Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
Is this known as the OPSEC thread or is it the SECFUCK thread, or are those the same, or how many are there across the forums?

Adbot
ADBOT LOVES YOU

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
This is page 69 of the buttflare thread!??

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
Bring the kids to YOSPOS, they'll catch on to all this stuff and be better than us

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
https://www.forbes.com/sites/gordonkelly/2019/08/10/apple-iphone-ipad-security-warning-ios-12-ios13-iphone-xs-max-xr/amp/

Warning Issued For Apple's 1.4 Billion iPad And iPhone Users

Aug 10, 2019,7:40 pm

Every iPhone released since 2011 is potentially vulnerable to having their data and passwords stolen

Apple is having a bad week. Just days after Face ID was hacked and the company’s “user-hostile” iPhone battery practices were exposed, an extraordinary story of Apple neglect has resulted in a warning every iPhone and iPad user needs to know about.

Picked up by AppleInsider, security firm Check Point has revealed it has found a way to hack every iPhone and iPad running iOS 8 right up to betas of iOS 13. This spread covers eight years of devices (iOS 8 supports the 2011 iPhone 4S) and, with Tim Cook stating there are 1.4BN active iOS devices around the world, this is worrying news for the owners of pretty much all of them.

What Check Point discovered is that the Contacts app built into iOS can be exploited using the industry-standard SQLite database so that any search of Contacts can trick the device into running malicious code capable of stealing user data and passwords.

............

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
The data being leaked is not contacts, it says it's passwords

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
Richard loving Branson

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

Deep Dish Fuckfest posted:

i know enough to stay away from that whole dumpster fire. all i'm saying is i know how to google "how to store passwords" which apparently puts me above a whole lot of people yet i'm stuck figuring out how best to shove vertices and bump maps up some gpu's rear end for less than i'd like

hi graphics buddy, is your place hiring

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

Truga posted:

yeah exactly. i use email to sign up to web bullshit and online vidya games, anything that matters has to be done through a real service anyway

what about account recovery for most things

losing access to your e-mail account is a pretty big deal for that reason

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

Ur Getting Fatter posted:

@jack’s account got hacked

lol that it was to post racist stuff what a waste of effort

Why not get trump's account instead and announce the nukes had been launched in a scary credible sounding way

I mean, they shouldn't do that, but to think that we were *this* close from the entire earth getting surprise nuked today, wiping out all life without any of the fair warning people would expect to get that something was going down, and how nobody really is going to do anything about it now because it just won't matter in the busy news cycle, is amazing.

Instead the hackers just wanted to post like @jack for a minute and nothing else

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

Powerful Two-Hander posted:

oh got it I sort of confused your post and another about pin as verification

I absolutely got asked to say my PIN over the phone by my (major) american bank. I had called them to ask why I got an alert that my account had a new mobile phone number. They asked for PIN to quickly verify my identity. It was definitely them that I was talking to, since I called their main number, and they insisted that it was a common verification practice for over-the-phone stuff. Finally they explained that customers got a spurious mobile alert recently when installing the new app version, one that upgraded you over to a new database they had just transitioned to.

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
Maybe to take a peek at what their competitors are coding

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

ewiley posted:

Yeah but odds are the phisher won't bother because that would require work and quality control which criminals are not known for. Phishing doesn't have to be good, it just has to work on a small, dumb population.

*flashing caption that says "This is what future phishing victims actually believe"*

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
calling them forward is the best way to shame them, which is the whole point

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

Soricidus posted:

isn’t brave the one that injects tipping links into pages without the alleged recipient’s knowledge or consent, and also doesn’t give them the tips? or am I misremembering

Yeah that's the one. They steal donations from non-consenting internet personalities

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
Only American characters can be common

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
From a while back but

The Fool posted:

My bank has a password specifically for over-the-phone authentication that is totally separate from my online-banking password or my ATM PIN.

USBank at least doesn't do this, and immediately asks you to type in your PIN when you call their fraud hotline. Interesting, and a bit unnerving when you're not sure if you've called the right number.

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
Was the VP really trying to be proactive as they say, or were they trying to create a quick central way to destroy evidence?

