The DMZ

« first day (2050 days earlier) ← previous day next day → last day (3128 days later) »

O'Niel

00:02

If TLS verifies servers by certificates and CA's, how do end-to-end encryption protocols do it?

13 hours later…

Stack Exchange

13:12

Salary transparency at Stack Overflow

Matt Sherman on July 27, 2016

We believe (and developers tell us) that job seekers should be empowered with as much information as possible when looking for a job – especially salary. So we ran an experiment on Stack Overflow Jobs to see if the evidence would support it.

Stack Exchange

14:00

"Ok, I lit the smoke bomb and rolled it under the bed. Let's see if it--" ::FWOOOSH:: "Politifact says: PANTS ON FIRE!"

5 hours later…

Aria

18:32

I have setup Honeypot today on broadband connection

So I can catch-up with malware analysis and defence

It's very cool, over night I have plenty of these

And good overlook how this stuff is working today

But I am also apt on machine code and source code analysis as well, and software architecture where it's easy to update libraries and assure all code is safe

2 hours later…

Aria

20:20

And I also setup transparent HTTP proxy over tor so blackhats can download exploits

I am not gonna be submitting / publishing anything though

I just want to see the real hacking movie

Write them some greetz

Xander

@Aria What are you talking about?

Aria

20:38

I am having fun

I have setup honeypot as VM on my laptop, put root/password on it, blocked outgoing internet except http over tor (transparent), so I can watch how blackhats are making up my machine for botnet

Some real action heheheh

Xander: And I can see now what is hitting common broadband

There's plenty of router botnets doing job via tftp, telnet

Also dreambox, ssh bruteforce, open proxy scans

I have open proxy too, but when you use it, the output goes via tor, so they can download malware but wont hack much

I am still to see what the open proxy would be used for

I have also open mysql

And also SSL exploits

I have also open mysql

there's pleny of mysql scans

And also SSL exploits

And other ssh exploits