adricnet
- Karma
- 138
- Created
- October 23, 2013 (12y ago)
- Submissions
- 0
I've been reading HN for over a year. I now have an account to see what that's like.
More about me at http://adric.net
[ my public key: https://keybase.io/adricnet; my proof: https://keybase.io/adricnet/sigs/pckfHDbj28D371GY2Wvt2EOt5IiEVsGi0L9zdHmjutk ]
Ange Albertini's work on collisions is pretty great and he makes lots of example images and illustrations. https://corkami.github.io/ In particular he works on/with the PoC||GTFO team and is responsible for the MD5…
Probably so, the Security Onion wiki has some recommendations for affordable taps: https://github.com/Security-Onion-Solutions/security-onion/w...
Thanks for the share this looks great! It aligns quite well with the study (in diagrams and commented assembly) of x86 in POC || GTFO starting in pocorgtfo04.pdf chapter 3 provided by Shikhin Sethi.
Thanks for the share. I enjoyed this article and may be able to put some of it to work. I don't quite understand all of the negative responses.
The Nature article and notebooks from a few years back are still pretty good for demos, though everything has updated since then , especially iPython -> Jupyter.…
Over The Wire challenges are awesome. Bandit is very educational and easy to start. Others are quite a bit more challenging.
I do agree. That's actually part of why I called out the language: maintaining balance (as well as not cussing in front of the wrong people) are critical skills for security professionals and sorely lacking in many…
The advice is pretty good overall, but the excessive profanity is unprofessional and distracting. It is interesting that he values "SANS" certifications, but not the courses for them. Besides my own rambling[1] you…
This mirror of a Purism blog post to his personal blog looks pretty interesting but I'm having trouble accessing it on homelinux or puri.sm domains due to reputation. Here's G cache:…
Thank you for sharing this. It was interesting and a bit sad.
_The Week_ is quite good (US or UK). They have people read many of the things you don't have time to (including _The Economist_ :) ) and pull highlights from them across a broad range of topics.
This is an interesting and thought-provoking read. Thank you for posting it.
On Android or iOS or did you mean sign a source release ...? My guess is because of potential friction with reproducible building (for Android) and this for iOS: https://github.com/WhisperSystems/Signal-iOS/issues/1063…
Yes, but that was consumer / education market gear first (iMac) as I recall. More or less back on topic ... I bought a HP Probook for my on-the-road studies/work last cycle because I needed a portable that I could do…
In line with the principle of charity I'd like to point out that your declaration here that network IDS provides only "minor cost savings" is controversial to the point of almost being aggressive towards folks working…
Speaking vaguely on purpose without sources (apologies), the folks who were concerned about weapons targeting a few decades back had no expectation that any part of the greater metropolitan Atlanta area would survive a…
Ah Inferno! Did anyone make any headway porting/redoing the browser plugin to Mozilla? There were some mumblings about GSoC for that not that long ago.
Only one of them requires readwrite system administrator privileges (eg sudo). apt-cache can be run by any user as it doesn't expose any secret data and can't be used to make changes. apt-get can install and uninstall…
Thanks for sharing this! I could wish for some tool use (gdb) screenshots, though really the inspiration to learn is valuable enough. A next read in this vein might be Bug Hunter's Diary by Tobias Klein:…
Keep please and thank you for working on this! This is much more readable on Android/Chrome Moto G, will try more later.
Neat, thanks for posting! Invisible Secrets [http://www.east-tec.com/invisiblesecrets/] has a mode for this that works quite well on HTML source. Rendering is unchanged and you have to be looking at the source and…
I saw World Polio Day XKCD Comic, which wasn't the usual extra joke but is certainly accurate and appropriate an ALT tag. Possibly because I have a FireFox extension just for those, actually:…
The content is available after it is decrypted in a browser on a single host. If the streams are inspectable by network defenses they can be inspected at much more feasible scale allowing one device to protect 10,000s…
Yes, especially when they seem to affect their applications. Automatic updates are easy (mostly). Healthy software and vulnerability management that doesn't damage productivity needlessly can be a lot of work. What do…
This was an interesting and enjoyable quick read. Thanks for posting the link!