@A.Hersean Even surpassing the little one is an achievement to be proud of for any human. I do not believe its even possible for a human to have more rep than the combined bears.
Meme: Bears
Originator: @ThomasPornin, @ScottPack, @AviD
Cultural Height: July 2011
Background: Our highest rep user, cryptographer Thomas Pornin created a couple of distinct accounts with bear avatars.
Being a rather prominent and respected member of the community, this has earned him som...
This attack is supposed to be presented 10 days from now, but my guess is that they use compression.
SSL/TLS optionally supports data compression. In the ClientHello message, the client states the list of compression algorithms that it knows of, and the server responds, in the ServerHello, with ...
Well yes, but the point of everything is making work possible. There's nothing more secure than embedding your computer in 6 feet of concrete and sinking it :D
I saw a talk (in french) a few years back on the job of one of the security maintainers of Debian. Best case, they can backport 50% of security patchs. That's only for main pieces of software. Usually libs and dependencies don't have that that level of security fixes, while their impact can be huge. That's due to the simple fact that it takes a lot of manpower to backport patchs, and neither Debian nor Redhat have enough of it.
@MechMK1 I write a non-compliance or a vulnerability in my report. It's their job to fix it. If I also have to give advice, it would be to update their software to the most recent version, redesign their architecture to work with it, and most importantly redesign their process to be able to keep all of their software updated (distribution of updates) so that the same issue does not occur again in the future.
If it's your job to fix the issue, you can ask for the resources (manpower, time, money) to fix it. If you can't have those resources, document that you are not given what's needed to perform your job. If it's not your job to fix the issue, I have trouble to see how it's complicated for you.
Pet Peeve of mine: The fact that in the beginning of the movie Iron Man, terrorists capture Tony Stark and force him to build a missile for them. For all they know, Tony is simply the CEO of Stark Enterprises.
That's like kidnapping Tim Cook and telling him to build you an iPhone.
@djsmiley2kStaysInside No, the doctor built it for him. Tony was unconscious for that
So up to that point, Tony may as well have been a regular suit, who could have said "Look, I just own the company. I'm not actually the one building the weapons, okay? My engineers do that."
is there someone that is able to help me to do this exercise for one client on vulnerability please? It's an e-mail from customer.
The following came from one of our customers:
“Dear Team,
I have successfully scanned my code with your server.
The following has been identified by your product as a...
Also note that the "customer" is asking for clarification on scanning service, supposedly provided by the OP. If the OP wrote a scanning service, then the OP should know what a SQL injection is.
Homework questions should be framed as "This is what I tried, this is how I got stuck. What am I doing wrong?" and not "Can you tell me what the correct answer looks like?"
@MechMK1 But then they would have to work at least a bit. It's easier to ask someone else to do it for you, especially when you skipped the lesson and are totally at loss. /s
I recently had an experience while overseeing student presentations in a course I am teaching. While the concrete situation could be handled without much ado due to some special circumstances, I thought the general problem interesting enough to ask for opinions here.
The case is the following: In...
Most of the time, publicly recognizing your small mistakes or awkward social behavior and telling others to move on is enough for them to forget it in a few days. This works by removing the potential emotional anchor your interlocutor could have unconsciously attached to the memory.
So indeed, I just allowed you to tell people that.
I wouldn't mind if they faked it better. But if they won't even put the work in to do that, then ... well, then they'd just quit early and ask someone else to do it for them ...
@MechMK1 how is your Portuguese? the Austrian embassy in Brasilia-Brazil is searching for people with Portuguese and German knowledge to help around the embassy... ah, and they need basic computing knowledge, so it may be a problem...
"By a truly unbelievable coincidence, I was recently out for a walk when I saw a small package fall off a truck ahead of me. As I got closer, the dull enterprise typeface slowly came into focus: Cellebrit"
"we found that it’s possible to execute arbitrary code on a Cellebrite machine simply by including a specially formatted but otherwise innocuous file in any app on a device that is subsequently plugged into Cellebrite and scanned"
I am wondering what are the chances of a security researcher accidentally stumbling upon a Cellebrite pack falling from a truck right in front of him...
more likely it's a cover story to protect the one who have the kit and leaked it to the researcher
Meme: Bears
Originator: @ThomasPornin, @ScottPack, @AviD
Cultural Height: July 2011
Background: Our highest rep user, cryptographer Thomas Pornin created a couple of distinct accounts with bear avatars.
Being a rather prominent and respected member of the community, this has earned him som...
