@JeffFerland yeah - I think we just need to be faster on the suspensions, before disruptive behaviour takes over. He's had his warnings - I'm happy to escalate if things are the same once he is back in.
will see how tomorrow morning goes
@Iszi Yeah, yeah, yeah - just you wait till I get my first grey hair - I'll blame the DMZ :-)
@D3C4FF yeah - too much. Patience is all gone now, and I'm assuming everyone else's is too. I know everyone can just click on ignore, but it isn't something mods can do.... Faster suspension/longer suspension
OK. Sometimes feeling too safe is other side of the coin. A little paranoia is not actually a bad thing.
Coming to your question, if I was in your place i would take the following steps to reduce the level of risk:-
Do a 'need analysis' for a Data Loss Prevention.Considering its not the webapp...
I quite like the new versions of nessus... All the results in pretty colours. I like that for some reason 'CRITICAL' vulnerabilities are marked a nice shade of purple
@RoryAlsop It's just frustrating when there's no one thing I can point to... watching lots of little non-ban-worthy things build up until it's something that I can clearly defend as a GTFO.
my report to the clients will be simple "Yeah, you're pretty much fucked". "And according to my transcript here i've been a student for ten years and have graduated with honors"
Hey guys, I need to record a phone call (informing the other party) and have that "beep" tone occur every x seconds... from my cellphone. Does anyone know of a bridge that offers this?
@AviD Have you seen the new Haswell benchmarks? The integrated graphics look incredibly promising and powerful enough to drive triple monitor setups especially since you are not a gamer. You might consider skipping a graphics card for your new setup.
Hmm... Is it possible to boot something like hirens boot CD via network?
Via PXE boot
SERVA
w3rd
I'll just have a conversation to myself
slackerz
Hmm. Hows this for an idea. Pre-package a virus inside a PXE bootdisk, leave your DHCP, TFTP and BINL server running and bam. Everytime systems boot (with PXE as priority) BAM. Pwnage?
and as for GPU - I think it's definitely enough for normals, but I never claimed to be one of those. From what I could see it still not strong enough to run it at high-enough res, e.g. QHD.
I'm gonna be adding a mid-ranged graphics card to my setup soon. The monitor upgrades will come in a few months.
@AviD Probably not, the manufacturing node is still the same. Not sure if the architecture itself will see some improvements on that side of things though.
Anyway, I've already bought all the pieces. Already got the cpu (i7-3770K), gpu (Zotac GTX650 2GB), and a few other pieces - the rest should be delivered in a day or two.
I really think Intel can only improve on the graphics and power efficiency side of things for their desktop segment. Even the older Sandy bridge processors are powerful enough for all but the most extreme users.
@TerryChia actually, wasnt too bad. Price was nearly comparable to 4x4GB sticks (only a few $ more), and better perf stats. That also leaves more a couple extra slots to easily add more later.
I was a little bit annoyed, couldn't find some of the parts I wanted.
for some reason, all the stores here are out of specific drive I wanted. To stick to my choice of model (WD Caviar Green), I had to either take a smaller drive, or shell out more bucks for extra space I likely won't use for a long time.
@AviD Hmm ok, my memory playing tricks on me. I think it was this article that made me question the power saving benefits of the green drives: lifehacker.com/5749345/…
anyway, between amazon and newegg, there are definite advantages to living in U.S. I had to make my selections based on what is available (or go out of my way and pay a premium), instead of assuming infinite availability.
@TerryChia I did some heavy comparison shopping - I only bothered importing it if there was substantial savings, taking into account the possibility of having to pay customs.
actually, not too many pieces. RAM, CPU, router, GPU... I wanted to import a heatsink, because I couldnt find here what I wanted, but it's just too damn heavy to shove into somebody's carry-on.
strangely, the green drives are not always cheaper than the blue drives here.
Morning all! It's a beautiful day here I'm gonna try to make the best of it, but first my COFFEEEEE :)
@D3C4FF Ouch teh sux0r! Did you compile remaining ranges and run it from where it crashed? That's a bit over /10 range so only about 3/4 to go...
