News for hackers. Stuff that matters.

mdiazcl

Re:Running NSA/Fuzzbunch on Kali Linux (or Debian) on Wednesday April 26, 2017 @01:09AM (#14200569)
Hey!

I read a lot of different papers on how to install and run fuzzbunch on WindowsXP and a few running on Unix, none of them on Kali (Maybe there are a bunch, but I didn't do much research to be honest).

All of the they needed to fix some files, move folders, or download files from different websites, I just wanted to make it simple, quick and accessible for everyone only by typing a few bash commands and a git clone!

P.S: If this is not the kind of post you usually submit to HN, please delete it! I'm sorry.

Re:Progress Towards 100% HTTPS, June 2016 on Wednesday June 22, 2016 @03:11PM (#11956236)
> They trust me because of personal history

That does not mean that you know something about Security.

> ... why should we trust you?

That's exactly the point. This is INTERNET, we don't trust anyone, it's a dangerous place to do such action... but we have to, otherwise it's better to go a live up in the mountain.

So, I prefer to trust Symantec/Google/DigiCert/etc... instead of some small business that does not even know the meaning of updating software or change default passwords.

The chain of trust it's a burden, I know, why we should trust anyone? But there has to be some level of trust between two parties, and, if we can have a third one (Like an escrow) that can ensure that trust I think it's great. Even using asymmetric encryption you need to trust the other party's public key...

A quick example of an unencrypted, cert-less network, an unsecure one with tons of vulnerabilities is the SS7 and the GPS systems... Since they cannot add Certificates to their BTS (base transceiver station) or their satellites, because of roaming technology, it's quite easy to set up an antenna an spoof them[1] and have full control over you phone and GPS[2]

[1] https://julianoliver.com/output/log_2014-02-13_17-17

[2] http://permalink.lanl.gov/object/tr?what=info:lanl-repo/lare...