Algo solution
There is a way to check if there is a missing number using an algorithm. It's explained here. Basically if we need to add numbers from 1 to 100. We don't need to calculate by summing them we just need to do the following: (100 * (100 + 1)) / 2. So how is this going to solve our iss...
Okay, most hilarious attack ever... 1) go to website.site.com/site/ 2) wait 5 minutes 3) Redirects to website.site.com/site/error.xxx Creds were not submitted within time limit (??? srsly???) 4) go back to website.site.com/site/ 5) get error message the URL is invalid 6) gets redirected to website.site.com/fasdfasdf/sdfsadf/site/error.xxx 7) try go back to website.site.com 8) Congratulations you have authenticated successfully using AD FS!
@TerryChia Another interesting expression. Makes one wonder if there are indeed creatures which can have intercourse while airborne of their own power.
@HamZa Not sure your answer was any better than the original one. Using a regex or a tool like array_sum doesn't make your code any more faster. It just hides the complexity by running the loop in API code instead of in your visible code.
@HamZa But the question seemed to be a perfectly designed example case for using a binary search. Almost spooky how perfectly the solution fits the problem. Like a teacher designed it so that you'd come to that conclusion.
@TerryChia I doubt it will. But I got an idea. I'll maybe take the risk and set a bounty of 100rep. Saying: "searching for other possible solutions". It will attract people and hopefully upvote our answers. Now let's hope I gain more than 10upvotes lol
I have written this code to generate AES key and perform encryption. i adapted the same code to use use RSA instead but got errors. does it imply RSA keys can not be generated on mobile device? this first part is the code for using AES which works fine and the second part is the rsa one
public ...
Opening that porn question with coworkers around was interesting
Especially with the "This is 100% sex site" line in red
@Simon I sent an email to the guy I'm try to contact using GMail, Yahoo, Hotmail, and an hold HushMail account. All of the received the same auto reply:
> If you don't take your security serious enough, you have no business talking to us
Since DDoS is simply a group of computers coming together to send requests to a particular server, is it true to say that a voluntary DDoS is a perfectly valid and legal program in US?
By that, I mean that the program is running openly on the user's computer and not trying to hide it's tracks us...
@CodesInChaos I'm not sure how to call him, but he works as a relay. You give him an item name (no matter what the item is, he doesn't care) and he guarantees delivery to you.
I want to buy a specific alcoholic drink.
I cannot find it here, and if I ask somebody to send it (it's from outside EU) it will be stopped by customs. This guy acquires the items, and ships it from inside EU
Say I want to write a top secret document (yeh, I'm a secret agent), and I use the method in the title...more specifically
1) Write a document on TextEdit on a Macbook Pro
2) Do not save it
3) Print it through a wireless printer
4) Close the document without saving it
What are the various wa...
@LucasKauffman That change password question you answered, wouldn't the reason to make the user type the password again to "educate" him and try to make him remember the password by making him type it again?
@Iszi It was a reptrain. It has grown cold since, but someone decided to put a bounty on it. At that point (only) did I actually read it, and I found the existing answer a bit lacking to my taste, so I wrote mine.
Users clicks "Change password" -> Sessions invalidated -> New session started
The rest of @copy's answer, however, is sensible.
@Iszi On the subject
Mental -1 for the first line. Invalidating the previous sessions has nothing to do with the ability to create a new session for the user after resetting the password. After all, you trusted that he's the email owner and rest the password for him based on the token, so why not log him in based on the token? Your second point, however, is correct. It could be laziness. — Adnan10 secs ago
@TerryChia I'm not as familiar with Linux as I should be. Explain? Current conditions are that nobody who is available seems to know any passwords for the system, including root.
@Iszi When booting the machine, press "Esc" to enter into the grub page. Find the line with all the kernel parameters and press "e". Add "s" at the end and boot it.
@Iszi When booting the OS, you can normally force a "single user" boot by putting the "single" keyword on the boot command (from the bootloader). Single user should give you a root shell (text mode) without requiring a password.
Alternatively, adding init=/bin/sh as boot parameter can do the trick, but you will get only the root filesystem mounted, in read-only mode. Also, this can work suboptimally in the presence of an initrd.
@Iszi Why so ? If the attacker gets physical access to the machine, he has won anyway.
@TerryChia How reliable is this across distros and versions?
@TerryChia In which case the WDE bootloader would come before the Linux bootloader, thereby preventing single-user mode without the WDE password - correct?
Unblack metal (or Christian black metal) is a genre of music that is stylistically black metal, but whose artists promote Christianity in their lyrics and imagery. Such artists are controversial, mainly because black metal's pioneers, especially those of the Second Wave, intended to encourage hostility towards Christianity. It is also suggested that Christianity contradicts black metal's dark nature and the individualistic and misanthropic ideals of many bands.