@D3C4FF nmap only accepts CIDR ranges or also from-to IPs? Compiling a list of remaining ranges would be a major pain in the butt from where it got stuck.
something like 10.72.71.245-255,10.72.71-255.0-255,10.73-255.0-255.0-255?
funny thing is when I'm reading what inputs it supports, it's almost exactly the same as how I did it for my log analyzers, flags and all
I was just lame enough to stick a GUI on top of it but these things are actually easier to use from a command line... I'm gonna stick in a regex controller and compile a new version, but first... Sun Sun Sun Here It Comes :)
In reference to replacing utilman.exe on windows 8 boxes to get SYSTEM privs at login screen, is it actually possible to disable the button and keycombo at login screen?
@AviD Oh no. Yesterday I Googled asadz and found someone with the same username on Twitter, so I assumed the picture was for him. Later Xander told me specific information about the guy in the picture (who, according to Xander, isn't asadz). So I'm just interested in how he got the information.
In most systems I seen, API keys do not merely act as a means of identification. They usually double as a means of authentication.
The developer isn't going to be typing the API key for each and every request he makes. The key will probably be stored in the code or a configuration file somewhere...
@TerryChia A terminology issue, I believe. The OP seems to use the expression "API Secret" for what you would call "API Key"; and "API Key" for what you would call "API Username".
@AviD I tend to use another way: I never upgrade machine parts; I buy a new one every four years, and I don't open it. To ensure it will be up to what "usual software" requires for four years, I initially put four times the common RAM size at the time of buying.
E.g. in 1997, my PC has 128 MB of RAM. In 2001, it was 512 MB. My 2005 PC had 2 GB. My 2009 PC had 8 GB. Theoretically, I should buy a PC with 32 GB of RAM some time this year.
@TerryChia Well, I am not saying that you or the OP is right and the other is wrong; I am merely stating what is the issue with the communication between you two.
Is there anything wrong with my answer though? Can't say I'm really that familiar with using API keys to access a service. I just wrote what I thought made sense.
@AviD 100% agree! The fun part is choosing the components, connecting them to the board, then press power and wait to see if it'll work. Then install your OS and try the game that used to be very slow on your old one. Ahhhh!
@AviD Oh I don't do that. The risks out weigh the benefits. After rent, gym, food, and beer I don't have much money left. I have to be extra careful with how I use the stuff I buy
This time i think will be the biggest difference for me, in relation to that, compared to any previous build I've done (or computer I bought before I started doing that...)
@Adnan His twitter profile linked to his personal website with his full name and a partial CV, so in all honesty, it was one of the least impressive bits of Internet sleuthing I've ever done.
@Xander no, this one is in Washington, the other guy is local in his remote location. As all the leet haxors here that attacked him with the IP gifs know.
@AviD Sticking in that many APs into a limited space will cause interference. They can potentially overcome that with the 5Ghz band. It's gonna be difficult to do that on the 2.4Ghz band.
@AviD It's electromagnetic waves. That kind of "radiation" can cause health issues, but only in massive amounts of very energetic photons, at which point we call them "UV light" and the source is called "the Sun".
I'm curious why an ATM computer is considered secure. The general adage of "If an attacker has physical access to my machine, all bets are off," seems to not apply in this circumstance (since everyone has physical access to the machine). Why is this?
I thought of the fact that many have securi...
there are several, not sure which is best... will look later.
Actually I have a good answer for that, seeing as I have done a set of pentests and threat models for one brand. Let's see if I have patience to write up a detailed answer...
really, choose any security-related xkcd (except the crypto one, and the password one - thats been done, and still the highest scoring q by a wide margin). The above still applies.
OK. Sometimes feeling too safe is other side of the coin. A little paranoia is not actually a bad thing.
Coming to your question, if I was in your place i would take the following steps to reduce the level of risk:-
Do a 'need analysis' for a Data Loss Prevention.Considering its not the webapp...
I'm curious why an ATM computer is considered secure. The general adage of "If an attacker has physical access to my machine, all bets are off," seems to not apply in this circumstance (since everyone has physical access to the machine). Why is this?
I thought of the fact that many have securi...
