Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
Potato Salad
Oct 23, 2014

nobody cares


Subjunctive posted:

I built a custom string type that couldn't easily be passed to logging functions for things like message text and passwords. if there was an implicit conversion, they would convert to things like "[[message text: 251 chars]]" or "[[password]]" and log a warning about misuse. it took about two days including converting a relatively large codebase. I don't know why people don't use the type system more for stuff like this

....huh.

Yeah I'm going to take this.

Adbot
ADBOT LOVES YOU

Potato Salad
Oct 23, 2014

nobody cares


akadajet posted:

How would blocking the EU help with GDPR?

Potato Salad
Oct 23, 2014

nobody cares


Mechanical switching?

Man, back in your day, y'all probably needed to get one of them warrants to violate a citizen's reasonable expectation of privacy :bahgawd:

Potato Salad
Oct 23, 2014

nobody cares


(4) literally anything js can do to gently caress you

Potato Salad
Oct 23, 2014

nobody cares


Dear Intel:

Hire technical writers.

-Thanks,
Humanity

Potato Salad
Oct 23, 2014

nobody cares


Lutha Mahtin posted:

it can't be that bad, right?


oh :stare:

BUFFALO.

Potato Salad
Oct 23, 2014

nobody cares


Flip side of the coin, SED/TPM models are a bitch to service when the lovely 128GB drive dies.

Potato Salad
Oct 23, 2014

nobody cares


Salt Fish posted:

What programmer is working on this stuff? Who are these people??

Have you heard of "social media?" I hear you can make a buck or two creating profiles on people and selling the results.

Potato Salad
Oct 23, 2014

nobody cares


Zil posted:

So when is the facial scan to determine penis size app coming out?

Looks like it already identifies Caucasians

Potato Salad
Oct 23, 2014

nobody cares


wait email wasn't designed with security in mind??

Potato Salad
Oct 23, 2014

nobody cares


Bunni-kat posted:

I really want to send something just addressed to "That one bastard, Seattle, Washington."

I think Jeff's address is publicly known.

Potato Salad
Oct 23, 2014

nobody cares


mrmcd posted:

Also: https://sites.google.com/site/testsitehacking/-36k-google-app-engine-rce

18 year old college student punches App Engine, $36k falls out.

I'm the $35k payout with a $1,337 bonus.

Potato Salad
Oct 23, 2014

nobody cares



It's okay, I'm using [VPN service lacking per-customer out of band key exchange]

Potato Salad
Oct 23, 2014

nobody cares


Like, if you're living in DC and have access to even middling funds and support from an XYZ-istani intelligence agency, how could you resist loving stinging the everliving poo poo out of the mobile device of POTUS and his staff

His phone is a playground for script kiddies with cheap wifi APs and nation states with stingers alike

Potato Salad
Oct 23, 2014

nobody cares


Lutha Mahtin posted:

the threat of going to prison forever, OP

lol selling out or beating your wife is how you get a loving appointment these days

Potato Salad
Oct 23, 2014

nobody cares


gdpr is really bringing the dipshits out of the woodwork, goddamn

Potato Salad
Oct 23, 2014

nobody cares


To my knowledge, nordvpn doesn't do per-device, out-of-band key exchange

Potato Salad
Oct 23, 2014

nobody cares


iPad burner series:

IPad
IIPad
IIIPad
IVPad
VPad...

Potato Salad
Oct 23, 2014

nobody cares


evil_bunnY posted:

What do you use for iOS device management?

^^^ this is the core question right here

Potato Salad
Oct 23, 2014

nobody cares


Feisty-Cadaver posted:

a while ago I noticed flash player kept reinstalling itself on my work laptop. I'd uninstall, it'd come back, uninstall, rinse and repeat.

I eventually asked IT about it and their answer was "we wanna make sure it's up to date with the latest patches!"

it doesn't have to be up to date if its not loving installed you fucks

There are so. many. common ways to provide opt-out to end users that I'm legit getting hot under the collar.

