News for hackers. Stuff that matters.

tg16

Re:No Man's Sky just keeps getting better on Friday November 10, 2023 @01:32PM (#38222611)
I backed it on day 1, refunded it three years later. Star Citizen by another developer would've been great, but i have zero faith in Roberts and co.
Re:No Man's Sky just keeps getting better on Thursday November 09, 2023 @06:47PM (#38213014)
Seconded. I was hoping for a persistent multiplayer and modernized Freelancer 2 but i got a very pretty, but mile wide and inch deep game.

God what i would give for a modern reimagining of Freelancer 2...

Re:You Win or You Learn on Thursday November 09, 2023 @04:38PM (#38211731)
A virtual pet that lives on your blog and occasionally tries to eat your mouse cursor.
The cost is the fuel. It takes an insane amount of energy to leave Sol. The voyager probes were able to save 30km/s worth of Delta-V by performing a ton of gravity assists during the "Grand Tour" launch window planetary alignment that occurs once every 175 years.

For context, getting something to low earth orbit is about 9.4km/s of Delta-V. From LEO to mars is another 4.3 km/s of Delta-V. Getting from LEO to any solar escape trajectory adds is about 18km/s.

As you can see, 30km/s of fuel savings is extremely significant, and that required the 175 year Grand Tour alignment.

The probe itself is a relatively insignificant cost. The launch costs and timing windows are the limiting factor.

The tyranny of the rocket equation is the fact that to carry more fuel to orbit, you need more fuel to get it into orbit, which itself needs more fuel. That's why gravity assists are so essential for escaping the solar system on a budget.

The planetary alignment that enabled the Voyager launch windows only occurs once every 175 years.

We should definitely be sending out more probes, but we can't just do it whenever we want, at least not without a lot more expense.

This is exactly the point i was trying to make and why i opened my comment with "default configuration environment".

I'm also not going to respond to a non-expert's plea for information with unnecessary minutiae like the differences between LM, NT, and NTLM hashes or the differences between NTLMv1/v2 and NetNTLM. My ommissions were intentional because i'm trying to make my comment approachable.

In a default, non-hardened Windows environment, NTLM is a nightmare. Yes, it can be secured. No, it is not straightforward.

I'm a Security Architect dealing with the pain of an old environment with a default NTLM configuration so i'll chime in:

- NTLM doesn't sign packets. If you can intercept an NTLM auth request you can forward that authentication attempt to another resource and impersonate the user without needing to know or crack their password. You simply MitM the challenge-response between the client and the server. This is called NTLM relaying and is a core issue of NTLM, though some protocols have additional verification such as SMB signing, which is not enforced by default.

- NTLM has relatively weak hashes, though this is far from the biggest issue with NTLM.

- NTLM (unlike Kerberos), uses a single hash for all authentication. If you can compromise this hash, you can impersonate the user anywhere. With Kerberos, each auth event generates a signed with a narrow validity period that grants access to a tuple of user, device, and resource. Meaning if you compromise a user's Kerberos tickets, you can only impersonate them on services that they already had a ticket for at the time, and for only a few hours in until those tickets expire. The NTLM hash itself is the proof-of-identity for all NTLM auth, and this can be recovered in memory or on disk for local accounts.

- NTLM, combined with older broadcast name resolution protocols (namely LLMNR, NBT-NS mDNS, and WPAD) can be very easily intercepted and abused for NTLM relaying due to the lack of signing. It is trivial in most Windows environments to run Responder.py and get an administrative session on pretty much everything. Unless the enterprise has taken steps to harden against NTLM relaying (which is difficult both for compatibility issues and the sheer number of required changes), they're going to be vulnerable to it. My current environment has top of the line network monitoring, SIEM, and EDR, but it's still very easy to slip under the radar with NTLM relaying if you know what you're doing.

Re:US Military Asks for Help Locating Missing F-35 Fighter Jet on Monday September 18, 2023 @02:17PM (#37559875)
Not really, sometimes a plane will land itself even after the pilot ejects. https://en.m.wikipedia.org/wiki/Cornfield_Bomber
Re:My Dentist’s Murder Trial on Tuesday August 22, 2017 @05:10AM (#15070756)
As is often the case with articles like this, I'm wondering if there's anything the author has neglected to mention that might otherwise sway my opinion. I am reminded of "My Family's Slave" and the ensuing skeletons falling out of that guy's closet.

Edit: That said, I would not be surprised if this account was 100% accurate.