Deer Hunter

general recent conversations

The DMZ

A serious place where infosec is discussed PS we don't do hard...

Deer Hunter

Mar 31, 2016 20:38

Tildal Wave is an effing professional and an effing good fellow.

Deer Hunter

Mar 31, 2016 20:34

O effing unikong.

Deer Hunter

Mar 24, 2016 20:34

@Adi - your keylogger uses one

Deer Hunter

Mar 24, 2016 20:22

@RоryMcCune : experience = 1.0 - liver_health

Deer Hunter

Mar 24, 2016 20:03

@ThomasPornin - Intel luvvs Microsoft, Microsoft luvvs Intel

Deer Hunter

Mar 24, 2016 19:55

Q: Preview: A minor ToS update restricting companies that scrape your profile information without your permission

tl;dr: We’re planning to make some changes to our ToS to stop companies from scraping user profile information from multiple websites and then spamming them. The changes only restrict a specific kind of commercial use of profile data that is scraped or copied from our site without the user’s per...

Deer Hunter

Mar 24, 2016 19:54

(and yes, I know I'm late to the meta SO drama party)

Deer Hunter

Mar 24, 2016 19:54

102

Q: Recruiter claims to have gotten my email address from Stack Overflow

I just received an email with an unsolicited job offer from somebody who claims to have found me on Stack Overflow. It was addressed to "Ed", a name I use nowhere but Stack Overflow (it's not my real name), and she says she's looking for a .NET developer, which I am. So "random spam sent to 1,00...

discussion support email

Deer Hunter

Mar 24, 2016 18:33

bonfire boner bonus bondage

Deer Hunter

Mar 24, 2016 18:30

@MarkBuffalo - weird ceremonies, hill casinos, and all that

Deer Hunter

Mar 24, 2016 18:28

@MarkBuffalo - the ones inside the beltway are a tribe unto themselves

Deer Hunter

Mar 24, 2016 18:27

@DavidFreitag - one dept, two heads -> confusion

Deer Hunter

Mar 24, 2016 18:27

@MarkBuffalo - d' you mean you hail from another part of the three-lettered family tree? :P

Deer Hunter

Mar 24, 2016 17:43

Must be a mighty insult: 'You, sir, are a kleptographer'

Deer Hunter

Mar 24, 2016 17:40

Kleptography

Kleptography is the study of stealing information securely and subliminally. Kleptography is a subfield of cryptography and cryptovirology, and is a natural extension of the theory of subliminal channels that was pioneered by Gus Simmons while at Sandia National Labs. Kleptography is also related to steganography. Kleptography was introduced by Adam Young and Moti Yung in the Proceedings of Advances in Cryptology—Crypto '96. == Kleptographic attack == === Meaning === A kleptographic attack is an attack which uses asymmetric encryption to implement a cryptographic backdoor. For example, ...

Deer Hunter

Mar 24, 2016 17:40

TIL

Deer Hunter

Mar 24, 2016 17:32

@RoryAlsop - since all Rorys are one and the same, you need but one coat.

Deer Hunter

Mar 24, 2016 17:31

@RoryAlsop - an alligator skin coat, no less.

Deer Hunter

Mar 24, 2016 17:30

@Simon - you may be an alligator but you are NOT A BUS.

Deer Hunter

Mar 24, 2016 17:28

@Simon - IAGDCOPMRA

Deer Hunter

Mar 24, 2016 17:24

@diagprov - thanks!

Deer Hunter

Mar 24, 2016 17:20

@MarkBuffalo - probably not much

Deer Hunter

Mar 24, 2016 17:18

"Ways to generate a non-prime DH modulus to create a NOBUS backdoor"

Deer Hunter

Mar 24, 2016 17:17

Sshh... @Simon - that's why I typed it

Deer Hunter

Mar 24, 2016 17:17

I'm pretty badlocked

Deer Hunter

Mar 24, 2016 17:16

@DavidFreitag - hullo there!

Deer Hunter

Mar 24, 2016 17:16

github.com/mimoo/Diffie-Hellman_Backdoor/commit/…

Deer Hunter

Mar 24, 2016 17:15

DH backdoored ... or not...

Deer Hunter

Mar 2, 2016 07:17

It gets murky insofar electoral college is concerned...

Deer Hunter

Mar 2, 2016 07:16

@Adi - polls set him about par for the course in the national vote

Deer Hunter

Mar 2, 2016 07:11

@Adi / Svetlana - can't see that, li'l green button is a great helper

Deer Hunter

Mar 2, 2016 07:10

@Adi? What?

Deer Hunter

Mar 2, 2016 07:09

Air-gapped computers sing 'Mary had a little lamb' on AM 1580 kilocycles

Deer Hunter

Mar 2, 2016 07:08

github.com/fulldecent/system-bus-radio

Deer Hunter

Feb 14, 2016 20:56

@TildalWave - yup, seen those before. Re: hearing aids - can be useful to record exfiltrated private keys :ppppp

Deer Hunter

Feb 14, 2016 20:54

@RoryAlsop - the new meaning of 'security theater', or rather, choreographed security ballet.

Deer Hunter

Feb 14, 2016 20:52

@RоryMcCune - thanks

Deer Hunter

Feb 14, 2016 18:54

Black Sabbath "Paranoid"

►

Deer Hunter

Feb 14, 2016 18:53

I must be channeling @MarkBuffalo, though

Deer Hunter

Feb 14, 2016 18:52

In fact, the Wiki says 'From the moment the vault door is closed until it is re-opened, everything is also video recorded.' Where's video, there's audio...

Deer Hunter

Feb 14, 2016 18:51

@RоryMcCune - the links I've found say nothing about flashing LEDs or audio speaker physically torn out...

Deer Hunter

Feb 14, 2016 18:49

blogs.technet.microsoft.com/askds/2009/09/01/…

Deer Hunter

Feb 14, 2016 18:45

empty Veuve and whiskey bottles would be a dead give-away, though

Deer Hunter

Feb 14, 2016 18:43

...bureaucrory

Deer Hunter

Feb 14, 2016 18:42

Maybe my real question is where to find the technical guidelines

Deer Hunter

Feb 14, 2016 18:41

@Rory McCune - wrong Rory, sorry

Discussion on question by D.W.: Cost …

Imported from a comment discussion on security.stackexchange.c...

Deer Hunter

Mar 25, 2016 12:41

I feel you are making a distinction where no distinction exists. Weaponizing depends on prior experimentation, and search is aided by the information gleaned from experiments.