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

Cocoa Crispies posted:

defending bad password practices on infosec twitter usually results in crowdsourced pentests, yes

like this?

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
here's a SECfuck: these forums

quote:

(9:40 PM) Radium: poo poo, ozma banned me for posting while drunk
(9:40 PM) Radium: can you unban me
(9:40 PM) Lowtax: what happened?
(9:41 PM) Radium: I was asking for some porn torregnt sites but I was drunk... more like DKRUNK am i rite
(9:42 PM) Lowtax: no you are not right

quote:

(9:14 AM) Lowtax: what changed with the forums yesterday?
(9:14 AM) Radium: a bunch of stuff, why what happened oh god
(9:16 AM) Lowtax: nothing, I just had no idea anything was going to happen until I read the notice on the forums, so everybody was asking me what was going on (including Frags), and I had no idea
(9:16 AM) Radium: I told you I was going to be working on the database
(9:17 AM) Lowtax: when?
(9:17 AM) Radium: not sure, I told you I was going to be putting stuff in and had to restart but the downtime wouldnt be long
(9:17 AM) Radium: whats the problem, I dont get it
(9:18 AM) Lowtax: there's no problem, I was just saying people were asking me what was going on and I had no idea
(9:18 AM) Radium: there was a message right at the top of the forums that explained I was gonna be making database tweaks to improve performance, haha
(9:19 AM) Lowtax: yes I read the message, the people read the message because that's what they were asking me about
(9:19 AM) Lowtax: nevermind, forget it
(9:19 AM) Radium: I dont understand

Ariong posted:


quote:

(9:28:58 AM) 19629905: so do you think the stuff you're working on will be done this month?
(10:57:20 AM) Radium: handwich
The icing on this is that Radium took an hour and a half to deliver that response.

quote:

:10:41 PM) Radium: no, its just very time consuming because I'm so cautious of exploits or even just simple bugs... things were so dramatic when I started all this, I guess I started out setting the bar way too high
(3:11:54 PM) Radium: after you left, nobody really defended anything me or anyone else was doing, so I was just trying to avoid dragging the site further through the mud with more buggy poo poo

quote:

(9:09 AM) Lowtax: can you keep Helldump2000 threads from appearing on the front page popular threads
(9:23 AM) Radium: yase
(9:23 AM) Lowtax: thanks
(10:06 AM) Lowtax: how goes coding
(10:07 AM) Radium: good, working on servers now though
(10:18 AM) Radium: Im on speed today though so this will be interesting
(10:18 AM) Radium: countdown till drug abuse

(1:27 PM) Lowtax: how is it working out for you
(1:27 PM) Radium: its pretty cool

(from "Greatest Sagas" in PYF)
is doing Meth a common thing among 10x programmers, and also how is any of this website still functioning

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
also

Powerful Two-Hander posted:

mods please namechange that op to "Cathy jackson"

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

Volmarias posted:

I don't think that's too hard to make into plain English.

"When spies talk to each other, they send each other secret messages. The receiver needs to know the special code to make the message readable. For example, say in our special code A is 1, B is 2, C is 3 and so forth. Now imagine if I took this document, turned it into numbers, but added 1 to each number. A is 2, B is 3, and so forth. There's no letter after Z so when 26 becomes 27 we then turn it back into a 1.

Adding by 1 here is called the encryption key, because it's the key we use to make the message encrypted, or scrambled, even if you know how to turn the numbers back to letters. If you know to subtract 1 then turn the numbers back to letters, that's called the decryption key, and the person who you want to read the message needs that to decrypt it, or make readable, the message and understand it. If you just tried to turn the numbers back to letters without this key, the word 'Hello' would come out as 'Icmmp' and so forth.

Computers use a special kind of math to encrypt their messages, called public key cryptography. This is so called because the encryption key, which you use to scramble the message, can be sent to anyone you want to send you a message. Unlike the simple example before, the way messages can be scrambled for public key cryptography make it nearly impossible for someone to decrypt, or unscramble, the message without the decryption key. That decryption key is called the private key, because you want to keep it private. Anyone who wants to make sense of the message needs that key, or they can't understand the message. This is how computers talk to each other on the internet when you go to a secure website; they send each other the public keys, which is safe to do, and then use their private key to read the messages sent to them so that no one else can understand them.

