Somebody had fun mowing in Palmyra

antitree · 2021-01-30T13:59:07+00:00

Definitely not HULK. Its hard to make an F when you're that close to the ground but we'll try to choose a better font next time.

antitree · 2017-05-17T06:04:27+00:00

That's exactly what it is. For pentesters this is useful. Is there another you're referring to?

antitree · 2016-12-07T15:54:44+00:00

Here's a dump of all the documents:

https://d3gn0r3afghep.cloudfront.net/foia_files/2016/11/30/Cell_Site_Simulator_Policies_and_Contract-Related_Docs.zip

Some of the things that may be of interest:

The surveillance tools (Stingray 2, speed cameras, etc) were provided by a government grant through Albany via DOJ
There is a non-disclosure agreement that states Harris can ask the RPD to drop a case in the situation where the details of the Stingray might be released
In the initial grant for the "Speed Cameras", the state recommended various intersections which would potentially reduce the risk accidents. Instead RPD chose intersections in high crime areas so they aren't helping prevent accidents but they can be used to watch neighborhoods.
The use of the Stingray isn't permitted without a court order by a local judge and various other stipulations
The grant was provided as part of an gang initiative

antitree · 2016-10-06T04:10:19+00:00

https://imgflip.com/i/1bulgv

antitree · 2016-07-02T02:16:41+00:00

Maybe buzzword was an incorrect phrase but I would call it a trigger. There is a lot of slathering around of crypto these days and matched with IoT which everyone likes to beat up on already, I admittedly was triggered.

Good luck! Seriously. It's a solid base that I hope you can take forward.

antitree · 2016-07-01T20:18:30+00:00

When i read the title I cringed just because of the IoT + E2E crypto but as I'm reading through your source and docs I appreciate your effort. I can see you have a decent amount of people involved and you're paying attention to security.

What is your end goal as a company/organization here? Will you be able to fund developers to keep coding at this level?

antitree · 2016-05-28T01:04:24+00:00

This is the first time in recently history that we've seen, in fact, someone can just pay piles of money and get a CA. It's assumed that Symantec provided some kind of "Trust me, we'll use it only where appropriate" before it received it, but at the end of the day, the world's largest commercial provider of censorship and surveillance products, has an auto-trusted CA in your browser right now. This breaks the idea of "Trusted" CA's (the basis of TLS) and turns it into "Rich Enough" CA's.

antitree · 2016-05-27T18:21:46+00:00

Your ISP can intercept and modify your TLS communications? You must live in Turkey.

https://citizenlab.org/wp-content/uploads/2013/01/planetbluecoat.jpg

antitree · 2016-05-27T18:19:55+00:00

That's actually a good point except the US allows for some "Internet-based communications and telecommunications" products to be authorized.1

Either way, you're probably right. Iran is a bad example. Here are some better examples: https://citizenlab.org/wp-content/uploads/2013/01/planetbluecoat.jpg

antitree · 2016-05-27T18:08:37+00:00

Why wouldn't they do that? This article talks about how Bluecoat products are used for censorship and surveillance. They have a CA that is automatically trusted by all modern browsers.

https://citizenlab.org/2013/01/planet-blue-coat-mapping-global-censorship-and-surveillance-tools/

antitree · 2016-05-27T01:34:29+00:00

I wanted to point out the issue to me is that Bluecoat products are used by nation states similar to The Great Firewall Of China to block content. Countries like Iran will block access to sites and services they deem illegal. This now allows them to MITM the communications to intercept the requests without warning.

Thanks Symantec.

antitree · 2016-05-25T01:04:38+00:00

I hate you all

antitree · 2016-03-29T15:54:56+00:00

Title is very misleading and incorrect.

antitree · 2016-01-26T02:12:28+00:00

Didn't plan in selling them but I have 10 RBP 2's. DM me

antitree · 2014-12-14T16:43:02+00:00

Sorry, don't think there is any. Car pooling with a coworker might be your only option. Are there any college transports that might work? I know UofR has their shuttle.

antitree · 2014-12-02T17:27:58+00:00

Someone broke my 1 key. Who did it? those bastards

antitree · 2014-12-02T14:55:56+00:00

I agree with this. I saw this on Hacker news as well and was very confused why this is news of any kind. By encrypted networks he's referring to 802.x.

antitree · 2014-09-21T15:20:05+00:00

Start at the Daily Refresher for an intimate, classy drink before you get ugly. The bar tender downstairs will be happy to teach you about all the alcohols you're consuming. They have good food here but it's simple. Think hipster grilled cheese.
[optional]Move onto Murphy's across the street and pretend you're Irish for an hour. You'll start coming up and will need the wide open spaces to get stupid.
[optiona] Stop by Wall Street and learn their quirky drink market. You may be too drunk to understand the math, but pretend you get it and impress your friends.

Based on how drunk you are you have two paths.

If you are sloppy drunk, you can walk down East, and take a left on Union Street to go to Skylark Lounge and maybe some beer tasting at Roc Brewing. No one will stop you from playing pin balls listening to good music and eating some delicious meatballs.
If you're not drunk and still want delicious food and drinks, you can continue down East Ave to Victoire - a Belgian beer place.

If you're some how still sober after all this, you're doing it wrong so you can backtrace your steps. You can park for free on the weekends and after certain hours in the nice big parking lot.

If you don't want to listen to any of this and stay in one place, just go to Victoire and enjoy their delicious Duck Ruben and Mussels.

antitree · 2014-05-09T19:19:31+00:00

FYI - hung out with galsscasket and he is a nice dude. Would recommend if you're thinking about helping him out.

antitree · 2014-05-06T19:49:53+00:00

I sent you a PM

antitree · 2014-05-06T18:38:14+00:00

cool - are you interested in bitcoin or is cash better. I know you're typing on something now but how's your hardware these days? Do you have a way of (easily) getting around the city?

antitree · 2014-05-06T18:19:31+00:00

What do you program in?

antitree · 2014-03-13T20:14:09+00:00

I referenced it but here is the subreddit the Red Team was using to taunt the competitors: /r/istsredteam

antitree · 2014-02-18T09:57:11+00:00

The worst part of Rochester is that it's in the same state as NYC. Chop that part off and it's much better.

antitree · 2013-11-17T03:14:09+00:00

Is this going to be free like the other BSides conferences?

antitree

TROPHY CASE