@tylerl Oh honey. I've been running FlashBlock for many years. There are also a number of sites that I've excluded (particularly because security tools are frequently flash) and YouTube could easily have been one.
I am 18 years old and i was searching for a way to hack passwords without a wordlist because it will take forever and may not work so i hope help .
(I will not use this to damage anyone but just for educational purposes and because i am learning ethical hacking )
@RоryMcCune I have a couple Raspberry Pi model A's that I have in waterproof cases and lipo batteries that I have a tendency to leave around to collect data
@ThomasPornin dunno yet as I've not installed 10 home, but on the feature list they have "internet explorer enterprise" down as a feature in pro/enterprise but not home
which mentions Edge
I get the feeling that home is going to be a bit of a locked down experience. For example updates will be mandatory
I am unfortunately employed (among my tasks) to perform some level 3 support on a Web solution that requires IE, actually an old IE (or a newer IE that mimics an old one), and relies on ActiveX controls.
@ThomasPornin ohh, that's not a good thing! Hope there's a migration plan for ActiveX I didn't get the impression that it's likely to be a long-lived tech...
@ThomasPornin yeah well I think all the browser manufacturers are keen to get rid of that kind of plugin tech, if the removal of NPAPI is anything to go by
@ThomasPornin ahh yeah I've seen that before in large orgs...
@RоryMcCune I do have a plan (and even a prototype) but, as far as I know, I am the only one. All the thinking heads are still at the "we should plan a meeting" step.
@Freedom I've got both my home boxes signed up for install as soon as it's out :) I've used the beta in VMs, TBH looks like a nicer version of 8.1 so far
@ThomasPornin yeah, that sounds familar, I remember being a meeting of a public sector body here about a month before XP support ended and they were saying "well surely Microsoft won't actually do it, they'll extend it again"....
I'll be avoiding 10 home though as I think it'll be getting increasingly hard to use local accounts with it
@Freedom MS are quite good (historically) at changing direction when they can see what's happening and they have to give stuff away and make their stuff cross-platform to succeed
The official position of Microsoft is that they condemn piracy, but they actually prefer people using pirated (hence "free") Microsoft software over the same people using the software from the competition.
it's all about getting people to develop for your platform. One of the ways that "traditional unix" and IBM platforms (AS/400, OS/390) sufferred is that it was expensive/impossible to get kit to develop things on
without app. developers, cool new products don't emerge for your platform
If they really cared about user privacy they would lock down cortana to be a completely local software without phoning home everything you say and write
@Freedom These "assistants" are not there to make searches easier, but to provide the user with a substitute of human interaction to alleviate their loneliness.
@Simon I mean, it is understandable that their software has bugs. But when they know the bugs and even have updates to fix them, why don't they recompile their service pack with the fixes already in it ?
@Simon The only really urgent updates, for a desktop systems, are the ones for the Web browser, and the TCP/IP stack. I assume that Apple pushes browser updates more or less transparently (like Chrome and Firefox).
The first important thing is to think about the meaning of this security hole. This is a local privilege escalation: if an attacker can get to run code of his choosing on the machine, with "normal" privileges, then that attacker can use this hole to obtain more extended privileges on that machine...
Maybe they are wont to publish fixes for local privilege escalation because that's a fool quest. About all "big" OS (including Windows) have local privilege escalation holes.
@ThomasPornin sure depends on that attacker tho'. To find/exploit an 0-day is the act of a relatively sophisticated attacker. To run one command is not
by having a widely publicised issue with a trivial exploit unpatched, they expose more people to attack
for example, school districts that provide locked down macs
@ThomasPornin sure indeed it is not a perfect protection, although corps may use tamper evident seals + punishment for transgression, but again it's "ease of exploit" that makes it more likely that people will do it
for every one person who'll get out a screwdriver in a classroom, there's 20 who's enter a command at a shell..
@RоryMcCune There used to be a lot, about a decade ago, and then I quit following. That's about the time OpenBSD's propaganda began talking of "remote holes" exclusively.
@RоryMcCune The only efficient control procedure I have ever seen used successfully on students is empowerment.
@RоryMcCune Yes, if the machine is so locked down that nobody uses it at all, lawsuits are avoided. But not providing a machine in the first place would have achieved the same result at a lower cost.
@ThomasPornin heh, I've worked in a lot of corps (as I'm sure have you) with super locked down systems, and the choice not to use them isn't really there...
I am installing a computer lab with 25 brand new iMacs.
I would like to secure the machines to prevent students from tampering with them.
Some of the things I'd like to prevent including making changes to the computer/desktop/OS/software/settings, prevent installing software, direct file shar...
@RоryMcCune With modern hardware, I'd say that the cost-effective solution (for hardware and sysadmin costs) is to run VM on a central server, with a lot of netbooting thin terminals.
Give each student a VM, and monitor things from the outside.
This is a lot safer than a shared Unix-like system, and it also gains a lot of time.
@ThomasPornin yeah i'd guess that some will go for that, although if you have x hundred simultaneous sessions you'd still need some decent server hardware to run that, cheaper to use local stuff (purely from a processing power perspective)
@ThomasPornin yep I've seen that too, although no idea how well developed the tools for OSX are...
unfortunately the other thing I've seen in schools is that the staff may not have very high levels of technical skill and are often very under-resources, so simplest solution wins..
@Simon lemme see I have 1 desktop, 3 laptops, there's 2 iPads around, an android tablet, 2 iPhones, 1 iPod Touch. then the missus has 1 desktop 2 surfaces 1 windows phone, then there's the servers one of which has some VMs on it, then there's the VOIP phones, switches, routers, firewalls......
@Simon it was a pygmy shrew, size of your thumbnail, escaped behind the skirting boards eventually, not before we woke up and chased it about trying to rescue it mind..
@RоryMcCune I cant believe in that whole windows 10 convo there was no mention of "Developers! Developers! Developers!"
missed opportunity.
@TildalWave why on earth would I want that??
@RоryMcCune hehe not likely. Have my hands full here...
I should get the waspy for that, though
hmm... maybe after I retire from chairing the owaspil chapter, I'll consider the global scene more. Are they still paying for board member's flights all over the world?
Huh. This is nice - ask a non-question, post a bounty, avoid having your question closed.
During last week I recorded Triassic Attack, Sharknado 1, 2 and 3, Airplane vs Volcano, Ghost Shark, Zombie Shark, Icetastrophe, Stonehenge Apocalypse, Stonados, Mega Shark vs Crocosaurus, Sand Sharks and 3-Headed Shark Attack
I am 18 years old and i was searching for a way to hack passwords without a wordlist because it will take forever and may not work so i hope help .
(I will not use this to damage anyone but just for educational purposes and because i am learning ethical hacking )
I am installing a computer lab with 25 brand new iMacs.
I would like to secure the machines to prevent students from tampering with them.
Some of the things I'd like to prevent including making changes to the computer/desktop/OS/software/settings, prevent installing software, direct file shar...
I'm learning Web Application Security, Please post some good resources to learn about DOM based XSS (Basics to advaned)
Thanks...
-Dave
