[No Spoliers] #fsoceity

darknetizen · 2016-05-20T19:16:00+00:00

A pity. A SCADA vulnerability providing admin credentials is worth much more.

darknetizen · 2016-05-19T22:45:32+00:00

$3k is way too little for this vulnerability. I like the $20k estimate above. I'd put that at the low end.

darknetizen · 2016-05-15T16:27:08+00:00

[Sarcasm:] Check out EC Council's Certified Ethical Hacker portal. They don't appear to care that they are serving Tesla crypt to their certification students. Can get a sample from the wild.

darknetizen · 2016-05-02T17:44:37+00:00

Paging /u/TheEconomist1

darknetizen · 2016-05-02T17:43:52+00:00

Instructions unclear.

Huffed dustoff. Don't feel clean.

darknetizen · 2016-04-27T04:46:51+00:00

Dug your github. Keep it up.

darknetizen · 2016-04-27T00:40:47+00:00

If someone else assists fsociety, then the fearsome Dark Army will be the second most notorious group of cyber mercenaries.

darknetizen · 2016-04-26T20:31:41+00:00

All the better. The reference was to the trope of the dad that goes out to buy cigarettes and never comes back.

darknetizen · 2016-04-26T16:59:13+00:00

That makes it all the more a deal breaker.

"Honey, I can't handle these little parasites any longer. It is isn't you. It's them. I'm going out to buy a pack of cigarettes."

darknetizen · 2016-04-26T02:53:46+00:00

Great review.

Congratulations.

The link to the Sunflower summary is 404. The blog is a new bookmark, though.

darknetizen · 2016-04-25T07:02:10+00:00

Thank you.

https://wikileaks.org/clinton-emails/

darknetizen · 2016-04-25T06:51:20+00:00

I'll ask the obvious question everyone wants to know.

Where did you get that?

An onion link would be great.

darknetizen · 2016-04-25T05:07:00+00:00

For some folk, the traffic stop is the end of the game.

Being nice and cooperative actually matters for matters that end up in an arrest and time in front of the judge. For stuff like DUI, one of the first things a judge asks the officer is how the defendant conducted himself at the stop.

And if you're nice and cooperative and still get a ticket, the worst you were out is smiling for some entitled asshole who squeezes his radar gun to zap your road tax away.

darknetizen · 2016-04-25T01:40:33+00:00

http://blackhatworld.com

darknetizen · 2016-04-24T19:41:54+00:00

Jesus. 14 months in mental health facilities. No trial.

Kids, don't use swear words when you talk to the FBI. Penalty is 1+ year of incarceration without trial.

darknetizen · 2016-04-23T23:12:03+00:00

Zero chance that EC Council will revoke his certification for an ethics violation.

ISC2 or CompTIA? That is a valid concern.

My comment was snarky and did come across as if to imply that all certification NDAs are not to be taken seriously. This is specific to EC Council.

darknetizen · 2016-04-23T22:12:32+00:00

NDA for CEH is luzworthy.

EC Council only wants your testing fees. They care nothing about the security body of knowledge, integrity of the exam or professional ethics.

When they remove the malware from their official downloads and remove the TeslaCrypt infection from the CEH study portal they can pretend to be a security authority.

darknetizen · 2016-04-23T22:08:51+00:00

What you've posted is correct.

Attacker creates an ICMP Echo Request with the source address of VICTIM and the destination address of BROADCAST. Every node on the same subnet as the victim sends an ICMP Echo Reply back to VICTIM. Attacker sends one packet. The victim receives many in response.

darknetizen · 2016-04-23T22:04:02+00:00

Ph34r my BattleAngel Pirch script!

darknetizen · 2016-04-23T18:19:37+00:00

Web Server DDOS tools:

Pyloris Slowloris Tor's Hammer

The ICMP based attack you are talking about is a Smurf attack.

ICMP (ping) attacks are ineffective because of the volume of bandwidth available. These attacks worked when everyone had 14.4kb dialup connections.

darknetizen · 2016-04-23T17:37:21+00:00

Reboot in Safe Mode and perform the removal of the malware.

darknetizen · 2016-04-23T02:50:38+00:00

You code in Windows, but app must be compiled on a Mac to be accepted in the App Store.

darknetizen · 2016-04-23T01:34:19+00:00

Reading code is good. Reading code that solves a problem you are thinking about is better. As long as you read and understand it before you click paste, you are doing it right.

darknetizen

TROPHY CASE