News for hackers. Stuff that matters.

dimdimdim

Re:Startups that launched at Y Combinator S16 Demo Day 2 on Wednesday August 24, 2016 @12:43AM (#12349729)
At the very same time it is trivial to update the drones of today to use a secure mutual authentication mechanism which the "drone defender" cannot break into. So, even if there is a spectrum DoS (which might be illegal to do for anyone apart from law enforcement) its not that the defender will take over the drone.

This is a cat n mouse game where the drone creator always has an advantage.

Here is a free video course on GDB - covers most of things discussed in this video and more:

http://www.pentesteracademy.com/course?id=4

Re:A Course in Machine Learning on Tuesday July 12, 2016 @11:39PM (#12083751)
haha! :D so funny!
Re:Penetration Testing Tools Cheat Sheet on Saturday June 25, 2016 @06:35PM (#11978318)
http://pentesteracademy.com/topics - used it for 3 years. happy customer!
Re:Penetration Testing Tools Cheat Sheet on Saturday June 25, 2016 @06:28PM (#11978301)
The one I've used for 3 years counting:

http://pentesteracademy.com/topics

Its the Pluralsight / Lynda.com but for Computer Security.

thanks!
No, but can you give a gist?
Something seems awfully wrong with HNs rating system - somehow this story is plummeting way soon down the list :)

Seems like a Google - Hilary thing :)

Shows how most CEOs of even large companies are human like everyone else, not the "super mature", "super calculated", "super intelligent" begins they are made out to be. It's also important to note the arrogance - invented the 90 day trial :D
On a more humorous note - I'd like to see you volunteer as a Beta Tester for Theranos' next release :) :)
Not when your bug can kill a person or damage his organs due to wrong medication give because of a wrong test result.

http://www.wsj.com/article_email/theranos-voids-two-years-of...

There is a reason Healthcare is regulated and required multiple degrees of testing before it can be released to the general public -- imagine every new "health startup" pushing new drugs and then saying they'll "fix a bug" when a couple of folks die. The comparison is immature.

>>I mean the much narrower point of not being able to tell -- from the press -- whether a company actually has a technology that works.

http://www.wsj.com/article_email/theranos-voids-two-years-of... ??

Unbelievable - even if he said Theranos is trying to get their shit together and there have been some mistakes, it would make sense. To say its just a smear campaign is ridiculous - what about the thousands of results they withdrew as they admitted it was wrong?

http://www.wsj.com/article_email/theranos-voids-two-years-of...

It's even more ridiculous to call her one of the greatest female entrepreneurs!

I had a lot of respect for Draper but this is so disappointing. Just to make sure their investment does not hit a big ZERO value, they seem to be siding with an entrepreneur who has wronged everyone! What a shame!

Re:Coursera shuts access to old platform courses on Sunday June 12, 2016 @02:50AM (#11886987)
Dear Coursera,

Thanks for all the free courses for the last couple of years. I understand the need to be profitable and make this a real business so you don't have to fire all your good employees who have helped provide free education for so long.

I for one welcome what you are doing - as I understand that's is impossible to sustain a free model forever.

All the best!

Re:VMware Introduces Liota – The IoT Developer’s Dream on Saturday June 04, 2016 @02:25AM (#11835215)
Would be better if they called it Lolita
Would be better if they called it Lolita :)
Type in "Fruit Flies like honey"
Re:Writing my first shellcode on Saturday May 28, 2016 @11:42PM (#11794654)
Here are 2 great courses to learn assembly and shellcoding:

http://www.pentesteracademy.com/course?id=3 http://www.pentesteracademy.com/course?id=7

There are many free videos in this collection.

Re:“I made 3 CEOs rich – So why am I broke?” on Wednesday May 04, 2016 @05:45PM (#11632159)
Being an employee at a startup does mean you took a risk, but nothing in comparison to the founders who built it.

Most employees don't understand that a lot of things change along with way when building a company. Most product companies start with dreams of IPO or getting sold to a large company at a massive valuation. This seldom happens for the vast majority of startups - who either go bust, sell to slightly larger players or becoming SMBs for life.

The owners of a company will make money in most of the above cases - employees won't, and rightfully so.

I think you should share your salary with as many people as possible. This "don't share" policy is just a trick used by companies to keep labor costs down.If employees know each other's pay, they will start demanding raises.

------ Keep in mind that 2 employees with the same education and years of experience might not always be "equal in all respects". There are so many other things which come into play - taking initiative, energy they bring to the company, team play etc. etc. most of which cannot be measured. So the reason for 2 employees with apparantly equal qualifications + experience not getting the same salary is not always the company "trying to fuck them" or because they did not "negotiate hard".

If you make all salaries open, keep in mind that so many employees will get demotivated to know the colleague next cubicle gets paid more. Serves no purpose.

Re:LinkedIn CEO Jeff Weiner Gives $14M in Stock to Employees on Thursday March 03, 2016 @04:37AM (#11215864)
The guy does a good thing and recode is trying to justify that hey it was not a big deal because he already is rich and has a lot more stock!

At one end journalists cry out aloud about how big CEOs are hoarding cash and stock without giving much to employees, and when someone does the opposite you try to justify.

Re:DLL Hijacking Just Won’t Die on Sunday December 27, 2015 @09:32PM (#10799559)
Here is a fantastic on on Privilege Escalation using DLL Hijacking http://www.pentesteracademy.com/video?id=575

Just how malware works today! even saw this in a Mark Russinovich talk.

Re:32C3 – Chaos Communication Congress – Streams Online on Sunday December 27, 2015 @01:19PM (#10798231)
Keep in mind though, that once your Layer 2 is hijacked, a lot of attacks are possible before upper layer security kicks in - things like browser redirection and exploitation are very common these days
Re:32C3 – Chaos Communication Congress – Streams Online on Sunday December 27, 2015 @10:16AM (#10797631)
45% Insecure WiFi traffic? at a Hacker Conference? :)
Re:Shellcode Injection on Sunday December 27, 2015 @04:56AM (#10796990)
Here are 2 good courses on Assembly and Shellcoding on x86 and x86_64 if you are interested:

http://www.pentesteracademy.com/topics?v=nhr

Older »