(*Microsoft will transmit your PSK which it will hold in reversibly encrypted format on their servers under your account and then send it to you (and potentially your "friends" depending on configuration))
@RоryMcCune Yeah, but my issue with -vv (or even -v sometimes) is it's a "global" setting, so to speak. I don't want to increase the verbosity of the whole damn thing - just the OS fingerprinting bits.
@Iszi don't think nmap would do that, best bet is likely to wrap nmap in a script, verbose it up in nmap and extract what you want from the OS fingerprint using the script :)
@M'vy "Cypher" was used in older times, in the pre-computer era. It was the normal spelling in the 18th century. However, as a search term for cryptography that involves computers at some point, "cipher" is much better.
@Matthew That's true, I used to live in Manchester. It's another place where "sea level" is a bit meaningless because the sea has mostly evaporated and ended up directly above us.
are innuendo's (simple JOKES, not scoped comments) "sexual harrasement", as in, the ones you report to HR, like, when someone overly-flirts with you despite sending a no signal
@Lighty if it's focused on a particular person, that's really out of line. general jokes in front of people you aren't comfortable with is out of line IMHO.
@Lighty Generally speaking I shy away from jokes at work functions because technically even if it's not directed at a particular person they can claim harassment or hostile work environment.
Even at happy hours you need to be careful. You also need to make sure that everyone is invited to said happy hour or it's discrimination.
I tend to discriminate against incredibly annoying people, but I can't exclude them from a company happy hour.
someone once turned in a complaint because an ATHEIST made a joke about A JEW, fun think, the one turning in the complaint anonymously mailed with "[email protected]" (.....), to an other company about the complaint
When I look at the exploits from the past few years related to implementations, I see that quite a lot of them are from C or C++, and a lot of them are overflow attacks.
Heartbleed was a buffer overflow in OpenSSL;
Recently, a bug in glibc was found that allowed buffer overflows during DNS reso...
String Termination Vulnerability
Upon thinking about this more, using strncpy() is probably the most common way (that I can think of) that could create null termination errors. Since generally people think of the length of the buffer as not including \0. So you'll see something like the foll...
@RoraΖ No, it is easy to answer. C is vulnerable to overflows because it does not (and really cannot) check for them at runtime. It is the follow-up questions which are hard.
@RoraΖ so say for example I write in ES6 and I want my JavaScript to run in a browser that doesn't support that, I can use a Transpiler to turn it into something which is supported by the browser it's running in
@RoraΖ The follow-up questions are: 1. why is C or C++ designed that way ? And 2. how comes source code asks for nonsensical things such as overflows ?
> I have read that France, in particular, has been known to confiscate laptops with modern OSes that support strong encryption. Especially if that modern OS happens to be on a modern, expensive, sexy laptop. The kind that the customs agent wants for Christmas.
According to the Export Import laws, any device that has a minimum level of encryption is considered as falling under munitions type laws. Does apple's latest oss contain that level, and if they do, has anyone been questioned or convicted of reentering the us with the same device?
I ask because a...
@ThomasPornin C++ can enforce checks, at least for some cases (copy into static buffer) at compile time. This is how the _s functions are implemented by MS (cc @AviD).
@diagprov Yeah, but if you use the _s functions then you are already doing what it takes not to suffer (too much) from overflows on these buffers.
This is a rather generic comments: most partial systems to detect/prevent overflows in C or C++ handle only the simple cases which were not really in problem.
@ThomasPornin True you can overflow other buffers, but these functions make it impossible to do something like char buffer[257] = {0}; and then overflow that.
When I look at the exploits from the past few years related to implementations, I see that quite a lot of them are from C or C++, and a lot of them are overflow attacks.
Heartbleed was a buffer overflow in OpenSSL;
Recently, a bug in glibc was found that allowed buffer overflows during DNS reso...
String Termination Vulnerability
Upon thinking about this more, using strncpy() is probably the most common way (that I can think of) that could create null termination errors. Since generally people think of the length of the buffer as not including \0. So you'll see something like the foll...
