@TomK. Well I would have but... Turns out the nick I used there had gotten un-registered because I hadn't logged in often enough. Too lazy to register again.
@daya But if there's like 34 people then that's the correct channel. Idle for a day or two and you'll see a bot post a copy of tweets along with a link to the original tweet and the twitter handle. It should do it many times per day.
I need to recover some old data which were stored on a drive. The data were deleted and the hard drive was formatted twice and filled twice with random data intentionally.
First the drive had a Windows 7 installed.
Then it was formatted twice with windows installer. After each format the space ...
OP is talking about an SSD, so overwriting it once or even twice will not affect the overprovisioning space, and some data will still be left over.
This is wrong. Overprovisioning space makes it such that even full overwrites of an SSD will not actually wipe everything, as previous data will survive in regions that are not accessible to the OS. — forest3 mins ago
Pls downvote that horrible answer and VTC the question duplicate.
Fun fact, that technique (EPT-based page protection) can also be used to mark memory as executable but not readable, even on systems lacking MPK. I know a guy who uses that for fuzzing purposes (since reads of pages that should only be executed could indicate a bug), but it could also be used for security, e.g. to make ROP harder.
Though I believe there are side-channel attacks for detecting gadgets just by executing, not necessarily directly reading, but whatever. Still a cool idea.
@forest Asking kindly: As you said I should be idle there for 1-2 days and a bot post copies of tweets many times a day. But what I am wondering is: does it make any difference If I am there for whole day or few minutes? I should be able to see that posts.no?
@daya IRC is not like some chat sites where you can see the history. If you are not connected when someone sends something, you miss it.
It's an extremely simple protocol. Someone sends some ASCII to the server, and the server broadcasts that message to everyone in the channel. It doesn't store it.
> If you want an academic answer weather or not it's possible at all then we're entering the hypothetical sphere of "given unlimited money and will - is it then possible?". There are a lot of contributing factors (e. g. SSD Controller, state of dead cells, random data source, partition alignment, …). But since you asked folks on the internet instead of physically shredding that disk I assume the disk holds no valuable information for any world power.
And now John Deters's incorrect rebuttal of my criticism is +2. :(
Why do people know so little about forensic data recovery?
I mean if someone is going to give an answer, they should at least know that SSDs don't work like HDDs when overwriting them. And I can think of a couple other places data would hide behind the overprovisioning space too...
https://www.popularmechanics.com/military/a25461748/yandex-mapping-service-locates-secret-military-bases/ > A Russian online mapping company was trying to obscure foreign military bases. But in doing so, it accidentally confirmed their locations—many of which were secret.
> Yandex’s highly specific blurring reveals the location of several sensitive facilities, Turkish military bases, Israeli nuclear facilities, and Israeli Patriot missile batteries. Facilities in Turkey really stand out, as the entire country is available in high resolution. Incirlik Air Base, used by the United States and home to B61 tactical nuclear weapons, is pinpointed by a big blurry mess as shown above.
Even FOSS PDF parsers are dogshit. Yet somehow Adobe manages to be worse!
> Given all the above, we found it natural to ask: Yes, more researchers are using fuzzers to find more vulnerabilities — but are all the researchers using fuzzers to find all the vulnerabilities? How many low-hanging fruits are still out there, just waiting for the first person to press the big shiny button that says ‘FUZZ’?
@TomK. Well syzkaller is fuzzing Linux all the time. Windows kernel is fuzzed probably more than any other kernel, both with dynamic analysis and symbolic execution (via SAGE). In fact, MS has a policy of fuzzing all new kernel interfaces that access untrusted data from the user.
As for OpenBSD... No. No one fuzzes it.
Which is actually kind of scary, since OpenBSD's kernel is... not great.
MS userspace gets some fuzzing done. GNU coreutils have been heavily analyzed with fuzzers. Other than that, only security-conscious companies actually fuzz.
Actually Google does the same thing. Fuzzes pretty much all of their projects (and a lot of 3rd party libs that they rely on) with AFL 24/7 on hundreds of cores.
> Chrome’s fuzzing infrastructure (affectionately named "ClusterFuzz") is built on top of a cluster of several hundred virtual machines running approximately six-thousand simultaneous Chrome instances.
The person who discovers a security issue often reports it to the software vendor or developer first. This gives the software vendor time to fix the issue before publication. Then, after it is fixed the bug is publicly disclosed. This process is called responsible disclosure.
Sometimes, someone ...
Heh, black hat hackers are absolutely ahead of white hat hackers.
I mean just look at the average Linux kernel dev. Hell, even look at the average security-focused kernel dev, and compare them with the average black hat or grey hat kernel hacker... White is miserably behind.
White hats just want to find a bug and then propose a totally broken mitigation (cough KASLR cough) that doesn't work but that gets them a pay raise.
Black hats don't suffer from that issue. They only want what works.
Which means they won't jump between broken mitigation and broken mitigation. They'll come up with entire new classes of vulnerabilities (yes, there are 0day classes out there, not just 0day bugs).
That's true too, but I was thinking more of exploit devs.
Lower level stuff than pentesting.
Actually I partially take my statement back.
While blackhats are far more practical and have a lot more information regarding practical real-world exploits, whitehats often come up with far more sophisticated ones. E.g. advanced cache-timing attacks, which aren't really used in the wild.
Like we have that awesome paper called AnC or whatever which showed how JITed JavaScript bytecode in a browser can perform a timing attack that totally breaks ASLR. It was quite a genius discovery for whitehats. Blackhats wouldn't use such a technique. They'd just find some other ASLR bypass.
@forest 50 questions containing the phrase, maybe half deserve the tag.
6 hours later…
user141350
11:09 PM
I think this question can no longer be migrated to here, even if this would be a legitimate step; please check it and say, maybe we can arrange a migration? Maybe you'll have some opinion to share there?...
I use WSL basically just for Ansible (which as far as I know requires only port 443 to be unfiltered to work properly). With Ansible I Can continuously orchestrate architecture, and deploy relative changes to all my remotes IaaS machines from my own PC.
I desire to protect my WSL as much as I ...
I use WSL basically just for Ansible (which as far as I know requires only port 443 to be unfiltered to work properly). With Ansible I Can continuously orchestrate architecture, and deploy relative changes to all my remotes IaaS machines from my own PC.
I desire to protect my WSL as much as I ...
I need to recover some old data which were stored on a drive. The data were deleted and the hard drive was formatted twice and filled twice with random data intentionally.
First the drive had a Windows 7 installed.
Then it was formatted twice with windows installer. After each format the space ...
I use WSL basically just for Ansible (which as far as I know requires only port 443 to be unfiltered to work properly). With Ansible I Can continuously orchestrate architecture, and deploy relative changes to all my remotes IaaS machines from my own PC.
I desire to protect my WSL as much as I ...
