Twitter: @HackinOut
That is either by using the "connected version" or loosing the multi devices ability. BTW shouldn't the "connected version" be the one detailed on the home page? Sure sounds more attractive to me.
I wouldn't use a password manager system that doesn't have the ability to change the master password. EDIT: You can't change any password really, without changing all of them (or having a separate master password).…
I can't believe Nigel Farage and a lot of pro Brexit campaigners have been calling it UK's "Independence day". Apart from being a very bad (purposeful?) analogy, it's seems to me pretty disrespectful to their own and to…
It doesn't seems to be iOS 8 only. Recent versions of iOS 7 seem to be fixed as well. (Tested my phone earlier this week)
> (because iOS devices broadcast this when scanning for networks IIRC?) Not anymore, Apple fixed that in recent iOS versions. Probe requests are not divulging SSIDs anymore. However WifiGate uses common SSIDs and…
Good point for Apple. But I wouldn't call having your computer fixed 4 times in ~2 months lucky... Every brand seems to be having reliability problems with their products nowadays (in software as well as hardware). More…
"We have thoroughly investigated this technology and do not find any evidence to substantiate security concerns." http://forums.lenovo.com/t5/Lenovo-P-Y-and-Z-series/Removal-... "This article will be updated with…
Wow... Now Lenovo is "soon" going to explain how to remove this certificate after the "uninstall" in a buried forum post... http://forums.lenovo.com/t5/Lenovo-P-Y-and-Z-series/Removal-...
Not if the proxy checks the certificate of the site it's connecting to and doesn't trust it's own self-signed cert (there is no point in doing so if it's pure adware). But yeah... I have no idea what it does...
Except if the adware just modify OS proxy settings, like madeofpalk mentioned. Firefox does not take those into account.
TheNextWeb does a poor job at reporting technical facts: "[...] its own self-signed certificate authority which effectively allows the software to snoop on secure connections [...]" "[...] the certificate allows the…
Most viruses are identified by their signature only, because most of them are dumb. Heuristics for unknown threats are often there purely for marketing. AVs have all more or less the same signature database due to the…
"Grid fins worked extremely well from hypersonic velocity to subsonic, but ran out of hydraulic fluid right before landing." "Upcoming flight already has 50% more hydraulic fluid, so should have plenty of margin for…
I would expect that even if it wasn't mentioned, I mean it's a freaking internet access in a fast moving object 30,000 feet above ground! I don't like what Gogo just did, but kudos for undertaking this challenge.…
Sounds like good news. I can understand why they would choose amazon payments since amazon has more credit cards on file than anybody else including Paypal. But Amazon payments or Paypal (I am not referring to their…
Back to the Future was slightly off :) I love electric vehicles of all sorts, let's enjoy them to the fullest, the hoverboard will be there soon enough.
According to tweet author[1], this happened only with Youtube, and was not related to captive portal mechanism whatsoever. So I would side with her on the why: Poor plane internet access was overloaded by videos…
Well they would be facing the unforeseen consequences while not even filtering the HTTP host header (the youtube page is displayed). Unless they forgot to disable the MITM once the user is granted full internet…
it doesn't redirect to the signup page. i believe it's to throttle streaming, but there are better ways to do it https://twitter.com/__apf__/status/551132865555996673 EDIT: Still from same author: no, had already been…
I think "Phase 3" is indeed too much. I would think this tool would be more useful for "simple" MITM than for PSK phishing.
WPS push button and WPS PIN are two separate features. If you only have WPS Push Button enabled you are not vulnerable.
You only need to decrypt once the payment has been received, so the private key doesn't need to be sent to the infected machine before that. Encrypt/Decrypt, it seems to be a moot point. The "decrypt one file for free"…
Apparently CryptoWall does a dumb copy of the files before encrypting them and do not zero-out after deleting. If it still proceeds this way, that makes it fairly easy to do some recovery. Source:…
Same code for Chrome 39.0.2171.95 on Windows...
