The DMZ

« first day (3330 days earlier) ← previous day next day → last day (1555 days later) »

Anonymous

8:03 AM

On today's agenda: read the DMARC RFC.

Anonymous

It's like 68 pages >.<

A. Hersean

9:10 AM

@MechMK1 No susceptibility to length extension attacks, thus no more need to use the HMAC construction. But I agree, people don't even care to use HMAC with SHA<=2, so...

IT Gremlin

9:44 AM

@J.J What is that?

@ConorMancone Windows or Linux IoT devices?

MechMK1

9:56 AM

DMARC

Domain-based Message Authentication, Reporting and Conformance (DMARC) ist eine Spezifikation, die entwickelt wurde, um den Missbrauch von E-Mails zu reduzieren, wie er etwa bei Mail-Spoofing vorkommt. DMARC versucht einige seit langem bestehende Unzulänglichkeiten im Zusammenhang mit der Authentifizierung von E-Mails zu beheben und wurde bei der IETF zur Standardisierung eingereicht. == Überblick == DMARC baut auf den Techniken Sender Policy Framework (SPF) und DomainKeys Identified Mail (DKIM) auf, indem es für eine Absender-Domain festlegt, wie der Empfänger die Authentifizierung von E-Mails…

@A.Hersean I use SHA-2 mostly to verify file transfers, where the chance of length extension attacks is minimal

Anonymous

^ what mech postwd

Anonymous

and this rfc is very...

Anonymous

very dull

MechMK1

10:38 AM

As opposed to other RFCs, which are action-packed to the brim

Anonymous

11:20 AM

lol

MechMK1

12:21 PM

Q: I think my neighbors are hacking my cellular data

My neighbors and I don’t get along. I moved out of the place to get away from my neighbors because I suspected that they have been hacking my cellular data and WiFi. After 2 months, I move back to the same place and now I can’t access the internet using cellular data on my iPhone 7. I’m too scare...

We really need a canonical question like: "Something happened and I think I know who's behind it"

MechMK1

12:53 PM

-1

Q: Help me please SIM HACKED

I am absolutely certain my SIM card has been hacked and I’m finding very strange things going on such as my thermostat has a WIFI connection. My phone WiFi is not connected however there’s an IP address that reads 80:0C:67:EF:8A:FA. I don’t really want to have law enforcement involved because m...

simcard

Conor Mancone

1:04 PM

@MechMK1 I was just trying to figure out which close reason was the best to close that question. A duplicate would help.

MechMK1

@ConorMancone Yeah, it would be nice

And all of those are surprizingly similar:

"I am absolutely sure it's my neighbor/ex-boxfriend/co-worker/etc..." - "I don't know why anything is happening"

Benoit Esnard

Do you have some example of famous cases where a password / security key was leaked because of a picture / video?

Conor Mancone

@BenoitEsnard I almost had that happen in my own office - an employee who posted a video to facebook from his office, and gave a perfect picture of his screen. Fortunately he was a new guy and didn't have any access credentials to leak. Although, obviously that doesn't answer your question...

Still not famous but I had a friend who took a picture of the "I love you note" that his girlfriend put in his wallet and posted it to facebook. Since the note was in his wallet he also posted a perfect picture of his driver's license. (Still doesn't answer your question)

Benoit Esnard

Haha, I also have a lot of personal anecdotes

Conor Mancone

@BenoitEsnard nakedsecurity.sophos.com/2012/11/21/…

MechMK1

1:17 PM

I don't have any famous cases, but I recall some news stories popping up about such cases

Which is why passwords in our company are never distributed via paper

Listening to music in VLC at x0.75 speed with time stretching disabled is oddly charming

And since it's a simple interval, most of the notes still sound fine

So an A4 would turn into an E4 (slightly sharp)

For vocals, it sounds weird, but instrumental music is really cool

And yes, I am aware exactly how much I sound like a hipster

> What, you listen to music at x1.0? Pffff...so mainstream.

M'vy

2:19 PM

@BenoitEsnard French tv TV5Monde once had their password leaked while being interviewed by France 2 bbc.co.uk/news/world-europe-32248779

Conor Mancone

@BenoitEsnard Oh man, I forgot about the best one!

breakingnews.ie/discover/…

@MechMK1 As someone who is completely tone deaf, I definitely wouldn't notice. Still, making fun of hipsters is fun too

Benoit Esnard

Oh, I just remembered this: slashgear.com/…

Thanks a lot for your examples!

ThoriumBR

and someone leaked a qr-code of the privkey of his bitcoin wallet live on French TV

bleepingcomputer.com/news/technology/…

Anonymous

473/500.

Anonymous

Come on man, I want a third gold badge :p

ThoriumBR

2:26 PM

well, reading the article, it was leaked on purpose

@J.J 519/600 on Electorate...

Anonymous

Oof.

Anonymous

I'm only 345/600. I don't really use the site anymore.

Anonymous

I just shitpost here.

Conor Mancone

@BenoitEsnard Oh man, that's a classic. Especially because I can guarantee that those keys will never be "invalidated". They will continue to work on any "TSA certified" lock. I'd say "don't buy any TSA certified locks" except that a lock on your luggage is really pretty useless anyway...

IT Gremlin

3:02 PM

I took down a picture from our website of the managing partner with a screen of data behind him.

... but then he is one of the least security and IT literate people in the office.

I sort of wish my company would get hacked in some small prank way to wake him up.

We have never had a PenTest, I am trying to drag him to that now that he wants turn us into a certified company.

MechMK1

3:19 PM

@ConorMancone An E4 is 329.6275569128699 Hz. A 330 Hz tone is therefore 0.372 Hz, so just 0.11% sharper than the original. You need to have a very musically trained ear to tell that this is off

Anonymous

I could really do with this day being over.

Anonymous

Sadly I still have an hour.

MechMK1

@ConorMancone So it's about 2 cents sharp

IT Gremlin

2.5 hours for me.

MechMK1

Just to give some perspective: An instrument that is within 5 cents of the intended frequency is considered "perfectly intonated"

@ConorMancone A TSA lock is basically there to keep your luggage from falling out accidentally

2 hours later…

IT Gremlin

5:08 PM

You know how they have some side channel attacks, where they read the radiation from a machine, almost like WiFi from the CPU? Could anything like that be done with say a laser picking up sounds that the case ... never mind it sounds stupid to even me. :P

Good night

ThoriumBR

@ITGremlin that exists, and it's not stupid at all...

shine a laser on any reflexive surface, capture the reflex on a phototransistor, amplify the signal, and you get audio

it can be done with a laser pointer, a common phototransistor, and any audio amplifier

« first day (3330 days earlier) ← previous day next day → last day (1555 days later) »

all rooms