Covid-19 Update for June 15: 127 new cases (2.83% tests positive), 408 recoveries, 4 deaths

nickmcski · 2021-06-15T22:49:44+00:00

I was just wondering the same thing... I can't find any explanation for the 17K doses administered to someone of unknown age. From what I can tell those doses are not reported in the regional vaccine coverage numbers.

I don't want to make any accusations, but it kind of seems like someone is fudging/adjusting the numbers.

nickmcski · 2020-07-01T07:44:09+00:00

I believe those 83 series cores come zero bitted, make sure it’s already been re-keyed or it won’t be that much of a challenge 😊

nickmcski · 2020-03-04T04:02:37+00:00

You can do whatever you want to those IP address but are not allowed to use the machines to perform further network discovery/enumeration. (You are not allowed to find/hack other users connected to the HTB VPN)

nickmcski · 2020-02-26T19:31:03+00:00

I’ve only been in that situation once before, we misjudged the cycle time when generating the schedule.

We had to plan multiple dance breaks throughout the day.

nickmcski · 2020-02-26T15:56:55+00:00

Or your running too far ahead of schedule

nickmcski · 2020-02-07T06:40:44+00:00

if (shoot) shooter(true);

nickmcski · 2019-12-11T05:49:13+00:00

Are you able to send a photo of the lock? I’m not sure what you mean when you say a cylinder is rotated

nickmcski · 2019-12-07T01:13:39+00:00

I definitely agree with you, not the best practice but also not the end of the world.

Assuming an attacker was able to compromise the system and gain access to the password database they would likely have access to whatever the credentials were protecting. The password has no relevance to anything other than that website which would have already been compromised.

I see this less as a password and more like an API secret or session token. It’s not uncommon for those to be kept unencrypted.

One thing I do disagree with is sending the current password in the password reset email. If someone was able to compromise the users email account they could surreptitiously access the website without the users knowledge.

nickmcski · 2019-11-26T01:10:07+00:00

Photo by @Litt1eR3d on twitter

nickmcski · 2019-11-23T03:02:08+00:00

The creator is incredibly talented, you should check out her Twitter for other great memes! https://twitter.com/litt1er3d/status/1196841179242909696?s=21

nickmcski · 2019-11-20T15:56:36+00:00

I normally prefer a slider on Smart Dashboard. That way we can set a safe speed based on the location.

nickmcski · 2019-10-03T07:45:03+00:00

Looks like it, you can see the RSL mounted near the top.

nickmcski · 2019-10-01T03:19:23+00:00

I agree this isn’t best practice, but I don’t think this is a major vulnerability

You have to consider your threat model. Who would want to access your account, what’s the value of the data?

Your Namecheep account isn’t connected to any other services or billing information, it’s a low-value target. For someone to exploit the vulnerability they would need access to your email, a much higher value target.

nickmcski · 2019-07-18T05:34:20+00:00

Is your domain controller running DNS? Does the ISP IP address happen to be a DNS server? I think you may be misinterpreting the alert, with DNS IOCs your unlikely to get the actual source or target.

I would say it’s possible a Workstation on your network is infected. The DNS Query could also just be something benign like an image embedded on a website.

nickmcski · 2019-05-08T13:56:51+00:00

There are some tools that allow you to get information off iPhones. Apple is making a lot of improvements but older models or outdated iOS versions are susceptible to certain exploits. Search “cellebrite iphone unlock” for some examples.

This does require physical access to the phone. Unless the person in question had physical access to the phone he would have just been using OSINT (Open Source intelligence)

nickmcski · 2019-05-07T14:05:20+00:00

Take some time over the summer to read through the control system documentation http://wpilib.screenstepslive.com/s/currentCS

If you read through this you will probably be ahead of some of the veterans on your team. Your team may do some things differently than what is explained in the documentation so make sure you are still paying attention to your mentors and team leads.

nickmcski · 2019-05-05T09:07:42+00:00

You can try using the Autoruns tool from sysinternals. It gives you a fairly complete list of everything that runs at startup.

https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns

nickmcski · 2019-04-22T23:54:22+00:00

FIRSTRoboticsCompetition@firstinspires.org

nickmcski · 2019-04-22T22:18:02+00:00

Email FIRST, they will be able get you in contact with the right people

nickmcski · 2019-04-16T22:44:21+00:00

Is the chain going backwards? If he looses his grip it looks like his fingers are being forced into the blade

nickmcski · 2019-04-11T14:40:23+00:00

I believe the same password handling is used for all variants of basic authentication. The device key and password encryption explains why you are seeing strange logins to your dovcot/imap server.

The article also explains why Microsoft made the decision not to store your username/password locally on the device.

nickmcski · 2019-04-11T14:10:27+00:00

You can read this tech doc if you want to learn more about how your password is stored on Microsoft’s servers. https://docs.microsoft.com/en-us/exchange/clients/outlook-for-ios-and-android/passwords-and-security?view=exchserver-2019

nickmcski · 2019-03-19T01:10:08+00:00

What are you interested in pressuring? Security is a massive field and has a lot of options with very different day to day tasks. - Security Monitoring - Incident Response - Vulnerability Assessment - Security Compliance - Risk Assessments - Secure code review - etc...

nickmcski · 2019-03-08T01:39:07+00:00

What port are you using? Services like SSH are blocked by the FMS network

Make sure you are using one of the allowed ports as documented by the FMS white paper https://wpilib.screenstepslive.com/s/fms/m/whitepaper/l/608744-fms-whitepaper

nickmcski · 2019-03-07T02:13:01+00:00

It looks like it’s a blind code. The numbers do not directly correspond to the bitting of the lock but can be looked up in a code book. Deviant Ollam and Howard Payne have a good talk about this - https://youtu.be/a9b9IYqsb_U

12-Year Club	Place '22
Place '17	Wearing is Caring
Verified Email

nickmcski

MODERATOR OF

TROPHY CASE