News for hackers. Stuff that matters.

wwwv

Re:Google: Security Keys Neutralized Employee Phishing on Monday July 23, 2018 @09:44AM (#17592664)
That would be useless, as the key could just be passed through.
Re:ESLint compromised, may have stolen your credentials on Thursday July 12, 2018 @12:29PM (#17516175)
Critically, it also doesn't leave a trail by running a server anywhere.
Re:ESLint compromised, may have stolen your credentials on Thursday July 12, 2018 @12:26PM (#17516136)
That's why they're using two different stats engines.
Re:ESLint compromised, may have stolen your credentials on Thursday July 12, 2018 @10:46AM (#17515115)
They are linked as HTTP referrer, so they can get the tokens out of the stats page later on.

It's using a popular and well known domain to evade detection.

"Hey Siri" is.
Siri recognises the "hey siri" bit unique to the owner, further commands aren't validated.
Re:US Navy collisions stoke cyber threat concerns on Tuesday August 22, 2017 @01:35AM (#15069976)
> There are also military specific parts of GPS that civilian receivers can't access. I don't know if military receivers are ignoring civilian signals, though.

For all intents it's a different system, the packets are encrypted, the right receiver hardware gives you vastly superior accuracy. There's civilian hardware which can use the packets without decrypting them for better accuracy, there's some patents on doing this amusingly.

Re:US Navy collisions stoke cyber threat concerns on Tuesday August 22, 2017 @01:33AM (#15069971)
The US military uses encrypted GPS, not the civilian one.
Re:Filecoin Suspends ICO After Raising $186M in One Hour on Friday August 11, 2017 @07:05AM (#14988390)
I'm not really in this world, but you'd save more power by recycling aluminium cans (%5+ of US power consumption) than by killing off cryptocurrency mining.
The answer is a little unfortunate, even though things are said to be worth $xxxxM market cap, but the depth of the market is so shallow that the true value is near zero.
It's worthwhile to note that not a single once of the thousands of "ICO" things that have been launched in the last year have actually done anything of value. They all generate hype, raise money, and then give up and go to work on other things. It happens over and over again with no memory of the past failures, apparently.

That said I wouldn't fault you for believing that a lot of the $xM raised in x ICO just turned out to be largely the creator seeding the pot and a minority of other people buying into something "big". You could even take out a loan, there's nearly zero risk other than the operator of the ICO running with the scratch.

Re:Ubuntu Systemd Vulnerability on Wednesday June 28, 2017 @08:18AM (#14653439)
TCP or UDP transports.
Re:Attempt to Reverse a $55 Million Ether Heist on Sunday June 18, 2017 @04:42AM (#14579676)
Should be easy to describe then.
Re:Attempt to Reverse a $55 Million Ether Heist on Sunday June 18, 2017 @04:42AM (#14579675)
All obfuscation around a central controlling group that have the ability to reverse any transactions they don't like or negatively financially impact them, in other words.
Re:Attempt to Reverse a $55 Million Ether Heist on Sunday June 18, 2017 @04:18AM (#14579604)
The principle of Ethereum is that code is law, the "hacker" followed the law to the letter and acted in a prescribed manner. What's the crime here exactly?
Re:Is SHA-3 slow? on Friday June 16, 2017 @09:52AM (#14568939)
If your concern is an attacker that can do 128 bits of work, you've got other problems (like reality).
Re:Is SHA-3 slow? on Friday June 16, 2017 @04:29AM (#14567436)
SHA3 is a hash function, not a KDF.
There's beyond HDR, you can switch between multiple penetration levels and do automatic detection of materials even with ones made 2 decades ago. None of this is really new, insightful, or particularly revolutionary.
In general yes, invisible things can burn your eyes but it's probably of no concern here. The more common thing you'll run into is things like cheap DPSS green lasers that output a large amount of IR, you don't have a blink reflex for things outside of your visible range and these will cause damage on the higher end.
They are not opaque to X-Rays, much less the ludicrous penetrating power used in baggage inspection. Baggage X-rays can happily penetrate inches of metal, nothing short of lead brick will obscure contents and that's going to raise other questions. Where did you get that nonsense from?
How does this handle SSH session re-keying, does that need further authentication from the device? openssh does this pretty infrequently, I can't immediately remember if that needs participation with the asymmetric key or not.

ED: Seems it's just as if you re-did the cipher negotiation, so no asymmetric interaction.

So, capture the auth and use it for the malware, show the user some failure and allow their retry to pass. Stupid dodgy Yubikey fails half the time.
Re:The TSA's Selective Laptop Ban on Monday March 27, 2017 @08:59AM (#13967293)
Completely transparent as far as a luggage X-ray is concerned, they're very high power because they don't have to care about exposure limits like medical imaging would. They usually have multiple attenuators and detectors so they can do neat tricks like detection of organic materials.
Re:The TSA's Selective Laptop Ban on Monday March 27, 2017 @08:57AM (#13967278)
No, luggage X-rays are extremely powerful, think 120kV or higher. They can easily penetrate inches of steel on the low end.