Yesterdays's HN discussion about this: https://news.ycombinator.com/item?id=8806394
That is either by using the "connected version" or loosing the multi devices ability. BTW shouldn't the "connected version" be the one detailed on the home page? Sure sounds more attractive to me.
I wouldn't use a password manager system that doesn't have the ability to change the master password. EDIT: You can't change any password really, without changing all of them (or having a separate master password).…
I can't believe Nigel Farage and a lot of pro Brexit campaigners have been calling it UK's "Independence day". Apart from being a very bad (purposeful?) analogy, it's seems to me pretty disrespectful to their own and to…
It doesn't seems to be iOS 8 only. Recent versions of iOS 7 seem to be fixed as well. (Tested my phone earlier this week)
> (because iOS devices broadcast this when scanning for networks IIRC?) Not anymore, Apple fixed that in recent iOS versions. Probe requests are not divulging SSIDs anymore. However WifiGate uses common SSIDs and…
Good point for Apple. But I wouldn't call having your computer fixed 4 times in ~2 months lucky... Every brand seems to be having reliability problems with their products nowadays (in software as well as hardware). More…
"We have thoroughly investigated this technology and do not find any evidence to substantiate security concerns." http://forums.lenovo.com/t5/Lenovo-P-Y-and-Z-series/Removal-... "This article will be updated with…
Wow... Now Lenovo is "soon" going to explain how to remove this certificate after the "uninstall" in a buried forum post... http://forums.lenovo.com/t5/Lenovo-P-Y-and-Z-series/Removal-...
Not if the proxy checks the certificate of the site it's connecting to and doesn't trust it's own self-signed cert (there is no point in doing so if it's pure adware). But yeah... I have no idea what it does...
Except if the adware just modify OS proxy settings, like madeofpalk mentioned. Firefox does not take those into account.
TheNextWeb does a poor job at reporting technical facts: "[...] its own self-signed certificate authority which effectively allows the software to snoop on secure connections [...]" "[...] the certificate allows the…
Most viruses are identified by their signature only, because most of them are dumb. Heuristics for unknown threats are often there purely for marketing. AVs have all more or less the same signature database due to the…
"Grid fins worked extremely well from hypersonic velocity to subsonic, but ran out of hydraulic fluid right before landing." "Upcoming flight already has 50% more hydraulic fluid, so should have plenty of margin for…
I would expect that even if it wasn't mentioned, I mean it's a freaking internet access in a fast moving object 30,000 feet above ground! I don't like what Gogo just did, but kudos for undertaking this challenge.…
Sounds like good news. I can understand why they would choose amazon payments since amazon has more credit cards on file than anybody else including Paypal. But Amazon payments or Paypal (I am not referring to their…
Back to the Future was slightly off :) I love electric vehicles of all sorts, let's enjoy them to the fullest, the hoverboard will be there soon enough.
According to tweet author[1], this happened only with Youtube, and was not related to captive portal mechanism whatsoever. So I would side with her on the why: Poor plane internet access was overloaded by videos…
Well they would be facing the unforeseen consequences while not even filtering the HTTP host header (the youtube page is displayed). Unless they forgot to disable the MITM once the user is granted full internet…
it doesn't redirect to the signup page. i believe it's to throttle streaming, but there are better ways to do it https://twitter.com/__apf__/status/551132865555996673 EDIT: Still from same author: no, had already been…
I think "Phase 3" is indeed too much. I would think this tool would be more useful for "simple" MITM than for PSK phishing.
WPS push button and WPS PIN are two separate features. If you only have WPS Push Button enabled you are not vulnerable.
You only need to decrypt once the payment has been received, so the private key doesn't need to be sent to the infected machine before that. Encrypt/Decrypt, it seems to be a moot point. The "decrypt one file for free"…
Apparently CryptoWall does a dumb copy of the files before encrypting them and do not zero-out after deleting. If it still proceeds this way, that makes it fairly easy to do some recovery. Source:…
Same code for Chrome 39.0.2171.95 on Windows...
Yesterdays's HN discussion about this: https://news.ycombinator.com/item?id=8806394