In this case, instead of encrypting messages, the hackers encrypted the files. It's the same process with the same result. The hacker uses their public key to scramble all of the files, and then holds the private key for ransom. If there are no backups, or extra copies, of the files somewhere else, there is no way to unscramble the files."

Etc etc

Hi I'm an average judge or jury foreman, let me just take a look at the first line of this *immediate loud snoring while dreaming about the payoff I might get for siding with the company*

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

redleader posted:

oooh, nosebleed

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
Such timing, isn't that company having labor strikes right now?

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
Ah I was thinking of the organized walkout from back in May, which just popped up in the news again as things escalate

https://www.latimes.com/business/technology/story/2020-01-07/major-union-launches-campaign-to-organize-video-game-and-tech-workers

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
Are WeChat passwords all handled in plaintext?


We're kind of in a cold war so it might be a made up story, but it seems easy enough to independently try it out yourself

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

Shaggar posted:

In the worst case if the state doesnt have any kind of controls to detect the fraud, they could end up actually changing the election outcome.

and now to take a biiiiig sip of coffee,

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
I'm hearing some uh "optimistic" ideas about the average 4chan users' fear of legal consequences, considering their own paranoid belief that the other side must be doing it and how it's their patriotic duty to reciprocate. Plus optimism about the likelihood of consequences at all, given that the state probably has no web logging system whatsoever. Not that these imagined consequences would happen anywhere near on time to affect who is the accepted winner.

Not that there's any political momentum, will, or infrastructure for prosecuting thousands of small acts of right-wing voter fraud all at once. This is the same country where the ruling right wing government is rapidly deleting its own entire postal system to secure a right wing win as blue states go mail-in only. That openly cancelled its own federal COVID plans since the admin perceived them to benefit blue states. The states of which have held and continue to hold known extremely unsafe in-person elections with a proven high death tool during a respiratory pandemic since right wingers will show up undeterred. We've got goon volunteers in localities that are using the following policy: Let maskless voters to skip the 5 hour line and given all the space they need to vote, while people who believe in masks wait. But sure, go off about the robustness of democracy

Everyone seems awful eager to debunk that this is possible, but not a word against why the "ballot cancelling" logistical glitch wouldn't work or wouldn't alone be powerful.

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
What makes it look like a disinformation op, that is, one to stifle otherwise curious investigators and to dispel panic about the 4chan finding, is when every CIA-loving blue-checkmark liberal keeps repeating that the whole thing is debunked without addressing the second half

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

Volmarias posted:

also in "civilization is so intrinsically tied up with modern technology that state actors destroying information infrastructure as part of a war is liable to have extreme knock on effects, except no one in charge seems to give a poo poo about this, despite ample warnings and examples, because they think these systems power candy crush and maybe facebook, not power plants, refineries, water systems, and all of the other important infrastructure facilities" ways

Just saw this interview of the author of "Civilized to Death" and it's fitting and soothing

https://www.youtube.com/watch?v=UtrmseTvgMc

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
The Elon Musk threads are the bridge between the grey and amber cultures

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
I love how we just know as a given that if a nation state is doing crimes against humanity via hacking, then it had to be done by the spy agencies of someone besides the U.S.A. whose spy agencies have a perfect record

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
Someone hasn't gotten to the part of their history books where the alphabet agencies and organized crime have been basically married to each other since the decades of them merely working together around the 1930s
(e: justified on the grounds it was needed for cold war spy stuff)

Happy Thread fucked around with this message at 20:40 on Oct 30, 2020

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
sounds like how if you join the marines you get to do this:

https://www.youtube.com/watch?v=-n0SCScSFYI

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
If only we knew of any principles now that could prevent the bulk of infant mortality, even if giving up other modern luxuries

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

EIDE Van Hagar posted:

i heard the canadian intelligence agency did bay of pigs can you confirm

Oh it was George Bush Sr. Of the known named Operations of the CIA, Operation Zapata is understood to be Bay of Pigs. Back when he was active, apparently they were not too secure with picking codenames randomly, instead making coy references to himself. "Zapata" == "Zapata Offshore", his oil company based in Houston. "Barbara", and "Houston", the name of his wife and current residence, but also the names printed on two of the ships used by the Cuban "exiles".