Potato Salad
Oct 23, 2014

nobody cares


r/dontgotoreddit

Potato Salad
Oct 23, 2014

nobody cares


CRIP EATIN BREAD posted:

the other big problem with FIPS 140-2 (besides it being bad) is that vendors need to pay an exorbitant amount bribe to fast track through certification and become nearly impossible to compete with in fed/DoD rfps

openssl with heartbleed, ocsp vulns, etc was "fips 140-2 certified"

it still is :psyduck:

Potato Salad
Oct 23, 2014

nobody cares


Plorkyeran posted:

virtual public network

Potato Salad
Oct 23, 2014

nobody cares


Just don't let the keyboard update :haw:

Potato Salad
Oct 23, 2014

nobody cares


Carbon dioxide posted:

Hello goatse, my old friend
I seem to have clicked on you again
Because an anus somewhat distending
left its horror, now I'm weeping
And the vision that was planted in my brain
Still remains
As I scream, only hearing the sound of silence

Potato Salad
Oct 23, 2014

nobody cares


Jabor posted:

has there been any stuff that "exfils" data to a location that they are totally unaffiliated with, then picks it up via a passive mitm to try and dodge attribution?

This is how nation-state actors do.

Potato Salad
Oct 23, 2014

nobody cares


Whups.

Potato Salad
Oct 23, 2014

nobody cares


wrong thread

Potato Salad
Oct 23, 2014

nobody cares



I'm the instance of cylance I don't control, I guess

some of these check boxes are wrong, too

Potato Salad
Oct 23, 2014

nobody cares


Munkeymon posted:

I'd guess most endpoint protection isn't logging keystrokes but I think the point is that you can't know for sure?

It stealth installs when I tell it to, the user's consent is in my client's policy library

Install works fine, uninstall works fine. Maybe it helps to be managing mostly standardized systems with good mdm

Haven't seen it phoning anywhere but anticipated addresses, though admissibly I'm not watching for warbalooning/wardriving/warapplewatching

Potato Salad fucked around with this message at 16:33 on Aug 15, 2018

Potato Salad
Oct 23, 2014

nobody cares


No, seriously, roll your own.

Potato Salad
Oct 23, 2014

nobody cares


There are virtual network services out there. Private, eeeeeeeeeehhhhhhhhhhhh


If you're concerned about surveillance, roll your own. However, Tom the perv trying to pcap other people at Local Coffee Shoppe may be stopped even by something as bad as nordvpn or pia.

Try finding one that lets you generate unique device keys

Potato Salad fucked around with this message at 14:17 on Aug 19, 2018

Potato Salad
Oct 23, 2014

nobody cares


Potato Salad
Oct 23, 2014

nobody cares


Post your favorite inefficient compression encryption cypher

Potato Salad
Oct 23, 2014

nobody cares


ASH-M1-1024K

Potato Salad
Oct 23, 2014

nobody cares


BangersInMyKnickers posted:

2DES because I love to work it from both ends

What the hell is...wow okay

Potato Salad
Oct 23, 2014

nobody cares


Has Microsoft done enough to join the party yet

Potato Salad
Oct 23, 2014

nobody cares


Wiggly Wayne DDS posted:

yeah that's been kicking around but the story is funnier

https://twitter.com/GossiTheDog/status/1032627867845357568

I want to see the "breaking & entering a house" metaphors for this

Potato Salad
Oct 23, 2014

nobody cares


^ Hoooooooooooooooooooooooo boy.

Adbot
ADBOT LOVES YOU

Potato Salad
Oct 23, 2014

nobody cares


BangersInMyKnickers posted:

lol some lovely config on our hardware firewalls has resulted in every single successfully fin/ack getting blasted with a forged rst/ack from the firewall and this has been going on for years and its only getting fixed now because I made a big enough stink about it

I sometimes wonder if we occupy the same brain, just alternating days

Best is the colloquial name created for the issue, which was almost as bad as "etherblast"

Potato Salad fucked around with this message at 18:26 on Sep 6, 2018

  • Locked thread