing?

University?

@djsmiley2k I'm in 12th. Studying myself, will return to India to take exams.

@djsmiley2k yes

@djsmiley2k yes

YES

Take exams ;p

YES!!!!!!

YES

YES!!!!!!!!!!!!!!!!!!

YES

YESSSS!!!

See riot ;)

@JourneymanGeek yes, that, lol

also those things look comfy

@JourneymanGeek the national dress? Yeah

I've seen far worse national dress (See Swiss Guard @ the Vatican)

Asian traditional wear is usually eventually sensible.

Also the girls here are cute :))

@djsmiley2k so ugly it repels incoming fire ;)

Oh god

@rahuldottech is on a conquest...

@djsmiley2k lmao what

@rahuldottech how are the monkeys there?

@djsmiley2k can take the playa out of the game, but not the game out of the playa ;)

@djsmiley2k haven't seen any yet

@rahuldottech Condotteri?

@djsmiley2k haven't seen any yet, so... Invisible?

Or the Swiss Guard

invisible monkeys are probably more dangerous

@bertieb keep up yo.

Haha

Oh and the laptop I left running as a server back at home is working just fine :))

Eh, tabbed in

@rahuldottech What happens if it goes offline?

Windows remote desktop is decently good, using it for the first time. Chrome remote desktop is cool too

@bertieb hopefully it won't, but I'll be returning next month for exams anyway and in the meantime I can ask my grandma to go over and restart it (she lives in the same neighborhood)

@rahuldottech though if internet is as pricy/rare as they say it is...

@JourneymanGeek I haven't found out about that yet

@rahuldottech Ah fair enough

It'll be a couple of days before we get our accommodation

ah

Which, btw, is supposed to be a "cottage"

Look into WoL too, if you have a couple of devices one can always WoL the other (all else being well)

@bertieb pffft.

How are you on now?

Also, storms a brewing!!!¬

We might finally get that thunder and stuff o_O

@JourneymanGeek hotel WiFi. 260kbps

ah ok

That works

pH and it snows here! I'll see genuine snow for the first time soon!

all you need is something that can do text...

Snow is awesome

lol

ice isn't :/

I remember a guy i knew at uni, from south africa

and he ran into the street and ran up and down for like 15 minutes.

(only ever seen that stuff at the Singapore Science City Snow room thingy before) cc @jou

it started snowing

Stand in teh snow, look up at it falls

is beautiful.

I've seen real snow in the uk

actually was like

I walked out in shorts and sandals and went

"holy shit. WHITE STUFF ON THE GROUND"

lol

Did the crazy barking make everyone on the road think you were rabid? xD

Any of you budding music producers, want me to use your music on my youtube vids?

Naw.

I'm thinking I'll do Binding of Isaac videos or something

will need video

errr audio

Just a little doggy.

@djsmiley2k soundCloud.com/rahuldottech/tracks

@JourneymanGeek hahaha

@rahuldottech that's a start ;)

Hmm. You can access my router page from my domain since I don't have any port forwarding on port 80 yet rad.blue

I should fix this

But it's also sorta convenient, so...

Also static IPs are cool :)))

And convenient

What would the technical term be for when I copy a file between two Windows hosts (with Windows Explorer or robocopy)? would I say "I copied a file via SMB", or "I copied a file via Windows Networking". Or is there a more accurate term ?

I'd say you transferred a file over smb or windows file sharing....

so SMB is still the modern term? they haven't changed the name?

I seem to actually recall the protocol is CIFS now

but no one ever calls it that

... I misremember

CIFS is the old protocol. Its SMB now

ok thanks!

@rahuldottech your "accommodation"? is that like government housing?

@rahuldottech WiFi and 4G, that's just hilariously slow and worse than dial-up and 2G

It's like our new "4G" emergency services network, which is in rural areas actually halfway between 2G and 3G.

@RegularGDPR huh?

WOOOOOHOOOOOOO

i'm on holiday!!!!!!!!!!!!!!!!!

\o/

Wait

so's my collegue

are you SURE you don't work with me?

later, in #pii in Matrix, dj and Burgi realize they're nextdoor neighbors.

and that their significant others went to the same school

@allquixotic In US terms they practically are (hundred-odd miles, couple hours' drive) :P

Erf. It's been so long since I used my DSLR I can't find an SD card adapter to fit it, nor any SD cards with the correct firmware on

@Bob Well he said it's not technologically backwards in that they have WiFi and 4G everywhere, yet actual internet access is abysmally slow with <0.25Mbps being the norm

Oh yeah, I found my Optus AU SIM. Shame it doesn't seem to work anymore :-(

twitch.tv/djsmiley2k

Binding of Isaac eve runs!

Now on rainbox six siege instead

>_>