A token is a piece of data that has no meaning or use on its own, but combined with the correct tokenization system, becomes a vital player in securing your application. Token based authentication works by ensuring that each request to a server is accompanied by a signed token which the server ve...
Is this answer spam? The writing style is weird and the external link + username
Oh. Well I haven't read about its supposed capabilities, other than that it can "pinpoint your location" without you knowing. That's something that's well known from the days of the e911 leaks.
Now, if it's capable of arbitrary code execution rather than extracting low-level hardware information and performing location pings, that would be a little more interesting, although not at all unexpected.
I could give you a dozen anecdotal "this contractor has this spooky capability" examples.
They aren't very hard to come by.
Without technical details, or at least details of capabilities (location tracking vs code exec), there's nothing anyone can say about whether or not it's a big deal. I'd wager to say that this is just a marketing ploy, and they're disclosing some "no shit" level capabilities.
> We will be giving technical details on Simjacker during the Virus Bulletin Conference, London, 3rd October 2019 but in this blog we will give an overview of Simjacker, how it works and who is potentially exploiting it, as well as why it is such a significant new type of attack.
I guess we'll find out. (Reading the rest right now)
> Simjacker code running on the UICC requests location and specific device information (the IMEI) from the handset. Once this information is retrieved, the Simjacker code running on the UICC then collates it and sends the combined information to a recipient number via another SMS (we call this the ‘Data Message’), again by triggering logic on the handset. This Data Message is the method by which the location and IMEI information can be exfiltrated to a remote phone controlled by the attacker.
This sounds an awful lot like traditional location pings / silent SMS.
Oh, "Beyond Location" explains that it has more capabilities.
We'll have to wait until October to know for sure, of course.
But I'm not noticing any inconsistencies with either the MO of whatever IC contractor they're referring to, or with the technical capabilities of SIM cards and the GSM network in general.
Well, for one, this guy seems to claim that the "SET UP call" means that the phone would just prep a call, but the final user would still have to press the call button.
as I said before, the thing that bugs me is not that the claim is really unreasonable - it does seem like the usual unprotected service that was intended just for carrier operators usage and can be abused by regular users
I have iframe in my website i want it to be encrypted so that user can't understand the link and when user try to paste on browser it should show the video
<iframe
id="<?php echo $fetchyoutubedetails['id'];?>"
class="yt_players"
width="972"
height="284"
src="<?php echo $fetchyoutubede...
@MechMK1 Another one! Until I recently started paying attention, I never realized just how many people basically want to implement DRM. I'm obviously all for people making money from their work, but I wish more people understood that fancy content protection just hurts you in the long run.
I've purchased world of goo before and enjoyed playing it. They use to take a strong stance against DRM and therefore distribute their game very freely (they're still against DRM, they just don't advertise it on their main site anymore). 2dboy.com I swear that their reasons for being anti-DRM were the most coherent I've ever heard
Or maybe we should go the other way and someone should release a "DRM-based" browser that tries to lock the user out of everything, so web developers can easily generate protected websites? I don't see any way in which that could go badly...
Funnily enough, when that game came out, I did pirate it. Not because I was a cheap bastard, but because I was a teenager back then and literally had no way of buying it legitimately. Later of course, I bought the game
I think the big reason why people want to implement DRM is because they are so afraid that someone could use their assets.
Well, yeah. That's life. You could use my avatar and there was nothing I could do against it
There isn't even any legal ground upon which I could protect it, because it's literally just a purple hexagon with the letters "MK1" inside
Pirates already have the very compelling argument that their product is free. Don't also give them the argument that their product is better than yours.
a) the kid does not need to know how to crack the protection, just wait for someone to do it and then download their work. Usually those who crack DRM and other forms of copy protection are FAR more competent than the one who did the DRM... so it is a lost battle.
Honestly, I bet it would be easy to make a practical argument against DRM. It costs money to try to make fancy DRM happen, it is an inconvenience for customers, and it gets circumvented and pirated anyway.
One argument regarding piracy I have seen is "A pirate would not pay for a game anyways. Either they play it pirated, or they don't play it at all. The company would not cell a single cent anyways"
I mean, I know that when you buy a movie on a streaming platform you aren't actually buying it, and it's probably worse than DRM, but keeping actual DVDs around and being limited to watching it on a t.v. is just not worth it...
@ConorMancone I guess that you weren't one of the lucky ones that bought Disney games and now can't download or play them anymore because the service was pulled off....
I specifically chose amazon with the expectation that they would be around for at least a decade. My DVDs never last that long anyway, so at the end of the day it's not as terrible as it actually sounds...
They just kill off products and services as they want
But here's my thing: I consider most of my entertainment a product, not a service. And I want to keep my products around
Netflix is a service, and I respect that if netflix dies, I lose my access to hundreds of low-quality TV shows that nobody cares about
But if I buy a movie, I expect to be able to watch that movie now, tomorrow, in 20 years and on the day that my soul leaves this mortal husk of flesh and bones
I would post a question on sec.se ... but I think this is largely opinion based ... the CEO of my firm has requested that my IT department look into increasing our security posture ... my bosses first attempt at this was to talk to a snake oils salesman. I eviscerated this salesmen on the phone call but need options for a real security firm
where would I go to find a listing of decent security firms for contract work
I have iframe in my website i want it to be encrypted so that user can't understand the link and when user try to paste on browser it should show the video
<iframe
id="<?php echo $fetchyoutubedetails['id'];?>"
class="yt_players"
width="972"
height="284"
src="<?php echo $fetchyoutubede...
