Security Fuckup Megathread - v16.2 - /home/land/security/theatre

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v16.2 - /home/land/security/theatre

«‹›2 »

Phone: Jul 30, 2005; 親子丼をほしい。

we did it, we solved security

# ¿ May 2, 2018 19:28

Adbot: ADBOT LOVES YOU

# ¿ May 17, 2024 00:43

Phone: Jul 30, 2005; 親子丼をほしい。

lol if you aren't into ~~trains~~ complicated electromechanical systems

# ¿ May 8, 2018 02:25

Phone: Jul 30, 2005; 親子丼をほしい。

mrmcd posted:

Lol technology was a mistake.

ai will fix it

# ¿ May 11, 2018 00:12

Phone: Jul 30, 2005; 親子丼をほしい。

the forbidden yospos technique

# ¿ May 15, 2018 02:02

Phone: Jul 30, 2005; 親子丼をほしい。

Jose Valasquez posted:

no my mother uses a c++ version, cobol can't handle the kind of throughput she gets

doubt this, you're not going to get the transactional throughput your mom needs on something that isn't big iron

# ¿ May 16, 2018 18:08

Phone: Jul 30, 2005; 親子丼をほしい。

Powerful Two-Hander posted:

I will always read DTMF as "Dial Tone Mother Fucker"

don't doxx my alt

# ¿ May 23, 2018 04:04

Phone: Jul 30, 2005; 親子丼をほしい。

https://twitter.com/mutablejoe/status/998241891459194887

# ¿ May 23, 2018 20:51

Phone: Jul 30, 2005; 親子丼をほしい。

BangersInMyKnickers posted:

Has anyone cataloged LastPass's fuckups with their browser plugin in a single thing? The CVE sites only have a single DoS issue listed from last year and I know there was at least a half dozen trivial fuckups on their part that allowed disclosure of the decrypted store. We're in the process of implementing an internal credential management platform but it isn't ready yet and we need to steer people towards something else to bridge the gap. If I don't have good ammo against LastPass they're going to go there instead of 1Password. Hell, I'd rather them sync a shared OneDrive with a KeepAss db.

type into google "taviso shower"

# ¿ May 25, 2018 03:25

Phone: Jul 30, 2005; 親子丼をほしい。

is nordvpn any good?

i think i remember like 6-9 months ago that it failed some super basic "signs of a good vpn" checkbox stuff, but i seriously can't remember

# ¿ May 26, 2018 22:19

Phone: Jul 30, 2005; 親子丼をほしい。

what's the way to go? vps + rolling your own?

# ¿ May 27, 2018 07:47

Phone: Jul 30, 2005; 親子丼をほしい。

yeah, should have led off with that :v:

the bare minimum of putting up a public wifi hurdle, getting in on that sweet sweet ad free eu experience (for all of 2 weeks lol), and maybe getting around youtube throttling on a visitor sim card

# ¿ May 27, 2018 19:37

Phone: Jul 30, 2005; 親子丼をほしい。

https://giant.gfycat.com/BlandTenderDwarfmongoose.webm

# ¿ May 28, 2018 22:13

Phone: Jul 30, 2005; 親子丼をほしい。

iirc the way the current ios pin enumeration works is by interrupting the 10x and you're out policy by killing the power to reset the counter. this is separate from law enforcement agencies having magic boxes that they plug your phone into and it basically does an entire dump of the phone including stuff that isn't accessible in user space.

1 hour USB timer throws a wrench in both, i think

# ¿ Jun 4, 2018 23:12

Phone: Jul 30, 2005; 親子丼をほしい。

Lysidas posted:

no, it is not good

what would be good is being able to wipe it and restore ios from itunes with all of your personal data gone, and not have a perfectly functional piece of electronics turn into a several hundred dollar paperweight

one time ipad

# ¿ Jun 4, 2018 23:44

Phone: Jul 30, 2005; 親子丼をほしい。

all of that is null and void if the 2nd party is like "oh hello federal agents, yes here is my phone. the passcode is hunter2", which seems to be the case

