|
what the gently caress
|
# ? Jan 5, 2017 21:47 |
|
|
# ? May 11, 2024 16:40 |
|
If you want to play with this, I wrote a quick Golang tool to do so: https://github.com/ZedCode/autofill-pwn code:
|
# ? Jan 5, 2017 21:49 |
|
ahahahaha
|
# ? Jan 5, 2017 21:50 |
|
if you're scrolled above a full address form and half of it is off screen do you think autofill should fill the whole form or just the fields you can see???
|
# ? Jan 5, 2017 21:50 |
|
Lol
|
# ? Jan 5, 2017 21:54 |
|
Sharktopus posted:if you're scrolled above a full address form and half of it is off screen do you think autofill should fill the whole form or just the fields you can see??? I'm pretty sure it should only auto-fill fields you can see, otherwise you don't know what it's filling in. If you care about this kind of poo poo you're not using auto fill in the first loving place, though.
|
# ? Jan 5, 2017 21:54 |
|
does it autofill credit card information?
|
# ? Jan 5, 2017 21:55 |
|
pseudorandom name posted:does it autofill credit card information?
|
# ? Jan 5, 2017 21:57 |
|
Winkle-Daddy posted:maybe, but you'd have to have your browser set to auto fill that (please don't do this) safari does this in a good way, it is totally separate than auto filling name/email/whatever and also has Visa/Mastercard/Amex logos in the autofill drop down to make it super obvious that youre about to put your CC in itll be nice when more people start doing applepay through their site though
|
# ? Jan 5, 2017 22:00 |
|
is autofill per domain? I'm copying various login page form fields and serving it and it's not auto completing poo poo. e: maybe this could happen if someone doesn't turn off autocomplete on that form field? Winkle-Daddy fucked around with this message at 22:09 on Jan 5, 2017 |
# ? Jan 5, 2017 22:03 |
|
not in chrome it isn't
|
# ? Jan 5, 2017 22:04 |
|
so the way to fix this would be making autofill a two step process where it displays a dialog box asking if you want to give this list of personal facts to blah.com
|
# ? Jan 5, 2017 22:05 |
|
I don't see the auto-fill behavior described in Chromium. When I test it, I have to click into each form field to see a list of options. I don't seem to have a way to auto fill the whole form? maybe someone else can do something more interesting with my code.
|
# ? Jan 5, 2017 22:16 |
|
Chrome will auto fill CC#s but you have to provide the CVN in a modal outside of page at least for cards I have in Google's system
|
# ? Jan 5, 2017 22:40 |
|
https://twitter.com/zackwhittaker/status/817127114969403393 geek squad was literally the Stasi and used data recovery tools to look for poo poo on your hard drive that would earn them FBI bounties
|
# ? Jan 5, 2017 23:09 |
|
all bets are off with physical access
|
# ? Jan 5, 2017 23:31 |
|
Luigi Thirty posted:https://twitter.com/zackwhittaker/status/817127114969403393 if you give your computer, which contains evidence of you committing crimes, to someone else, you are a moron
|
# ? Jan 6, 2017 00:13 |
|
OSI bean dip posted:all bets are off with physical access that was kind of what made mr. robot good and sneakers
|
# ? Jan 6, 2017 00:15 |
|
flakeloaf posted:if you give your computer, to geeksquad, you are a moron
|
# ? Jan 6, 2017 00:15 |
|
flakeloaf posted:if you give your computer, which contains evidence of you committing crimes, to someone else, you are a moron Fortunately the 4th amendment isn't means tested to only apply to non-morons.