The exact beginning of the unblack metal movement is disputed. The Australian band Horde's 1994 album Hellig Usvart brought the ...
Christian metal, also known as white metal, is a form of heavy metal music usually defined by its message using song lyrics as well as the dedication of the band members to Christianity. Christian metal is typically performed by professed Christians sometimes principally for Christians who listen to heavy metal music and often produced and distributed through various Christian networks.
Christian metal bands exist in all the subgenres of heavy metal music, and the only common link among most Christian metal bands are the lyrics. The Christian themes are often melded with the subjects of t...
@Iszi Well, I'm not able to understand more than 10% of the lyrics. So to me it sounds petty much like normal death metal "....death....pain.....fighter....die...."
I have quite serious case here.
One day, My company missed to extend a domain name by few days. So it went to grace period. From what I know, if it went to grace period, people still able to access my website.
However, the site was actually showing a porn site with domain name header.
My boss qu...
@tylerl I think the guy just wanted to watch some pron at work. "Oh no, our site got hacked and we are forced to redirect to pron now, please halp!" That's the excuse I'm going to use...
Use ifconfig however it may remind you of ipconfig in windows.... Also the annoying thing is how much terminal looks like cmd. And how the windows in ubuntu look like the windows in windows...... I can suggest using a book or pen and paper if things remind you of windows however do not put that...
I am a tester and need to test a textarea which uses CK Editor for HTML & CSS injection or any other malicious input. This editor is used to post text & the site owner doesn't want any malicious things to get posted.
I am new to security testing so I need your help guys.
Thanks in advance
The users at the company I support are too dumb to reset their own password every 90 days. So, we were told to just give them a password that we make up. Is that technically legal?
@ThomasPornin Just go to your (or somebody's) Yahoo Mail page, click gear icon, choose 'Mail options'. Just before the end of the page there's a checkbox "Make your Yahoo! Mail more secure with SS". Once you check it, you get the message (about the warnings) and after that you click 'Save', it switches to SSL, and you get the SSL warning.
Why Linux is more secure than windows ? Is it really more secure?
I know Linux is more secure but i want to know what is going at kernel level.Somebody told me that Linux have only one main kernel and has it root password on it.Is it true.I Google it and I found many confusing answers :
1. Linux ...
@DavidFreitag Dude, it's not like I didn't what I was getting into. I only wanted to get Yahoo account because I wanted to send and receive an email from a non-personal email address. Yahoo was the only one that didn't require verification.
> Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the concepts involved and clearly identify a specific problem.
@Adnan help please. This is driving me crazy On windows, I could scroll by clicking on the middle wheel. Now everytime I do that it goes to google with some copy paste of my previous thing ... .. ><
Someone remind me why an edit I, as a 3k+ user, approve requires concurrence from another user in order to be applied? I have the power to independently perform the edit myself, why can't my approval alone be enough?
@Iszi That's a quirk, without any good reason, to my knowledge. If you don't "approve" the edit but instead "improve" it, then it goes straight away, but this time you will be the recorded edit author.
@HamZa A relatively simple way to do that is to install Lubuntu instead of Ubuntu. Same packages, same distribution, by by default the LXDE desktop packages are installed instead of Unity
@HamZa I hate fedora, it's just bad. But some people like it. Then again, some people like slackware. Ubuntu without Unity should be fine. The only reason to rock Lubuntu or even mint would be if you had some hardware that was extremely old, or severely underpowered.
@HamZa It's up to you, i personally don't think installing Lubuntu takes that long. If your hard drive is big enough, just install Lubuntu alongside ubuntu and give it a test drive.
lol The other day you didn't tell me about Lubuntu :P
@DavidFreitag I will try this one https://help.ubuntu.com/community/Lubuntu/Documentation/UpgradeToLubuntu#Removing_other_x.2BAC8-k.2BAC8-ubuntu_components_after_upgrading_to_Lubuntu If it doesn't work/ too slow I'll format and install lubuntu from scratch.
@HamZa That will work, and it's probably the best option, for you.
I love it when our company outsources software. I get to go through their work and destroy it with my red pen, then send them an email about how their software sucks. When i submit a solution to problems they are having, they tell me my calculations are wrong, despite the fact that i was the one who specified what calculations they should be using in the first place.
@ThomasPornin I've never used BSD, and i didn't really mean ancient systems. If i find something old enough i would probably just do a custom Arch build to fit the specs.
@ThomasPornin Thank you sir, i will look this over and do some BSD experiments once the semester starts and i have access to the school's test servers.
@Gilles Routers with only a few dozen megabytes of Flash space are not really amenable to a full OS install, be it BSD or Linux. Even a barebone Debian won't fit anyway.
@Gilles At that point I must recall that I once installed and used Minix, the 16-bit version, and it could fit in 20 MB of disk space and 1 MB of RAM -- and within that space, it could recompile itself.
@DavidFreitag Not tried it. Cannot really comment.