drbenway
Re:RCE on Telia Routers
on Thursday July 02, 2020 @09:24PM (#23720119)
Well if the hackers have root password on the cpe nat gateway the macbook probably is at risk to a mitm, those gateways have iptables probably after all. Plus when youve got a gateway you can do things like screw with the network time to invalidate hsts certificates or inject so many rules firefox forgets the old one and you can mitm with a new https certificate!
Re:Why Is This Website Port Scanning Me?
on Wednesday May 20, 2020 @06:07PM (#23252530)
I've noticed many of the survey for cash sites use websockets to scan for running services on your machine
Personally I think its straight up evil
Re:Remote Code Execution to Persistent Backdoor in TP-Link Surveillanc...
on Wednesday April 29, 2020 @04:17PM (#23023697)
I reported this to TP-Link today.
Developers please remember to not pass unsanitized input from the internet to the command line
It's scary how vulnerable these IOT devices are- especially the ones marketed as security orientated products
Re:Facebook, Instagram go down around the world in an apparent outage
on Wednesday March 13, 2019 @07:36PM (#19385088)
interesting that facebooks cavalrylogger is still being sucessfully injected despite their being nothing but a blank page
also interesting that cavalrylogger has a function that lets you bind key-presses to callbacks
even more interesting is that cavalrylogger seems to come prepackaged with any facebook like button! cheers for the keylogger facebook
https://stackoverflow.com/questions/4188605/what-is-cavalryl...