|
# ? Jan 6, 2017 00:47 |
|
chrome's stored credit card stuff is actually super helpful when you're slamming through a buttload of test orders on your bespoke ecommerce system. and yeah, in my experience you still need to manually enter the cvv i do wonder how many regular people use chrome cc autofill
|
# ? Jan 6, 2017 02:23 |
|
chrome cc autofill shows the card logo when filling a card , and its separate from the name/address
|
# ? Jan 6, 2017 02:27 |
|
pr0zac posted:What are you up to currently and why wouldn't you wanna move? secops can be fun, get to play with a bunch of cool security tools im doing mainly infra ops stuff at the moment, pretty much everything server-side from hypervisor up to software but for the last year i've been heading up an office 365 project. i already do a fuckton of security stuff and am the defacto security liaison of sorts for my team. i guess i'm worried about being pigeonholed should i move into secops proper. then again at the same time i can prolly affect change in practice better from there because things at the moment are very....relaxed. guess i need to think on it.
|
# ? Jan 6, 2017 02:34 |
|
ate poo poo on live tv posted:Fortunately the 4th amendment isn't means tested to only apply to non-morons. i agree there's a difference between a guy searching your drive because he's bored and a guy searching your drive cause his fbi handlers told him to, cause one's just poo poo luck and the other's a giant problem lol who am i kidding of course they were agent police
|
# ? Jan 6, 2017 02:37 |
Trabisnikof posted:
|
|
# ? Jan 6, 2017 02:40 |
|
So water dispensers, huh https://twitter.com/find_evil/status/816846566799470593?s=01
|
# ? Jan 6, 2017 02:42 |
negromancer posted:So water dispensers, huh I'm the embedded system running standard Windows 7
|
|
# ? Jan 6, 2017 02:45 |
|
lol if you use auto-form in any way
|
# ? Jan 6, 2017 02:45 |
|
hmmm?
|
# ? Jan 6, 2017 02:57 |
|
Wiggly Wayne DDS posted:whoever was complaining about signal's egypt approach earlier: That was me, and I'm gonna stand by that with skill its not impossible to catch using things like timing and sizes and such signals, I worked with people who built tools for this kind of stuff (and sold them to lovely human being ) and I hosed a lot of lovely tor stealth projects that tried to mask as other things. Thankfully Egypt blows and hasn't blown the money on people who can
|
# ? Jan 6, 2017 03:12 |
|
Segmentation Fault posted:I'm the embedded system running standard Windows 7 oh no, its worse
|
# ? Jan 6, 2017 03:13 |
|
a true embedded system would be running linux with a bsp not updated since 2004
|
# ? Jan 6, 2017 03:13 |
|
https://twitter.com/GossiTheDog/status/817089856316784643 lol
|
# ? Jan 6, 2017 03:15 |
|
hobbesmaster posted:a true embedded system would be running linux with a bsp not updated since 2004 yeah windows is probably safer out of the box than a lot of the Linux distros they should probably make the update spinner brandable tho
|
# ? Jan 6, 2017 03:31 |
|
why wouldn't you just download the official iso. did you know? if you don't activate windows 10, a few features are locked out but it mostly works?
|
# ? Jan 6, 2017 03:33 |
|
I'm a founding member of my company's new security team. A week ago, I was a hobbyist with an OSCP certification. We're starting on risk assessment, prioritization, and all that, but I'd love any links y'all might have (or books to read) that'll help us out.
|
# ? Jan 6, 2017 03:51 |
|
hackbunny posted:why wouldn't you just download the official iso. did you know? if you don't activate windows 10, a few features are locked out but it mostly works? the torrent is probably advertised as activation cracked
|
# ? Jan 6, 2017 03:52 |
still getting mileage out of the cloud to butt extension hackbunny posted:why wouldn't you just download the official iso. did you know? if you don't activate windows 10, a few features are locked out but it mostly works? a lot of people don't know that microsoft hands out the install media no questions asked
|
|
# ? Jan 6, 2017 03:59 |
|
hackbunny posted:why wouldn't you just download the official iso. did you know? if you don't activate windows 10, a few features are locked out but it mostly works? a lot of people discover torrents and immediately forget that there's any other way to acquire software.
|
# ? Jan 6, 2017 04:10 |
|
|
# ? May 11, 2024 16:40 |
|
wasn't there a brief period of time where you straight up couldn't download the windows ISO from Microsoft?
|
# ? Jan 6, 2017 04:22 |