# ¿ Jun 5, 2018 04:30

Phone: Jul 30, 2005; 親子丼をほしい。

https://twitter.com/lifewinning/status/1006546425323376642?s=20

# ¿ Jun 12, 2018 16:27

Phone: Jul 30, 2005; 親子丼をほしい。

ate all the Oreos posted:

i mean it's not even a normal screw it's one of those magical torx bits that only the police are allowed to have probably

the only secure fastener are those screws they use on bathroom dividers

and nintendo security bits

# ¿ Jun 17, 2018 23:25

Phone: Jul 30, 2005; 親子丼をほしい。

Optimus_Rhyme posted:

The US also has this new mobile passport thing and its amazing. Same deal, take a picture, scan your passport, fill out the questions. Scan a barcode when you get in, easy peasy.

global entry does this

it works really well until someone decides to declare candy and booze as "food items" and you have to go to the xray and through customs anyways

# ¿ Jun 22, 2018 03:37

Phone: Jul 30, 2005; 親子丼をほしい。

this is a self own in a number of ways...

the servicer of the plus loan in my dad's name offered a .25% reduction in interest for signing up for autopay. in order to set up autopay, you have to fill out a paper form, include a canceled check, and snail mail it to their po box.

nope.

# ¿ Jun 27, 2018 16:41

Phone: Jul 30, 2005; 親子丼をほしい。

i meant voided. i write maybe 3 checks a year. sorry, i meant cheques.

i already had my bank account info on the loan providers' portal; however, to use the same exact bank account for autopay/auto debit, it required a paper form and a voided check.

my only other reference is my other loan servicer allowed for auto pay on the website.

# ¿ Jun 27, 2018 17:59

Phone: Jul 30, 2005; 親子丼をほしい。

probably 50% of the time cards are still be used via magstripe. the only reason why bigger box stores are chip is because they had headlines in the news over a few years of "$STORE HAS 44 MILLION CUSTOMER RECORDS STOLEN"

# ¿ Jun 27, 2018 18:11

Phone: Jul 30, 2005; 親子丼をほしい。

that was 5 years ago and i submitted a payoff for monday

oh no, i lost out on 200$ amortized over 5 years

# ¿ Jun 27, 2018 18:13

Phone: Jul 30, 2005; 親子丼をほしい。

i store all of my passwords in latex

# ¿ Jun 29, 2018 19:22

Phone: Jul 30, 2005; 親子丼をほしい。

a 20 piece mcnugget box: "im in"

# ¿ Jul 11, 2018 17:15

Phone: Jul 30, 2005; 親子丼をほしい。

did powershell 3 fix the whole "you have to give yourself permaroot in order to execute stuff" garbage?

# ¿ Jul 13, 2018 02:57

Phone: Jul 30, 2005; 親子丼をほしい。

Shaggar posted:

no because it was never a thing

i haven't looked at the ~~man~~ Get-Help Verb-Noun in ages, but there's no way to temporarily run things as admin in powershell because the execution policy by default is set to restricted right? you can't do whatever the equivalent of "sudo foo.ps1" in powershell because its locked down?

# ¿ Jul 13, 2018 06:15

Phone: Jul 30, 2005; 親子丼をほしい。

omg the dprk has mastered invisible circuits, the cunning bastards

# ¿ Jul 13, 2018 16:28

Phone: Jul 30, 2005; 親子丼をほしい。

but wrong korea

# ¿ Jul 13, 2018 18:45

Phone: Jul 30, 2005; 親子丼をほしい。

that classic adage about how if you pay for a product you're still the product

# ¿ Jul 17, 2018 18:46

Phone: Jul 30, 2005; 親子丼をほしい。

flakeloaf posted:

if vizio tvs are farming pixels to see which chuck lorre schlock is going into your brain then there's definitely money in the knowledge of just how phat your beats are

this lovely cyberpunk dystopia is like playing russian roulette but you can choose between these 3 semi automatic pistols

# ¿ Jul 24, 2018 18:35

Phone: Jul 30, 2005; 親子丼をほしい。

there was a big atm heist in japan last year i think...

it was 2 years ago: https://arstechnica.com/information-technology/2016/05/japan-atm-heist-reportedly-involved-100-people-who-stole-12-7-million/

quote:

Japan ATM heist reportedly involved 100 people who stole $12.7 million
1,400 locations were hit using fraudulent South African credit cards.
MEGAN GEUSS - 5/23/2016, 2:53 PM

On Sunday evening, Japanese newspapers reported that an ATM heist involving around 1,400 machines in convenience stores resulted in the loss of 1.4 billion yen ($12.7 million).

