Antivirus is shit, everything is compromised, etc etc (Cybersecurity thread)

[Larkonis Trassler]

(I might have already ranted about this, but) Plusnet was doing that as of 2 months ago, with an update scheduled by May to make it so that the customer service employees also only see the chosen characters that the customer are to supply for that call session.
Why store plaintext? Because they reuse the same web portal credentials for the actual modem connection, and can't figure out instead generating signed key pairs while shipping the hardware...

Not that it matters, the routers probably have hardcoded backdoors, both in the home and the backbone network, because Cisco got caught with yet another one...

Oh and every US phones' location was being leaked by some data broker.

I often use rude words for secure stuff. I had a giggle from the rep when I rang experian after I forgot my password and he pulled up my memorable phrase. I just assumed he could see it all when he asked for the 2nd and 7th characters.

[Cosmin]

All chips are fucked, mk IV:

Variants 1 and 2 are known as Spectre (CVE-2017-5753, CVE-2017-5715), and variant 3 is Meltdown (CVE-2017-5754). Today, variant 4 (CVE-2018-3639) was disclosed by Microsoft and Google researchers.

It affects modern out-of-order execution processor cores from Intel, AMD, and Arm, as well as IBM's Power 8, Power 9, and System z CPUs. Bear in mind, Arm cores are used the world over in smartphones, tablets, and embedded electronics.

The fourth variant can be potentially exploited by script files running within a program – such as JavaScript on a webpage in a browser tab – to lift sensitive information out of other parts of the application – such as personal details from another tab.

https://www.theregister.co.uk/2018/0...rosoft_google/

Honestly at this point in time I think banning JavaScript is easier than patching all the world chips out there.


Sent from my iPhone using Tapatalk

[Itiken]

Request thread title be amended to include "Javascript>hardware".

Request denied.

sudo 'Request thread title be amended to include \"Javascript\>hardware\"\.'

[Nordstern]

Request thread title be amended to include "Javascript>hardware".

Request denied.

sudo 'Request thread title be amended to include \"Javascript\>hardware\"\.'

Enter password for nordstern@fhc:

[Shaikar]

Request thread title be amended to include "Javascript>hardware".

Request denied.

sudo 'Request thread title be amended to include \"Javascript\>hardware\"\.'

Enter password for nordstern@fhc:

hunter2

[Nordstern]

Enter password for nordstern@fhc:

hunter2

[root]

F-Secure Anti-Virus: Remote Code Execution via Solid RAR Unpacking

[Daneel Trevize]

Another month, another Cisco hardcoded backdoor to be removed.

[XenosisMk4]

(I might have already ranted about this, but) Plusnet was doing that as of 2 months ago, with an update scheduled by May to make it so that the customer service employees also only see the chosen characters that the customer are to supply for that call session.
Why store plaintext? Because they reuse the same web portal credentials for the actual modem connection, and can't figure out instead generating signed key pairs while shipping the hardware...

Not that it matters, the routers probably have hardcoded backdoors, both in the home and the backbone network, because Cisco got caught with yet another one...

Oh and every US phones' location was being leaked by some data broker.

I often use rude words for secure stuff. I had a giggle from the rep when I rang experian after I forgot my password and he pulled up my memorable phrase. I just assumed he could see it all when he asked for the 2nd and 7th characters.

I had a coworker badger me for an ex-employee's local account details this week, his password was "ClungePlunger5000"

I'm very surprised that he's no longer with us.

[Lana Torrin]

TBH that's at least hard to brute force...

[Daneel Trevize]

Good news: we've turned generating & installing fresh OS images into a simple text file mechanism leveraging union filesystems, for trivially spinning up identical stateless systems whenever & whereever you need at minimal resource usage.
You can also publish your customised images for others.

Bad news: people are always going to be lazy and not audit their dependancies before trusting them with their credentials, data, etc.

https://www.bleepingcomputer.com/new...om-docker-hub/

[elmicker]

Docker is an absolute fucking catastrophe for dependency and vulnerability management. I'm fairly convinced we'll look back in about five years on this particular phase of its lifecycle and think what the fuck were we doing. It's just so damned opaque.

[halbarad]

Docker is an absolute fucking catastrophe for dependency and vulnerability management. I'm fairly convinced we'll look back in about five years on this particular phase of its lifecycle and think what the fuck were we doing. It's just so damned opaque.

But the "it works on my machine and now in prod" crowd will cry about that.

Docker is certainly interesting tech but I see people trying to ram it into any situation that could use it without understanding anything about what it's doing. I know I don't understand that stuff and don't want to assume it's the perfect solution to a problem until I've researched how it will handle whatever I'm doing.

[Sparq]

The fucking Tapplock

Pwn via unscrewing the back of it

Pwn via BLE

Pwn via api



~ you could purchase this alternative, which is held together by three standard hex head bolts and is invulnerable to everyone without a screw driver.

[Joe Appleby]

The fucking Tapplock

Pwn via unscrewing the back of it

Pwn via BLE

Pwn via api



~ you could purchase this alternative, which is held together by three standard hex head bolts and is invulnerable to everyone without a screw driver.

Your PWN via BLE video link is the wrong one, that's a tour of a PCB factory in China. It is an interesting video though.

You meant to post this:

[Nordstern]

Semi-related: why you never buy Master locks.

[XenosisMk4]

don't most commercial saves have a "time to unlock" in the seconds now?

[elmicker]

For cheap ones like what you see in a hotel there's almost certainly some quick way in. The fastest way into a good safe is still a fuckoff great big diamond core bit and a drill you don't mind trashing.

[Joe Appleby]

For cheap ones like what you see in a hotel there's almost certainly some quick way in. The fastest way into a good safe is still a fuckoff great big diamond core bit and a drill you don't mind trashing.

Gun safe requirements in Germany as such that it's easier to haul off the safe than break into. However that means they need to move more than 200kg (if the safe is lighter than that, it needs to be bolted to the floor and wall).

Locks like those in the video are however really trivial to pick or break.

[Sparq]

The fucking Tapplock

Pwn via unscrewing the back of it

Pwn via BLE

Pwn via api



~ you could purchase this alternative, which is held together by three standard hex head bolts and is invulnerable to everyone without a screw driver.

Your PWN via BLE video link is the wrong one, that's a tour of a PCB factory in China. It is an interesting video though.

You meant to post this:

weird, it's the same link when I quote you?

There's also now a video for the Uervoton 'lock' I linked.