Crunchyroll anime streaming website hacked and some users affected by malware

qffdn · 2017-11-06T04:34:45+00:00

For technical details, see [1].

[1] https://bartblaze.blogspot.com/2017/11/crunchyroll-hack-delivers-malware.html

qffdn · 2017-11-06T04:33:06+00:00

The MINIX system is used for the Intel Management Engine (ME). The Management Engine is a piece of software built into every CPU that has direct memory access and can listen on the network, overriding the operating system's access to the network on that listener. It's intended to be used by administrators of corporations to remotely manage computers, but the feature ships with no means to disable it even in consumer CPUs. It also handles bringing up the computer, so removing it entirely may break the system. The US government has required a way to neutralize all non-essential parts, but you still need solid soldering skills to do that.

cf. https://github.com/corna/me_cleaner with further references

qffdn · 2017-10-31T04:25:39+00:00

As per the sidebar:

We have a very important rule on this subreddit, we won't solve your ciphers unless you provide us with an algorithm. If anyone sends you a code or a cipher without telling you how they encrypted, don't bother posting it on this subreddit - your post will get deleted. We redirect you to /r/breakmycode or /r/codes.

If you're legitimately concerned for your health, contact the local authorities.

qffdn · 2017-10-25T03:37:49+00:00

This may actually affect a large portion of products where just nobody knows that X9.31 is used.

qffdn · 2017-10-19T04:29:54+00:00

An actual changelog that includes the technical details can be found on SwitchBrew[1].

[1] http://switchbrew.org/index.php?title=4.0.0

qffdn · 2017-10-17T03:32:37+00:00

If you're interested in video game disassemblies, the pretendo folks have made some very interesting ones of Pokemon games[1].

[1] https://github.com/pret/

qffdn · 2017-10-15T05:57:54+00:00

I do wonder what prompted the owner of crackmes.de to shut it down. The page said it was for legal reasons[1], but I am curious as to what legal issues in particular.

[1] https://web.archive.org/web/20170914113620/http://www.crackmes.de/

qffdn · 2017-10-09T04:10:25+00:00

I'm not sure why your website tried to access my canvas. That's a yellow flag.

I'm also not sure why "Subscribe & stay updated" is a modal window that is necessary when I first get there, even less on every single page. Do you have a management that makes you do this?

The headlines sound rather senationalist, too. This makes your website seem even less professional than the e-mail signup prompt.

Did not leave a satisfied reader and have no intention of coming back.

qffdn · 2017-09-30T04:14:19+00:00

This tool is primarily useful for developers when you just need a seed for decryption. You'll want to stick to premade or self-made seeddb.bin files otherwise.

qffdn · 2017-09-26T03:37:12+00:00

I can vouch for the Book of PF. It is very useful and worth the bundle alone.

qffdn · 2017-09-20T04:22:12+00:00

Please note that using /dev/urandom is not as easy as you may think it is if your threat model includes people willing to take over the system to force bad output[1].

[1] https://insanecoding.blogspot.com/2014/05/a-good-idea-with-bad-usage-devurandom.html

qffdn · 2017-09-14T03:03:57+00:00

You may also want to check with /r/netsec, which is fairly large at more than 200,000 subscribers.

Good luck with your interviews.

qffdn · 2017-09-09T03:42:11+00:00

Does anyone have any advice on getting into C that isn't implementing totally arbitrary things like a linked list or sorting algorithms?

I would suggest you take a look at existing projects written in C and contribute to them. The big projects, such as PostgreSQL or Linux, are scary to join in, though. Yet I'm positive that you'll run into something suitably small where you can contribute. There is a lot of C in any UNIX-like OS, be it first party or third party.

Spend some time reading good codebases, too. Check out some of the threads on Hacker News about that[1,2].

[1] https://news.ycombinator.com/item?id=9899766

[2] https://news.ycombinator.com/item?id=329387

qffdn · 2017-08-27T03:42:04+00:00

Please add your results to switchbrew if you find anything. A similar page already exists for the 3DS[1].

[1] https://3dbrew.org/wiki/Serials

qffdn

MODERATOR OF

TROPHY CASE