An excerpt from "George Bush: The Unauthorized Biography; The rise of the Bush dynasty and the political career of George H.W. Bush"

quote:

According to reliable sources and published accounts, the CIA code name for the Bay of Pigs invasion was 'Operation Zapata', and the plan was so referred to by Richard Bissell of the CIA, one of the plan's promoters, in a briefing to President Kennedy in the Cabinet Room on March 29, 1961 [7]. Does Operation Zapata have anything to do with Zapata Offshore? The run-of-the-mill Bushman might respond that Emiliano Zapata, after all, had been a public figure in his own right, and the subject of a recent Hollywood movie starring Marlon Brando. As J. Hugh Liedtke had observed, he was the classic figure for the revolutionary-cum-bandit. A more knowledgeable Bushman might argue that the main landing beach, the Playa Giron, is located south of the city of Cienfuegos on the Zapata Peninula, on the south coast of Cuba.

Then there is the question of the Brigade 2506 landing fleet, which was composed of five older freighters bought or chartered from the Garcia Steamship Lines, bearing the names of Houston, Rio Esondido, Caribe, Atlantic, and Lake Charles. In addition to these vessels, which were outfitted as transport ships, there were two somewhat better armed fire support ships, the Blagar and the Barbara. (In some sources Barbara J.) [8]. The Barbara was originally an LCI (Landing Craft Infantry) of earlier vintage. Our attention is attracted at once to the Barbara and the Houston, in the first case because we have seen George Bush's habit of naming his combat aircraft after his wife, and, in the second case, because Bush was at this time a resident, booster, and Republican activist of Houston, Texas. But of course, the appearance of names like "Zapata," Barbara, and Houston can by itself only arouse suspicion, and proves nothing.

....
(etc, it goes on and on to continue building a stronger case for Bush Sr's early life being CIA)
https://modernhistoryproject.org/mhp?Article=BushBook&C=8.2#Pigs



Another thing that occurred to me the other day is that the Kennedy Assassination happened within his territory (Dallas).

Happy Thread fucked around with this message at 20:26 on Nov 2, 2020

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

DoomTrainPhD posted:

SECFUCK TIME!

I got emails from SpaceX! I am not employed by SpaceX, but I do work on Buildroot which SpaceX uses!

- My name and all of the other Buildroot developers have emails attached to many of the packages SpaceX is using.
- Their email scraper probably didn't filter out emails not ending in SpaceX
- All of the Buildroot maintainers/developers now have every engineer who is working on Starlinks email address lmao.

The various Musk threads would enjoy this. Alternatively, craft a bitcoin wallet scam as an e-mail spoofed with Musk as the sender and mass send to all of those addresses to rake in some dough

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop
Do you have infinite tries?

Adbot
ADBOT LOVES YOU

Happy Thread
Jul 10, 2005

by Fluffdaddy
Plaster Town Cop

Truga posted:

https://hk.appledaily.com/news/20210117/FLXATT4LKVBGVEBRLAECJPTCHM/
The railroad system in Dalian, northern China, collapsed citywide on Tuesday for up to 20 hours after the Adobe Flash programing software stopped running.

Adobe had announced as early as 2017 that it would cease support for the multimedia software on Dec. 30 last year. The American software company eventually ended the operation of all Flash content on Tuesday.

Tuesday’s chaos arose after China Railway Shenyang failed to deactivate Flash in time, leading to a complete shutdown of its railroads in Dalian, Liaoning province. Staffers were reportedly unable to view train operation diagrams, formulate train sequencing schedules and arrange shunting plans.

Authorities fixed the issue by installing a pirated version of Flash at 4:30 a.m. the following day.

edit: Hearing from another source that they had to boot up Ghost to flash everything back to Windows XP in order to install it again

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply