hybridfree/eevblog-posts huggingface dataset:
covert campaign utilizing SOHO routers: ZuoRAT - Page 1
Forum section: electronics / general

author: madires
author_rank: Super Contributor
timestamp: June 30, 2022, 10:16:09 am
content: An interesting read about how a covert campaign works: ZuoRAT Hijacks SOHO Routers to Silently Stalk Networks (https://blog.lumen.com/zuorat-hijacks-soho-routers-to-silently-stalk-networks/)

author: magic
author_rank: Super Contributor
timestamp: June 30, 2022, 01:38:19 pm
content: Well, yeah. Worms infecting SOHO routers have been a thing for over a decade, as I learned by logging telnet login attempts from other users on the same ISP. I always knew there are going to be botnets running on those boxes.QuoteAmericans
supply chain attack via FishPig (Magento 2 modules) - Page 1
Forum section: electronics / general

author: madires
author_rank: Super Contributor
timestamp: September 15, 2022, 01:01:22 pm
content: Online shops using FishPig's Magento 2 modules need to check if they are infected:- Magento vendor Fishpig hacked, backdoors addedhttps://sansec.io/research/rekoobe-fishpig-magento- Security Announcementshttps://fishpig.co.uk/security-announcements/#X20220913
Yahoo (Ex SKY) email and Thunderbird - Page 1
Forum section: electronics / general

author: imk
author_rank: Regular Contributor
timestamp: March 20, 2022, 06:56:33 pm
content: Hello,Probably worst or best place to ask this question: Does anyone have a Yahoo email account working with Thunderbird 91.7I have couple of email accounts gmail and an old'ish Sky account that was moved to yahoo.These two both worked with Outlook 2007 that i used until today.While ago Sky/Yahoo said no more ancient Outlook support.When it stopped working I removed the Sky/Yahoo email from outlook and carried on with the gmail.Now i get a email from google saying in May 2022 gmail going to use something called Auth2 or the like and it won't work with ancient Outlook.So had a google and found Thunderbird has future email security support, downloaded Thunderbird and setup my gmail account in two ticks, FIVE STAR EASY.Then spent good hour trying to setup my old Sky/Yahoo email in Thunderbird and just gave up :-(Read and Read and Read how to guides but none work for me.Hence, my question does anyone out there have Thunderbird working with Sky/Yahoo email please?If so I'll try again, many thanks imk

author: PKTKS
author_rank: Super Contributor
timestamp: May 04, 2022, 07:43:36 am
content: Yes i do. And works fine with IMAP and POP as long as you set oauth these days...Oauth came to literally lock every user into the email service by API loginInternet services are being privatized google will also require oauth..All mailer readers will be applets . The poll daemos are likely to be excluded...But they work for nowPaul
A way to extend inactivity period of PC before auto logout occurs. - Page 1
Forum section: electronics / general

author: peteb2
author_rank: Regular Contributor
timestamp: May 03, 2022, 02:21:33 am
content: Situation:. All the service manual data i need to use to fault find & repair something is now accessible on my Laptop once i am Logged in. The issue is that under 2 minutes if there is inactivity from the keyboard i am auto logged out & it's a massive hassle to login again. There are thousands of silly things to make your mouse permanently making calls on a system etc so the computer does not log me out but i have never made them work reliably.All i ask for is a 10min or longer if possible period so i can do my work! Forget I.T., they decree the 2minutes and just do not care for a logical argument.So any ideas would be good, perhaps a dippy bird tap a key on the Laptop to fake activity or a solenoid clicking a key....? Violation maybe but seriously i can't get far in any reasonable way & have already been tagged for printing out a 20 page document! Apologies if this is elsewhere, my searches never found anything, probably poor word choice. TAI.

author: Algoma
author_rank: Frequent Contributor
timestamp: May 03, 2022, 03:14:03 am
content: Is this a windows system joined to a domain? The setting is likely defined by the active directory group policy, set by the system administration. ultimately it simply modifies a value in the local registry periodically. If you have local admin access you can setup a script to reset the value often enough to keep the group policy out. Or see if you can define your own setting in your local security policy of your local system.Otherwise the local control of logout times are defined within the screensaver setting, or the power settings in the control panel. (If these values are not defined in local security policy, or active directory group policy.) There is even azure Intune policies at an even higher level. It depends on how much control you have..Lacking any control... Use a portable boot drive and boot your own operating system. Though be certain to stay within your company use policy, and mindful of security.

author: Someone
author_rank: Super Contributor
timestamp: May 03, 2022, 03:42:02 am
content: Quote from: peteb2 on May 03, 2022, 02:21:33 amNever had a problem with software based solutions, but if you cant get them to work (or cant install software) then there are hardware versions that look like a mouse to the computer "Mouse Jiggler".

author: peteb2
author_rank: Regular Contributor
timestamp: May 03, 2022, 04:23:56 am
content: Yes, the act of installing anything to mouse jiggle is impossible. There is a allowable window of specific files & even programs but such a script would be a serious no! This far i'm thinking a 555 firing a micro sized solenoid to tap on a key or something that will keep the usb mouse constantly in bright LED status is another option but i haven't the foggy of a clue...

author: Jeroen3
author_rank: Super Contributor
timestamp: May 03, 2022, 05:45:42 am
content: Is "Presentation Mode" available?Windows+X -> Mobility Center -> Presentation Settings.
250+ HP printer models need updates - Page 1
Forum section: electronics / general

author: madires
author_rank: Super Contributor
timestamp: March 22, 2022, 03:34:20 pm
content: CVE-2022-3942--https://support.hp.com/us-en/document/ish_5948778-5949142-16/hpsbpi03780CVE-2022-24291, CVE-2022-24292 and CVE-2022-24293-https://support.hp.com/us-en/document/ish_5950417-5950443-16/hpsbpi03781
BLE relay attacks - Page 1
Forum section: electronics / general

author: madires
author_rank: Super Contributor
timestamp: May 18, 2022, 11:20:25 am
content: Using BLE without any additional measures as authentication token or key for buildings, cars and other things is a bad idea. The standard even warns about this. But some specialists think they are smart ...Security researcher's marketing post:Technical Advisory – BLE Proximity Authentication Vulnerable to Relay Attacks (https://research.nccgroup.com/2022/05/15/technical-advisory-ble-proximity-authentication-vulnerable-to-relay-attacks/)And a more practical approach to get a Tesla for free:Hackers can steal your Tesla Model 3, Y using new Bluetooth attack (https://www.bleepingcomputer.com/news/security/hackers-can-steal-your-tesla-model-3-y-using-new-bluetooth-attack/)
the dark side of law enforcement and trojans - Page 1
Forum section: electronics / general

author: madires
author_rank: Super Contributor
timestamp: February 21, 2022, 03:26:51 pm
content: ModifiedElephant APT and a Decade of Fabricating Evidence:https://www.sentinelone.com/labs/modifiedelephant-apt-and-a-decade-of-fabricating-evidence/

author: SiliconWizard
author_rank: Super Contributor
timestamp: February 22, 2022, 07:41:02 pm
content: That's pretty bad.

author: rsjsouza
author_rank: Super Contributor
timestamp: February 22, 2022, 10:04:46 pm
content: That is quite bad, but certainly not exclusive to India. States use similar techniques to incriminate their own dissident citizens all around...

author: SiliconWizard
author_rank: Super Contributor
timestamp: February 22, 2022, 11:54:31 pm
content: Indeed.
NAS DeadBolt hits.. - Page 1
Forum section: electronics / general

author: PKTKS
author_rank: Super Contributor
timestamp: February 22, 2022, 03:27:57 pm
content: So far at least 2 commercial NAS are already wo hope if attacked.The attack is 100% encrypt efficient and ...That iswhyi run my own NAS based on my trusted sources...https://www.guru3d.com/news-story/asustor-nas-getting-hit-by-ransomware.htmlPaul
Black box Bricks ahead - Page 1
Forum section: electronics / general

author: PKTKS
author_rank: Super Contributor
timestamp: February 27, 2022, 11:35:25 am
content: Considering the latest trends and events where the money has beeninvestedIt is more than expected to havefully bricked x86 Intel gizmosahead..Multi cores available.. dead sure with TCP/IP stacks and 100% locked by firmware..Added up to all their effort in paving the way to the "licensees" daemons for their own distro of *NIX... lets say at least a disguise for the underlying all closed things..https://www.intel.com/content/www/us/en/developer/articles/technical/universal-scalable-firmware.htmlPhoronix has interesting links and do not miss the comments...https://www.phoronix.com/scan.php?page=news_item&px=Intel-USF-FSP-3.0-Less-OSFhttps://www.phoronix.com/forums/node/1311150Lovely I am hoping to ditch anything x86 .. Intel NV ,..I would say these are a"handsoff"from our proprietary WinIntel/NV hardwareSince when security by black-box obscurity is a new thing...Paul
Firefox Bug 1763632 (or: how to not fix a security issue) - Page 1
Forum section: electronics / general

author: madires
author_rank: Super Contributor
timestamp: May 28, 2022, 03:53:30 pm
content: I've just stumbled across this masterpiece of ignorance:https://bugzilla.mozilla.org/show_bug.cgi?id=1763632WIth a little bit DNS tweaking of IPv4 and IPv6 addresses you can hijack connections to specific websites when the victim has only IPv4 internet access.

author: Nominal Animal
author_rank: Super Contributor
timestamp: May 28, 2022, 04:09:27 pm
content: Does not surprise me a single bit.

author: PKTKS
author_rank: Super Contributor
timestamp: May 31, 2022, 02:58:34 pm
content: Quote from: Nominal Animal on May 28, 2022, 04:09:27 pmnah... more than expected... given the plethora of stuff piled in browsers...an enormous JavaScript engine to track adds and users...I am surprised if that thing does nothasat least a dozen leaks flaws bugs.. direct ports...That kind of think does not worry me anymore..As long as I can preserve restore my tools and keep things working as they should.. (at least)The rest... same old miserable buz of before.. no surprisesPaul

author: bd139
author_rank: Super Contributor
timestamp: May 31, 2022, 04:06:17 pm
content: HTTP/2 implementation flaw. Am not surprised. It’s too complicated.This one doesn’t worry half as much as some of the architectural failures of Firefox and the platform ports.
CVE-2021-45608 (NetUSB RCE flaw) - Page 1
Forum section: electronics / general

author: madires
author_rank: Super Contributor
timestamp: January 17, 2022, 10:07:05 am
content: CVE-2021-45608 | NetUSB RCE Flaw in Millions of End User Routers (https://www.sentinelone.com/labs/cve-2021-45608-netusb-rce-flaw-in-millions-of-end-user-routers/)In most cases it should possible to add firewall rules to prevent access from the WAN (block TCP port 20005).

author: SiliconWizard
author_rank: Super Contributor
timestamp: January 17, 2022, 06:05:13 pm
content: Looked at the code - as expected, mind-boggingly careless. And it's basically down to "input validation" not handled appropriately, one of my pet peeves in software.
SMART GUNS arrived.... - Page 1
Forum section: electronics / general

author: PKTKS
author_rank: Super Contributor
timestamp: January 11, 2022, 02:16:01 pm
content: not sure if this is good bad or insane...I like the idea.. but not the madhouse worldWho will control the logging and safety guards?CLOUD assholes ? Big corps? WTF who protects whom ?https://www.reuters.com/technology/exclusive-smart-guns-finally-arriving-us-seeking-shake-up-firearms-market-2022-01-11/A chip ? a wifi link? wtf who will be on charge.. of the triggerPaul

author: magic
author_rank: Super Contributor
timestamp: January 11, 2022, 03:40:35 pm
content: QuoteThat's gonna be handy in self-defense situations

author: SiliconWizard
author_rank: Super Contributor
timestamp: January 11, 2022, 06:33:34 pm
content: Very nice in case of emergency. "Stop or I'm gonna shoot!! But wait a sec, I have to dial in the PIC code first."

author: David Hess
author_rank: Super Contributor
timestamp: January 11, 2022, 08:47:52 pm
content: State laws so far exclude law enforcement from smart gun and approved gun requirements, so I wonder why they think that is even a market.

author: SiliconWizard
author_rank: Super Contributor
timestamp: January 12, 2022, 06:29:47 pm
content: Because it's yet another one of those startups that just eat cash and move on?https://lodestarworks.com/https://pitchbook.com/profiles/company/434421-46

author: Bud
author_rank: Super Contributor
timestamp: January 12, 2022, 07:42:23 pm
content: "OK Alexa, shoot that bad guy now!"

author: David Hess
author_rank: Super Contributor
timestamp: January 12, 2022, 08:09:56 pm
content: TheCalifornia approved handgun safecomes to mind.
Your antivirus software comes with a cryptominer (Norton and Avira) - Page 1
Forum section: electronics / general

author: madires
author_rank: Super Contributor
timestamp: January 09, 2022, 03:35:02 pm
content: Yep! It's a feature and it's opt-in:- Norton 360 Now Comes With a Cryptominer (https://krebsonsecurity.com/2022/01/norton-360-now-comes-with-a-cryptominer/)- 500M Avira Antivirus Users Introduced to Cryptomining (https://krebsonsecurity.com/2022/01/500m-avira-antivirus-users-introduced-to-cryptomining/)The next one could be Avast as NortonLifeLock is also acquiring that company.

author: SiliconWizard
author_rank: Super Contributor
timestamp: January 09, 2022, 06:45:16 pm
content: Quote

author: golden_labels
author_rank: Super Contributor
timestamp: January 10, 2022, 07:23:58 am
content: Imagine giving away control over configuration of your system to tens of different entities, being treated as free canary to warn AV company’s customers about threats, your computer used to farm files, often agreeing to give away your privacy, using completely unauditable software… and then complaining about a plausible oversight regarding a program that you explicitly asked to be run on your computer and get paid for running it.I wonder what level of ignorance one has to achieve to even consider that miner to be worth mentioning.

author: mfro
author_rank: Regular Contributor
timestamp: January 10, 2022, 07:50:41 am
content: April, already?

author: tszaboo
author_rank: Super Contributor
timestamp: January 10, 2022, 08:51:50 am
content: Ethereum, really? You might as well just use a space heater, that will make you the same amount of profit.A ETH transaction costs around 25-75 USD, and a quite recent GTX1080 graphics card is going to make you something like 1.5 USD a day.So in about two months, while running constantly, you might have enough just to pay for one transaction. You need two transactions to pay out your earnings into your wallet, and then transfer it to an exchange.PoW crypto needs to end. It is the most wasteful usage of the available resources that we can think of.And Norton, shame on you.
CrowdStrike has a problem with vulnerability disclosures - Page 1
Forum section: electronics / general

author: madires
author_rank: Super Contributor
timestamp: August 22, 2022, 11:58:20 am
content: Ridiculous vulnerability disclosure process with CrowdStrike Falcon Sensor:https://www.modzero.com/modlog/archives/2022/08/22/ridiculous_vulnerability_disclosure_process_with_crowdstrike_falcon_sensor/index.htmlSo CrowdStrike tries to force you into a bug bounty program including an NDA to control the whole disclosure process (and you).

author: Nominal Animal
author_rank: Super Contributor
timestamp: August 22, 2022, 02:54:07 pm
content: Any bets on whether CrowdStrike will try a DMCA takedown on that modzero link?You know, as a "vulnerability mitigation strategy". "If our clients don't know about it, the vulnerability does not exist."
Windows 7 refuses to start  Agilent License Service - Page 1
Forum section: electronics / general

author: Jester
author_rank: Frequent Contributor
timestamp: January 13, 2022, 09:21:36 pm
content: I'm trying (for hours now) to get my PC to talk to Agilent instruments via 82357B USB to GPIB adapter, this worked in the past but not anymore.The problem seems to be that Windows refuses to start the Agilent License Service.The windows error message I get is Error 1068: The dependency service or group failed to start.I have tried the following so far1) I reinstalled Keysight I/O suite2) Reinstalled NI VISA stuff and 56 gazzilion terra bytes of other crap while doing so3) Changed the default VISA to the NI version, also have Keysight and TEK, they are now disabled.4) Tried starting the license server both automatically during startup and manualy using services5) Enabled some other services for example Net.Tcp etc because google searches stated this fixed this in some cases.6) Rebooted too many timesEDIT This is resolved, had to uninstall a bunch of old 2017 Keysight license files etc.
USB Stick that detects wifi deauthing attacks. [video] - Page 1
Forum section: electronics / general

author: Ed.Kloonk
author_rank: Super Contributor
timestamp: November 30, 2021, 09:54:36 am
content: What do you think?https://odysee.com/@seytonic:c/i-made-a-usb-stick-that-detects-wifi:b

author: Nominal Animal
author_rank: Super Contributor
timestamp: December 01, 2021, 03:51:43 am
content: It is an USB WiFi dongle, which also provides information (probably using a separate USB endpoint) whenever it receives (or sends) a WiFi deauth frame.In Linux (including OpenWRT-based routers), that functionality could simply be added towpa_supplicant(if not already added, I haven't checked). Basically, it's only a little bit of additional code to the deauthentication code path.
gps-daemon-gpsd-rollover-bug - Page 1
Forum section: electronics / general

author: bingo600
author_rank: Super Contributor
timestamp: October 22, 2021, 04:04:49 pm
content: From timenutshttps://us-cert.cisa.gov/ncas/current-activity/2021/10/21/gps-daemon-gpsd-rollover-bug/Bingo
INFRA:HALT - vulnerabilities in NicheStack (TCP/IP stack) - Page 1
Forum section: electronics / general

author: madires
author_rank: Super Contributor
timestamp: August 04, 2021, 12:12:59 pm
content: 14 critical vulnerabilities found in NicheStack (TCP/IP stack) and 200+ vendors effected, a lot of PLCs.https://www.forescout.com/research-labs/infra-halt/

author: NiHaoMike
author_rank: Super Contributor
timestamp: August 06, 2021, 03:25:52 am
content: Yet another example of security through obscurity failing in the long run.

author: mrflibble
author_rank: Super Contributor
timestamp: September 08, 2021, 08:35:09 pm
content: Quote from: madires on August 04, 2021, 12:12:59 pmJust for the fun of it gave the research report a quick scan. Buffer overflow and lack of input validation is still pretty popular, tsk tsk. At least this one is a bit more amusing:"Whenever an unknown HTTP request is received, a panic is invoked."Reminds me of Novell servers in the previous millennium, where you could crash the entire server by a simple telnet to port 25.
CVE-2021-22156 QNX - Page 1
Forum section: electronics / general

author: madires
author_rank: Super Contributor
timestamp: August 19, 2021, 01:13:57 pm
content: BadAlloc Vulnerability Affecting BlackBerry QNX RTOS:https://us-cert.cisa.gov/ncas/alerts/aa21-229aThis one will be another patching nightmare as many devices run QNX.
iPad IOS14.6 Safari bookmark "changed"! - Page 1
Forum section: electronics / general

author: PerranOak
author_rank: Frequent Contributor
timestamp: July 19, 2021, 07:18:12 am
content: I have the BBC Weather website for my area as a bookmark on favourites and have had it, unchanged, for years.Today when I clicked on it an IOS message came up warning that this was an insecure site and I should close it. The web address was a great long one - not the normal one. In my idiotic panic I deleted it without noting the address.I force-closed Safari and cleared all website data.How could this happen? Does it mean I have a virus or something?Cheers.

author: Just_another_Dave
author_rank: Regular Contributor
timestamp: July 19, 2021, 08:06:20 pm
content: If you have synchronization with other devices activated, it might be possible that some plugin has changed the url (some nasty plugins added by adware programs change things like your default search engine without asking, so it won’t surprise me if there’s one that changes your favorites to force you to watch some ads before being able to access them). However, safari for iPadOS does not support plugins, as far as I knowAnother possibility could be that safari had redirected you to another website to show you the warning as some antivirus like McAffee do. Before panicking, check if more favorites have been affected and if accessing that website from google or writing its url also shows that warning. If it always warn you and the rest of favorites are ok, it might be a problem of the bbc websiteVirus don’t usually affect a single url or file, specially when it isn’t one related to a bank, social network or store (the bbc website does not seem a good target for stealing your money)

author: PerranOak
author_rank: Frequent Contributor
timestamp: July 20, 2021, 10:36:11 am
content: It’s only synced with an iPhone and I didn’t try that before deleting and re-establishing the bookmark!The other bookmarks seem ok although the uk rail one refused to load because of excessive redirects.Nothing else seems odd.Can you check an iPad for viruses, etc.?

author: Just_another_Dave
author_rank: Regular Contributor
timestamp: July 20, 2021, 10:08:56 pm
content: I thought that there weren’t antiviruses available in the App Store, but according to this website there are a few ones:https://cybernews.com/best-antivirus-software/antivirus-for-iphone/. However, I haven’t tested any of them, so I’m not sure about how good they areNevertheless, Apple supposedly checks every app that gets listed in the App Store so a single warning might just be a false positive
Ricoh SP201n Toner Cartrage Hacking - Page 1
Forum section: electronics / general

author: TheEPROM9
author_rank: Frequent Contributor
timestamp: June 29, 2021, 10:20:50 pm
content: A good few years ago now I hacked & reveced engineered the chip on my printer cartrage so I could reprogram it & not have to but the official expensive toner. Well I need somewhere to host the .bin files, so why not hereThat why others with the same printer can hack theres.
[solved] Where from comes this user "message+"? - Page 1
Forum section: electronics / general

author: RoGeorge
author_rank: Super Contributor
timestamp: June 29, 2021, 09:19:13 am
content: When I run 'top' I see a user "message+" running dbus-daemon. This pops in and out shortly at each 2-3 seconds. I don't recall seeing it before. Googled and couldn't find any answers.Anybody knows where this user message+ comes from, or what to run to find out more about it?Code:PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND...1499 message+ 20 0 8884 5824 3904 S 0.3 0.0 0:16.91 dbus-daemon...OS Kubuntu 20.04 LTS.

author: sleemanj
author_rank: Super Contributor
timestamp: June 29, 2021, 09:48:37 am
content: I expect that "+" means that it's truncated for display space, and that this is the "messagebus" user.

author: bitwelder
author_rank: Super Contributor
timestamp: June 29, 2021, 09:57:28 am
content: To show a longer field for the username you can use a custom format for the 'ps' command, e.g.:ps ax o user:16,pid,pcpu,pmem,vsz,rss,stat,start_time,time,cmd

author: RoGeorge
author_rank: Super Contributor
timestamp: June 29, 2021, 10:19:49 am
content: Message+ is messagebus indeed, thank you!Quote
Another NSA fail :( - Page 1
Forum section: electronics / general

author: madires
author_rank: Super Contributor
timestamp: February 24, 2021, 02:40:37 pm
content: Do you remember Shadow Brokers, EternalBlue, WannaCry and NotPetya? Chinese hackers helped themselves too:The Story of Jian – How APT31 Stole and Used an Unknown Equation Group 0-Dayhttps://research.checkpoint.com/2021/the-story-of-jian/TL;DR: the NSA gave Chinese hackers the tool to hack Lockheed Martin.

author: james101
author_rank: Contributor
timestamp: May 04, 2021, 03:51:19 am
content: its amazing how these company have there system onlineevery system is crack-able.best way to keep data safe is a kill switch no outside connections.

author: coromonadalix
author_rank: Super Contributor
timestamp: May 06, 2021, 12:40:40 am
content: no accessible usb ports, no floppy, no cd-dvd writer and physically blocked (non removable) keyboard and mouse port, anti theft screws on the computer caseand yes no outside connections.
Water system hack--this could have been REAL bad... - Page 1
Forum section: electronics / general

author: rgarito
author_rank: Regular Contributor
timestamp: February 09, 2021, 02:21:04 am
content: They apparently were using TeamViewer.... Not exactly the best remote access system...https://www.wired.com/story/oldsmar-florida-water-utility-hack/

author: NiHaoMike
author_rank: Super Contributor
timestamp: February 09, 2021, 02:35:08 am
content: If the Teamviewer app is the one that is supposed to have the "security fix", it definitely belongs in the dodgy technology section...

author: JohnnyMalaria
author_rank: Super Contributor
timestamp: February 09, 2021, 03:16:46 am
content: Dear WIRED reporter - what is PH? Is it like pH but louder?

author: rgarito
author_rank: Regular Contributor
timestamp: February 09, 2021, 03:47:19 am
content: Quote from: NiHaoMike on February 09, 2021, 02:35:08 amAs someone who works in the industry, based on the above statement you can move most discussion about security software into the dodgy technology section... You would have nightmares if you saw the things I see every day

author: CatalinaWOW
author_rank: Super Contributor
timestamp: February 09, 2021, 05:30:05 am
content: With some exceptions any lock is pickable and any code is breakable. There should be some really deep thought put into whether the convenience of remote access is worth the risk. While some systems are more secure than others I think experts in the area would agree that none are absolutely risk free.A lot of systems have been made accessible without any thought of how many crazy and/or malevolent people there are in the world.

