Security Fuckup Megathread - v7.69 (stay safe security ghost)

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v7.69 (stay safe security ghost)

«‹›163 »

Rufus Ping: Dec 27, 2006; I'm a Friend of Rodney Nano

guy who hacked gamma intl wrote some stuff http://pastebin.com/raw.php?i=cRYvK4jb

# ? Aug 9, 2014 00:45

Adbot: ADBOT LOVES YOU

# ? Apr 26, 2024 11:07

theadder: Dec 30, 2011

EMILY BLUNTS posted:

because goons were probably about to try breaking into a site a vulnerability was discussed about and start talking about it and closing a thread is a reminder to shut up if you do something dumb whether it works or not

this thread is v keen on attempting to destroy yospos

# ? Aug 9, 2014 00:47

Lain Iwakura: Aug 5, 2004; The body exists only to verify one's own existence.; Taco Defender

https://plus.google.com/+ChrisBlasko/posts/GzCuzTyUXNq

quote:

Today is a good day. I just had a call from a telemarketer. Did I yell and scream at them, you ask? Certainly not. Like a good IT administrator I put my skills to use for their benefit. Here's how the conversation went:

Computer: "Press 9 to not be contacted in the future. Press 4 to speak to someone about your mortgage issues"
<presses 4>
TM: "Hello, are you having problems paying your mortgage?"
Me: "Hi, this is the IT department. We intercepted your call as we detected a problem with you phone and need to fix it."
TM: "Oh... ok, well what do we need to do?"
Me: "We're going to need to fix the settings by pressing 4-6-8 and * at the same time"
TM: "Ok, nothing happened."
<alright, so he's not using a Polycom>
Me: "Are you using the new Polycom phones that we deployed?"
TM: "No, it's a Yealink"
Me: "Ok, I see. You haven't had the new Polycom phone deployed to your desk yet. Let me check our technical documentations for the Yealink."
<did a quick Google search, "yealink phone factory reset">
Me: "Alright, do you see an "OK" button on your phone?"
TM: "Yes I do"
Me: "Alright, you're going to press and hold that button for 10 seconds."
TM: "OK, pressing it now"
Me: "Perfect, let me know if you get a password request"
TM: "OK, nothing has popped up ye----"
<click>

best feature ever

# ? Aug 9, 2014 01:49

EMILY BLUNTS: Jan 1, 2005

sure but isn't it just going to take about 10 minutes for the phone to boot and configure self off port?
or is this a more special kind of factory reset

# ? Aug 9, 2014 01:55

CISADMIN PRIVILEGE: Aug 15, 2004; optimized multichannel
campaigns to drive
demand and increase
brand engagement
across web, mobile,
and social touchpoints,
bitch!

yo osi are you going to the august van sec meet up? I'm thinking I'll use it as an excuse to take friday off

# ? Aug 9, 2014 01:57

Lain Iwakura: Aug 5, 2004; The body exists only to verify one's own existence.; Taco Defender

CISADMIN PRIVILEGE posted:

yo osi are you going to the august van sec meet up? I'm thinking I'll use it as an excuse to take friday off

yessir

# ? Aug 9, 2014 01:57

CISADMIN PRIVILEGE: Aug 15, 2004; optimized multichannel
campaigns to drive
demand and increase
brand engagement
across web, mobile,
and social touchpoints,
bitch!

same goes for you mz bluntez

# ? Aug 9, 2014 01:58

CISADMIN PRIVILEGE: Aug 15, 2004; optimized multichannel
campaigns to drive
demand and increase
brand engagement
across web, mobile,
and social touchpoints,
bitch!

OSI bean dip posted:

yessir

cool i'll probably use it as an excuse to begin a debauched weekend.

# ? Aug 9, 2014 02:00

Number19: May 14, 2003; HOCKEY OWNS
FUCK YEAH

we should go for drinks sometime bob arctor

# ? Aug 9, 2014 02:26

CISADMIN PRIVILEGE: Aug 15, 2004; optimized multichannel
campaigns to drive
demand and increase
brand engagement
across web, mobile,
and social touchpoints,
bitch!

Number19 posted:

we should go for drinks sometime bob arctor

are you going to make van city sec?

http://fourthplanet.ca/category/events.html

if so pm me your number

i'm not over there as much any more but I use whatever excuse I can to get off the island.

# ? Aug 9, 2014 02:29

Number19: May 14, 2003; HOCKEY OWNS
FUCK YEAH

I wasn't planning on it but there's no reason why I shouldn't. I have some siggraph thing on Wednesday but that's it

# ? Aug 9, 2014 02:36

Number19: May 14, 2003; HOCKEY OWNS
FUCK YEAH

bob arctor: pm sent

# ? Aug 9, 2014 04:01

coffeetable: Feb 5, 2006; TELL ME AGAIN HOW GREAT BRITAIN WOULD BE IF IT WAS RULED BY THE MERCILESS JACKBOOT OF PRINCE CHARLES

YES I DO TALK TO PLANTS ACTUALLY

░░░▒▒▓Jess R. ▓▒▒░░░ ‏@Jofo 17h
Oh my god. Intern was loving with his pineapple and this happened. Amazing.

I Hunt Pineapples @ihuntpineapples � 7h
Step one: take advantage of someone's brain fart of checking authentication in the footer after all the PHP runs

# ? Aug 9, 2014 15:43

Moist von Lipwig: Oct 28, 2006; by FactsAreUseless; Tortured By Flan

coffeetable posted:

░░░▒▒▓Jess R. ▓▒▒░░░ ‏@Jofo 17h
Oh my god. Intern was loving with his pineapple and this happened. Amazing.

I Hunt Pineapples @ihuntpineapples · 7h
Step one: take advantage of someone's brain fart of checking authentication in the footer after all the PHP runs

loving incredible....

# ? Aug 9, 2014 16:15

z0rlandi viSSer: Nov 5, 2013

graph posted:

why was the previous one closed

why does anything happen?

# ? Aug 9, 2014 16:17

teen bear: Feb 19, 2006

Number19 posted:

I wasn't planning on it but there's no reason why I shouldn't. I have some siggraph thing on Wednesday but that's it

i'll be at siggraph all week if anyone wants awkward beers

# ? Aug 9, 2014 16:24

kitten emergency: Jan 13, 2008; get meow this wack-ass crystal prison

coffeetable posted:

░░░▒▒▓Jess R. ▓▒▒░░░ ‏@Jofo 17h
Oh my god. Intern was loving with his pineapple and this happened. Amazing.

I Hunt Pineapples @ihuntpineapples � 7h
Step one: take advantage of someone's brain fart of checking authentication in the footer after all the PHP runs

lol

# ? Aug 9, 2014 16:24

spankmeister: Jun 15, 2008

coffeetable posted:

░░░▒▒▓Jess R. ▓▒▒░░░ ‏@Jofo 17h
Oh my god. Intern was loving with his pineapple and this happened. Amazing.

I Hunt Pineapples @ihuntpineapples · 7h
Step one: take advantage of someone's brain fart of checking authentication in the footer after all the PHP runs

# ? Aug 9, 2014 16:27

Perplx: Jun 26, 2004; Best viewed on Orgasma Plasma; Lipstick Apathy

i had to look up what a wifi pineapple was, i guess its a wifi penetration tool made by hak 5

it doesn't do anything you couldn't do with kali linux and a laptop

# ? Aug 9, 2014 16:41

jony ive aces: Jun 14, 2012; designer of the lomarf car; Buglord

coffeetable posted:

_^hak 5

# ? Aug 9, 2014 18:49

Lain Iwakura: Aug 5, 2004; The body exists only to verify one's own existence.; Taco Defender

all php devs are awful

# ? Aug 9, 2014 19:09

spankmeister: Jun 15, 2008

OSI bean dip posted:

all php devs are awful

tbc callout

# ? Aug 9, 2014 19:44

Farmer Crack-Ass: Jan 2, 2001; this is me posting irl

OSI bean dip posted:

https://plus.google.com/+ChrisBlasko/posts/GzCuzTyUXNq

best feature ever

quote:

That's right. I made a telemarketer unwittingly factory reset his phone which means he will be unable to make anymore calls until someone is able to reconfigure his phone and that will take at least an hour or longer if they can't do it right away!

haha wow what kind of dogshit IT department can't config a phone in less than an hour

# ? Aug 9, 2014 20:01

Forums Terrorist: Dec 8, 2011

quote:

That's right. I made a ~~telemarketer~~ call center drone unwittingly factory reset his phone which means he will ~~be unable to make anymore calls until someone is able to reconfigure his phone and that will take at least an hour or longer if they can't do it right away~~ be fired for damaging company property and possibly even be denied unemployment insurance!

# ? Aug 9, 2014 20:05

hobbesmaster: Jan 28, 2008

unplug phone. plug in phone. phone downloads config from server based on MAC. back to phone calls

should take 60s

# ? Aug 9, 2014 20:06

hobbesmaster: Jan 28, 2008

wait since he did a reset it should just download the config automatically so the call center drone will probably believe he actually was talking to it because he'll be back up quickly after the phone spins for a bit

hobbesmaster fucked around with this message at 20:14 on Aug 9, 2014

# ? Aug 9, 2014 20:08

Farmer Crack-Ass: Jan 2, 2001; this is me posting irl

depends on the environment. if the IT department sucks and didn't config the DHCP options to automatically tell phones what server to go to for configuration, it could just sit there and be all "he;lp i don't know who to talk to" until someone puts in the pbx IP.

but even if you had to do a full manual reconfig that should take way less than an hour, even if you had to walk someone else through it remotely.

# ? Aug 9, 2014 20:13

jony ive aces: Jun 14, 2012; designer of the lomarf car; Buglord

OSI bean dip posted:

all php devs are awful

same

# ? Aug 9, 2014 20:27

Qtotonibudinibudet: Nov 7, 2011; Omich poluyobok, skazhi ty narkoman? ya prosto tozhe gde to tam zhivu, mogli by vmeste uyobyvat' narkotiki

im amazed that anything related to voip ever works. it somehow seems to be even more of a clusterfuck than ipsec

# ? Aug 9, 2014 20:39

Westie: May 30, 2013; Baboon Simulator

OSI bean dip posted:

all php devs are awful

bastard bithc

# ? Aug 9, 2014 21:30

EMILY BLUNTS: Jan 1, 2005

Perplx posted:

i had to look up what a wifi pineapple was, i guess its a wifi penetration tool made by hak 5

it doesn't do anything you couldn't do with kali linux and a laptop

its self contained and installed on a routerthing and can be left lying around somewhere but i guess it's not super special apart from remote presence and being a pile of poo poo software wise

# ? Aug 9, 2014 22:35

EMILY BLUNTS: Jan 1, 2005

what if there's a pineapple hunter hunter?

# ? Aug 9, 2014 22:41

EMILY BLUNTS: Jan 1, 2005

# ? Aug 9, 2014 22:47

Lain Iwakura: Aug 5, 2004; The body exists only to verify one's own existence.; Taco Defender

that sort of reminds me of how you can get root access on a boxee box and various other devices. just append characters after a setting on-screen

# ? Aug 9, 2014 23:04

EAT THE EGGS RICOLA: May 29, 2008

That super owns

# ? Aug 9, 2014 23:27

DONT THREAD ON ME: Oct 1, 2002; by Nyc_Tattoo; Floss Finder

Perplx posted:

kali linux

http://vimeo.com/57742213

omg

what is this is it just a linux with a bunch of hacking tools preinstalled?

# ? Aug 10, 2014 00:59

EMILY BLUNTS: Jan 1, 2005

no, they are "security exploration and evaluation implements"

it used to be "backtrack"

i bet there's a lot of second thoughts people are having about getting pineapple like products now

# ? Aug 10, 2014 01:02