The theft took place on May 15, a Sunday, between the hours of 5am and 8am. ATMs were targeted across Tokyo and 16 other prefectures in the country. Police said they believe up to 100 people were involved in the heist, according to the Kyodo News Agency. The thieves apparently went to ATMs like those found in 7-11s across Japan and swiped counterfeit South African credit cards, created using information from cards issued by South Africa's Standard Bank.
At each of the approximately 1,400 ATMs that were struck, the culprit withdrew 100,000 yen (about $900), which is the maximum withdrawal permitted on the machines.

According to Reuters Africa, Standard Bank is estimating its total losses at 300 million rand ($19 million) �prior to any potential recoveries that may serve to reduce the loss.� The bank said none of its customers will suffer the losses from the international fraud scheme.

By using foreign cards to withdraw cash and by making the withdrawals early Sunday morning (5am on Sunday in Tokyo is 10pm Saturday night in Johannesburg, South Africa), the criminals avoided immediate detection. The Guardian reports that "members of the gang may no longer be in Japan.�

The heist comes as credit card networks like Visa and MasterCard are trying to move world markets toward uniform acceptance of chip-based cards, which are considered less vulnerable to fraud than magnetic stripe cards. While card networks started moving Japanese markets toward chip-and-pin in 2006 and domestic South African markets to chip-and-pin in 2005 (PDF), ATMs in Japan have been an outlier. Visa and Mastercard, the companies supporting the shift to the new card standard, have given ATM owners in Japan until October 1, 2017 to support chip-and-pin cards or risk liability for fraud.

The BBC reports that no one has yet been arrested in the matter, but Japan News says that �police intend to identify the suspects by analyzing the images recorded by security cameras.�

# ¿ Jul 24, 2018 19:23

Phone: Jul 30, 2005; 親子丼をほしい。

Chris Knight posted:

ol' bobby tables at it again

https://twitter.com/dmatech2/status/1024037742907416576

this area is rife with nerd poo poo like this, a lot of s/dev/nul type stuff

# ¿ Jul 31, 2018 03:08

Phone: Jul 30, 2005; 親子丼をほしい。

i had a windows shell experience once

now im hooked on verb-nouns

# ¿ Jul 31, 2018 17:50

Phone: Jul 30, 2005; 親子丼をほしい。

a lot of power generation and distribution systems are very elaborate and dangerous rube goldberg machines

# ¿ Aug 4, 2018 15:57

Phone: Jul 30, 2005; 親子丼をほしい。

i hadn't thought about that particular vector of attack wrt hotdesking lol

# ¿ Aug 4, 2018 17:00

Phone: Jul 30, 2005; 親子丼をほしい。

i unsuccessfully tried to explain why voting on a blockchain is Real Dumb And Bad a few months back to someone, like technicalities aside, they fundamentally didn't understand the importance and mechanism of secret ballots

# ¿ Aug 7, 2018 02:33

Phone: Jul 30, 2005; 親子丼をほしい。

in NC people are lining up at the dmv at 4:30am to get their driver's license now with realid

# ¿ Aug 8, 2018 16:45

Phone: Jul 30, 2005; 親子丼をほしい。

mandatory binding arbitration! woo!~~

# ¿ Aug 16, 2018 22:52

Phone: Jul 30, 2005; 親子丼をほしい。

Shinku ABOOKEN posted:

are there any details on the apple hack?

... i'll tell you what i know if you tell me what you know

# ¿ Aug 19, 2018 03:21

Adbot: ADBOT LOVES YOU

# ¿ May 17, 2024 00:43

Phone: Jul 30, 2005; 親子丼をほしい。

i heard it was kim dotcom

# ¿ Aug 19, 2018 06:00

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v16.2 - /home/land/security/theatre

«‹›2 »