The DMZ

« first day (2892 days earlier) ← previous day next day → last day (1988 days later) »

3:53 AM

lwn.net/Articles/770688

This is interesting.

> There is future work in progress to also put some sort of protection on the page
table register CR3 and other critical registers that can be intercepted by KVM.
This way it won't be possible for an attacker to manipulate any part of the
guests page table.

Wouldn't be surprised if the threat model was totally off though. I wonder what Brad Spengler has to say about it. :P

On a related note regarding virtualization-based security tricks, I had an idea once to implement "pure" X pages (i.e. pages that can only be executed, not read) without using that MPK thing some new Intel CPUs are gonna have, using virtualization (which can mark pages as X without implicitly being RX) through EPT.

Unfortunately I know way too little about VT-x to actually implement it. :(

But I do know a guy who did that for his own personal hypervisor-based fuzzer!

I really need to learn more about low-level virtualization / VT-x...

2 hours later…

David Kamer

5:57 AM

Does kismet scan ports on wired interfaces?

like nmap or some port scanning tool that could be used on lan

1 hour later…

forest

7:03 AM

@DavidKamer Scanning tools don't care about what's being used on layer 2.

It'll work on wired, wireless, avian, whatever, as long as you can assign an IP.

David Kamer

7:52 AM

even if you specify the interface to listen on?

like kismet -c wlan1mon when starting the server?

forest

8:28 AM

Well obviously it'll only listen on the interface you ask it to listen on.

Anonymous

8:43 AM

Morning! :D

Anonymous

I'm sat waiting for my train right now and it is boring.

Anonymous

But! Thank God for 50GB monthly data on my work phone - now I can browse the Internet with the limitation that they are probably monitoring all the traffic.

forest

That's why you should use Tor (or at least a VPN).

Anonymous

@forest Good point, not allowed to use Tor on my work laptop.

Anonymous

Could use a VPN but I've been indecisive on what VPN provider I should use :p

forest

8:48 AM

Do it anyway. Use a Tor bridge (hides the fact that it is Tor traffic).

Mullvad

It's the only VPN I've ever seen with an admin who's actually a pentester himself.

Anonymous

This looks a lot... Better? Than the idiot VPNs.

Anonymous

Well, that's what I call them :p

Anonymous

There is no rate limiting/data limiting on this?

forest

Not that I'm aware of.

Anonymous

Okay, cool.

Anonymous

8:50 AM

I'll invest in this.

Anonymous

I might pay in BTC just so I can feel more L33T :p

forest

In Bitcoic? :P

Anonymous

Heh.

Anonymous

Well, I should go stand on my platform now!

Anonymous

Take care.

forest

8:50 AM

2 hours later…

Tom K.

10:54 AM

day to day work for oracle software devs: news.ycombinator.com/item?id=18442941

4 hours later…

daya

3:23 PM

Really weird thing: My rep automatically dropped from 101 to 95!

Activity: No questions, no answer for about 5-6 months

What exactly is happening?

2 hours later…

Arminius

5:25 PM

@daya Maybe security.stackexchange.com/reputation gives you some insights?

daya

5:48 PM

@Arminius Thanks, but ^ this is showing that I never have 101 rep but I that is not really the case

Actually the whole thing was like 101 -> 99(automatically) -> 101(+2 for an edit) ->99(after 2-3 days) -> 95(after 2-3 weeks AFAIK)

Above *but that is not really the case

Arminius

6:30 PM

So some algorithm decided you've become less trustworthy, but doesn't tell you why... cool.

1 hour later…

daya

7:39 PM

lol But I really have no idea how that algorithm decided that
May be due to the fact that I have no questions and answers for a long time

2 hours later…

forest

9:35 PM

> days represented 333

neato

2 hours later…

forest

11:08 PM

A: How to reuse a DVD+RW from an unknown source?

Best practices For best practices, rather than for defending against a highly sophisticated adversary, it should be enough to just disable autoplay/automount. This will prevent any malicious content on the DVD from being processed by the operating system, but will still allow you to write a new ...