News for hackers. Stuff that matters.

F147H34D

Re:Intel Virtualization and Apple Silicon on Monday March 28, 2022 @04:29PM (#30835181)
I had an intel MacBook that was a good fit for doing reverse engineering work on malware. I suppose this method would be kind of a compromise for those that still want to use Mac system, even know it is incompatible with most of their RE tools/virtual machines.

Anyone used Ghirda on a M1 Mac?

Re:What Is the Most Valuable Thing You Can Learn in One Hour? on Tuesday December 31, 2019 @11:19AM (#21922095)
I had a coworker who was having some issues. I chuckled when he had an alias for history | grep when I was checking out his env
Re:What Is the Most Valuable Thing You Can Learn in One Hour? on Tuesday December 31, 2019 @11:17AM (#21922074)
Did this years ago. I am very thankful I did. It has saved me a few times on cmd syntax. Seems like iptables is the one I always screw up. I recently started migrating the history across reinstalls.
Re:I spent 22 years in prison for a crime I didn’t commit on Thursday December 05, 2019 @01:34PM (#21714886)
Most departments have a motto. LAPD "To project and serve", NYPD "Fidelis Ad Mortem" (Faithful unto death). I worked in a large metro area and I generally got the impression that you do what is right and follow the rules. I still work in law enforcement, just not on the street anymore (computer crimes) and I still have the same impression with the officers I deal with.
Re:I spent 22 years in prison for a crime I didn’t commit on Thursday December 05, 2019 @01:27PM (#21714797)
I agree closing cases faster would be seen as favorable.
Re:I spent 22 years in prison for a crime I didn’t commit on Thursday December 05, 2019 @01:25PM (#21714775)
I don't think the police took the wrong approach. It was just fueled by what the suspect said. If he would have went in and said "sorry, I just don't feel comfortable talking to you without a lawyer." There would have been no harm. The detective likely would have checked the alibi (ensuring he was at the hotel), relied on the fire investigator's report, and closed the case. But, giving the police more information is only giving them more to explore. Now they may want to look at his financials, did he recently update his insurance, what other debts does he have, are there any weird calls/communications to others, did he purchase anything suspicious, did he conduct any research about arson, etc - and that takes time.
Re:I spent 22 years in prison for a crime I didn’t commit on Thursday December 05, 2019 @10:26AM (#21713092)
> I haven't adopted a "never talk to the police" vibe, but I seriously think twice about talking to cops for anything that matters.

I was a police officer for a good portion of my life. The problem is you may not know what matters. I have a couple teenagers and I don't even let them talk to school administrators without me present if there was some type of trouble at school. I certainly would never let my children talk to the police and I myself, would never talk to the police. You may think what you are saying sounds innocent but you never know how the officer is viewing your statement or what king of evidence they are looking for.

For example, a few years ago my neighbor's house burned down in the middle of the night. He and his family had decided to spend the night elsewhere that night before the fire started. Apparently, he had some hotel points from work travel and they stayed the night at a fancy hotel -- locally. Investigators were suspicious of this so they brought him in for questioning. From his account, he said they were very friendly to him and sorry that his house had burned down. They jokingly asked if he had ever missed any payments on his house. He said actually he missed this months because of a illness in his family that required extra money. But that he had worked it out with the bank. Well the investigator ran with that statement and the fact that his whole family wasn't home and opened an arson investigation with him as the suspect. It took nearly a year to clear him and the insurance wouldn't pay until the investigation was done. He continued to pay for the house and had to live with relatives. The whole thing was crazy. If he wouldn't have talked to the police, they would have relied solely on the fire investigation report which didn't indicate arson.

Re:Carbonite To Be Acquired by OpenText for $1.4B on Wednesday December 04, 2019 @04:10PM (#21707030)
Yes, I agree with you on that!
Re:Carbonite To Be Acquired by OpenText for $1.4B on Wednesday December 04, 2019 @03:17PM (#21706454)
OpenText also acquired Guidance Software a few years ago. They make EnCase which is one of the largest digital forensic software tools utilized for investigations.
Re:Two malicious Python libraries caught stealing SSH and GPG keys on Wednesday December 04, 2019 @07:46AM (#21701676)
Wish they listed out how many installs.
Twilio is making this pretty easy. I just ordered three SIM cards from them that I can provision, to see how it works. Their aim is for these SIMs to be utilized in IoT devices.

https://www.twilio.com/wireless

I didn't know that either. Here's a couple quotes from an article about how Mark ran MtGox:

> Beneath it all, some say, Mt. Gox was a disaster in waiting. ... A Tokyo-based software developer [says it] didn’t use any type of version control software [and] he says there was only one person who could approve changes to the site’s source code: Mark Karpeles. ... “The source code was a complete mess,” says one insider.

> The 1,719 lines of commented PHP code...include code to access individual customers’ Bitcoin wallets and to process transactions. ... Anyone who had access to the server running this code could have easily redirected transactions or pillaged the Bitcoin wallets.

https://www.computerworld.com/article/2476003/the-php-that-s...

Re:Sherlock: Find usernames across social networks on Saturday November 30, 2019 @08:01PM (#21673102)
avoiding linking usernames on different sites...
> Data collected from your system is temporarily stored locally on your system before being uploaded to a secure cloud environment, which may be physically located in accordance with Intel’s Privacy Notice.

> Intel keeps the data for a maximum of seven years. Intel takes reasonable steps to reduce the risk that any data kept for over three years can be traced to a particular computer.

Tied to user for 3 years. From a law enforcement perspective I’m more interested in the ‘other devices in your computing environment’. They state they are generating a random UID tied to your system, so I assume if I know the UID from the suspect computer then a warrant could be issued to Intel for this information.

Re:Vim Splits: A Guide to Doing What You Want (2010) on Friday November 01, 2019 @08:33PM (#21425087)
ctrl-z will suspend vim. then just type fg from command prompt to get it back.
Re:Twitter to ban political advertising on Wednesday October 30, 2019 @07:59PM (#21404362)
This is all well documented history. I encourage you to look at the circumstances and conversations in govt that lead to the civil rights act.
Re:Twitter to ban political advertising on Wednesday October 30, 2019 @07:54PM (#21404321)
No. We have the civil rights act of 1964.
Re:Building a Dark Web Crawler in Go on Monday September 23, 2019 @09:23AM (#21048664)
Right, but possession of those items do not constitute a violation of law. Whereas, the possession of child exploitation material does. No matter the reasoning.

I would tread lightly crawling the dark web. There are cases where the FBI has admitted to running services on TOR, to collect IP addresses:

https://www.wired.com/2013/09/freedom-hosting-fbi/

Re:California Promises to Fight EPA Plan on Car Standards on Wednesday September 18, 2019 @03:24PM (#21009005)
You need residency to register a car. Also, if you purchase a car out of state it doesn’t matter. The taxes get levied when you register it.
Re:California Promises to Fight EPA Plan on Car Standards on Wednesday September 18, 2019 @03:22PM (#21008978)
That’s the idea behind Federal vs. State government. The States are suppose to be able to regulate how they see fit as long as it meets the federal minimum. So yes, I think the same would apply to this scenario.
It's pretty sad to think someone could be in a situation where they are sick and simply won't go to the doctor to get help -- because they can't afford it. The last thing someone should have to worry about when trying to recover from cancer or some other illness/injury is how is this bill going to get paid. I'm in law enforcement, imagine how many less calls there would be if the person calling the police had to pay for the service (directly, full cost). Healthcare should be in the same bucket as other public services, regardless of the income generated by that person.
Would this create a record of the comments at the copyright office?
Yes. All of the Uber drivers and other unskilled labor should move to Montana. That would be super helpful for those needing rides in SF.
Re:Warp – Mobile VPN on Monday April 01, 2019 @11:15PM (#19550753)
wg uses UDP. Can be configured to run on any port. If connection is restricted to TCP only, then use udptunnel.
Re:Bootcamps vs. College (2016) on Sunday March 31, 2019 @09:12PM (#19539612)
Thanks for the insightful comment. I’ve been considering changing careers in about 4 years. MS is computer forensics. When I retire from law enforcement (as a computer forensic examiner) I will be about 45. I can program lightly in Python and other languages — enough to automate my job. If I want to do software development is it plausible to teach myself in 4 years? Am I hirable at 45?
if you are using your own domain, consider self hosting on AWS. A reserved instance will be about the same price. Check out:

https://mailinabox.email/