News for hackers. Stuff that matters.

genesee

Re:WannaCry in-memory key recovery for Windows XP on Friday May 19, 2017 @12:44PM (#14377325)
It looks like Microsoft's documentation suggests it will only work on older versions of Windows. From the README:

> Indeed, for what I've tested, under Windows 10, CryptReleaseContext does cleanup the memory (and so this recovery technique won't work). It can work under Windows XP because, in this version, CryptReleaseContext does not do the cleanup. Moreover, MSDN states this, for this function : "After this function is called, the released CSP handle is no longer valid. This function does not destroy key containers or key pairs.". So, it seems that there are no clean and cross-platform ways under Windows to clean this memory.

I'd be curious where the change happened between XP and 10.

This quote from the article indicates the opposite effect, actually! I'd like to see the study that concluded this, but it's an easy statement for me to believe.

> "As for connecting marijuana to the legal opioid crisis, Spicer has it exactly backwards. Greater access to marijuana has actually led to declines in opioid use, overdoses and other problems."

Re:MacOS FileVault2 Password Retrieval on Friday December 16, 2016 @04:42PM (#13197133)
That's defeated by a USB mouse jiggler [1], which is apparently commonly used by the type of people who seize computers in the wild.

[1] https://www.amazon.com/CRU-Inc-30200-0100-0011-WiebeTech-Jig...

Re:Windows 10 will come with a command-line package manager on Wednesday October 29, 2014 @11:34AM (#8527719)
Another benefit of the Nexus program is that it's trivial to achieve root, so you can easily get to the point of removing even the small amount of bundled crapware.
Re:Push notification click-through rates on Tuesday September 16, 2014 @03:12PM (#8326443)
Almost anyone who uses iOS on a daily basis certainly knows how to clear notifications. The lock screen doesn't offer such an option, but the slide-down Notification Center does: http://tctechcrunch2011.files.wordpress.com/2013/09/notifica...
Re:Introducing free voice calls from Hangouts on Wednesday September 10, 2014 @02:12PM (#8298011)
My company, my family, and my friends all use Voxer for this. It's a great free push-to-talk style chat app, and we love the hybrid a/synchronous model of communication.
How could they block this? It's an incredibly general use case of their API.
Add Nest-like proximity activation and you've got a pretty cool bathroom/bedroom installation!
Re:Your emails may reveal text hidden in Microsoft Word on Friday January 31, 2014 @03:14PM (#7158907)
Or in OS X terminal,

    pbpaste | pbcopy
Re:This Call Is Being Recorded on Monday July 08, 2013 @01:10PM (#6007809)
As someone mentioned below, Google Voice can do this natively if you press a button during a call. It alerts the person on the other end of the line and makes a recording available in your account following the call. Quite useful and works on any phone provided you're using GV.
Re:NeoCities on Friday June 21, 2013 @02:28PM (#5920012)
I'd just like to point out that when he said "trashing other people's work," he was likely referring to people overwriting others' pages, not your comment.