Security Fuckup Megathread - v7.2 "BoringSFM"

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v7.2 "BoringSFM"

flakeloaf: Feb 26, 2003; Still better than android clock

anthonypants posted:

if they are successfully privatized maybe stricter controls will be implemented

if i said the name deepak chopra to you, you would probably think of a man who would do a better job running canada post than the one who currently does

why does my new modem not allow spaces in ssids or wpa2 passwords

# ¿ Jul 12, 2014 00:42

Adbot: ADBOT LOVES YOU

# ¿ Apr 28, 2024 21:15

flakeloaf: Feb 26, 2003; Still better than android clock

Bloody posted:

current security fuckup status:

woke up this morning and my desktop was browsed to a totally not legit website that wanted to update my java

...what

gently caress

i have to raze everything dont i

we have a subforum for this

(it's qcs)

update java ads are just part of the SA experience

# ¿ Jul 14, 2014 14:15

flakeloaf: Feb 26, 2003; Still better than android clock

Bloody posted:

i'd put money on that actually

# ¿ Jul 14, 2014 14:50

flakeloaf: Feb 26, 2003; Still better than android clock

Bloody posted:

ksp

# ¿ Jul 14, 2014 14:57

flakeloaf: Feb 26, 2003; Still better than android clock

more like GRCHQ

# ¿ Jul 14, 2014 21:09

flakeloaf: Feb 26, 2003; Still better than android clock

Heresiarch posted:

False Intelligence Spreading Heuristic MECHanism

# ¿ Jul 15, 2014 00:34

flakeloaf: Feb 26, 2003; Still better than android clock

reidscones posted:

we have no sensitive operations to monitor

gently caress it just point it at second life we'll find a use for it someday

# ¿ Jul 15, 2014 00:48

flakeloaf: Feb 26, 2003; Still better than android clock

infernal machines posted:

everything has to be straight in the colon

# ¿ Jul 15, 2014 01:48

flakeloaf: Feb 26, 2003; Still better than android clock

quote:

Those who pay �donations� of approximately $1 per record (paid in Bitcoin) can not only get their records expunged, but that price also buys insurance against having their information indexed by the search engine in the event it shows up in future database leaks.

and this in no way indicates an account valuable enough for someone to want to hide

definitely not something someone would pay for multiple times, nope, totally not ransomable don't bother okay seriously guys

# ¿ Jul 18, 2014 20:01

flakeloaf: Feb 26, 2003; Still better than android clock

quote:

Zdziarski said the services aren't easy for anyone to abuse, making it unlikely that hackers could exploit them on a wide scale. Still, he said the functions are within easy reach of . . . any computer that has ever synced with an iPhone or with any alarm clock or other peripheral

So they are easy to reach.

# ¿ Jul 21, 2014 18:54

flakeloaf: Feb 26, 2003; Still better than android clock

quote:

The miniLock application configures the scrypt library to use the string
�miniLockScrypt...� as a salt. The salts are generally used to �enlarge" passwords and,
like in this particular situation, are usually not considered secret. They do however have
to be unique to fulfil their purpose. If a constant value is used as salt, it basically has the same effect as if there was no salt at all.

The issue was reported during the pentest and ultimately marked as non-
actionable following the discussion with the author

can't fix it man, gee what do you think i wrote this thing or something?

# ¿ Jul 22, 2014 16:57

flakeloaf: Feb 26, 2003; Still better than android clock

"is_jailbroken": "YES"

# ¿ Jul 22, 2014 19:50

flakeloaf: Feb 26, 2003; Still better than android clock

meanwhile we have the head of the android security team saying there's no reason for another layer of security overtop of what they've already put in place for us

so clearly someone is not being completely honest with us the consumer

# ¿ Jul 23, 2014 05:30

flakeloaf: Feb 26, 2003; Still better than android clock

Shinku ABOOKEN posted:

what amazes me about the new wave of roll your own crypto is that no one bothers to write the math on paper/latex

they just plug algos into each other as if they were legos

they could be writing f^-1(f(x)) and they have no idea

encryption legorithm

# ¿ Jul 24, 2014 14:06

flakeloaf: Feb 26, 2003; Still better than android clock

Rooney McNibnug posted:

mom won't buy me the useful bricks library so i have to make my own

# ¿ Jul 24, 2014 16:48

flakeloaf: Feb 26, 2003; Still better than android clock

BeOSPOS posted:

ugh this encryption LEGO piece only comes in a 4x4 square and doesn't fit my bitchin' cat spaceship. I know, I'll just use a few 1x3 home brew pieces, put em here... and here and it'll work just fine

# ¿ Jul 24, 2014 19:02

flakeloaf: Feb 26, 2003; Still better than android clock

well drat i was really looking forward to scoring some sweet pogs

# ¿ Jul 30, 2014 17:04

flakeloaf: Feb 26, 2003; Still better than android clock

ftk is a good thing if you don't mind waiting eons for it to build its search index

encase is awesome if you're the kind of person who doesn't like having to click alt-f4 to make an application close, also enscripts can do some pretty impressive stuff with a little cjing

# ¿ Aug 7, 2014 13:44

Adbot: ADBOT LOVES YOU

# ¿ Apr 28, 2024 21:15

flakeloaf: Feb 26, 2003; Still better than android clock

Varkk posted:

Cross posting from NZ politics thread

http://www.joshbrodie.co.nz/2014/08/08/conservative-party-web-security.html

I am having a very hard time understanding how you can get a website so staggeringly wrong.

well you see imgur

thanks imgurshack

# ¿ Aug 8, 2014 14:10

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v7.2 "BoringSFM"