author: BradC
author_rank: Super Contributor
timestamp: February 09, 2021, 06:20:37 am
content: Quote from: CatalinaWOW on February 09, 2021, 05:30:05 amI have this discussion on a daily basis. Private enterprise clients are gradually coming around to air-gapping the security systems and the de-converging of IT and OT networks. Government clients on the other hand ....I had the services manager of one of our larger building companies tell me "Daahhhnt worry Brad, it'll never 'appen".

author: james101
author_rank: Contributor
timestamp: May 04, 2021, 03:33:19 am
content: TeamViewer is a system you do not trust at all its flaw.if you have this on any systems remove it.there are ways to sign onto anyone machine that is using teamviewerdoes not matter if they dont know your ip address and password.
Colonial Pipeline ransomware attack - Page 1
Forum section: electronics / general

author: AlbertL
author_rank: Regular Contributor
timestamp: May 12, 2021, 08:50:41 pm
content: Looks like this will be the one that really focuses public attention on cybersecurity, due to the highly visible and widespread disruptions it's causing.

author: Gyro
author_rank: Super Contributor
timestamp: May 12, 2021, 09:19:57 pm
content: Apparently they didn'tmeanto shut the pipeline down though.... So there's that.https://www.bbc.co.uk/news/business-57050690

author: TimFox
author_rank: Super Contributor
timestamp: May 12, 2021, 10:32:39 pm
content: This looks to me as another example of the basic incentive problem for critical utilities:If the only penalty to the company for insufficient investment in safety or reliability is a loss of income during the disruption, there is no incentive to invest heavily against a rare or unlikely situation. A similar problem: Blizzards hit Texas only every 10 years or so, so why spend large sums on winterization of facilities?
Progress in breaking the RSA crypto? - Page 1
Forum section: electronics / general

author: BU508A
author_rank: Super Contributor
timestamp: March 03, 2021, 09:13:10 am
content: Hello,it seems, that there is some progress in factoring integers.Screenshot from the abstract:The paper itself can be found here:https://eprint.iacr.org/2021/232.pdfEdit:newer version of the draft from March 2020https://www.math.uni-frankfurt.de/~dmst/teaching/WS2019/SVP9.pdfWebsite:https://www.math.uni-frankfurt.de/~dmst/teaching/WS2019/vorlesung.html
Someone trying to hack my EEVblog account - Page 1
Forum section: electronics / general

author: jpb
author_rank: Super Contributor
timestamp: February 09, 2021, 09:26:39 pm
content: I had multiple emails from EEVblog today - the first saying someone (not me) had instigated a forgotten password request.Then there was about 5 or 6 for failed log-in attempts.Slightly worrying - presumably someone wants an established account to perhaps do some scamming on for sale or for some other nefarious reason.Has anyone else had their account attacked?

author: JohnnyMalaria
author_rank: Super Contributor
timestamp: February 09, 2021, 09:51:05 pm
content: It could be they had the username wrong. There are a lot of j** members.

author: jpb
author_rank: Super Contributor
timestamp: February 10, 2021, 06:46:07 pm
content: Thanks. Hopefully you're right, I'm perhaps a little paranoid/cautious. I upgraded my password from the previously rather simple but memorable one just in case.

author: AntiProtonBoy
author_rank: Frequent Contributor
timestamp: February 11, 2021, 01:10:56 am
content: you'll be fine, just ignore the request

author: S. Petrukhin
author_rank: Super Contributor
timestamp: February 11, 2021, 11:32:40 am
content: jpb, are you married?
Buffer overflow in sudo - Page 1
Forum section: electronics / general

author: BU508A
author_rank: Super Contributor
timestamp: January 27, 2021, 03:25:05 pm
content: There is a buffer overflow in sudo. I recommend to update it to the newest version.https://www.sudo.ws/alerts/unescape_overflow.html

author: Ed.Kloonk
author_rank: Super Contributor
timestamp: February 01, 2021, 08:01:48 am
content: Quote from: BU508A on January 27, 2021, 03:25:05 pmOr 'do' yourself a favor and run doas instead.doas gives you root access without all the bloat that is in sudo that has features only for permission maniacs.

author: Halcyon
author_rank: Unknown
timestamp: February 04, 2021, 01:36:38 am
content: Why bother changing to a whole new way of doing things when the problem has been fixed?

author: Ed.Kloonk
author_rank: Super Contributor
timestamp: February 04, 2021, 02:41:22 am
content: Quote from: Halcyon on February 04, 2021, 01:36:38 amMost people just want to elevate to root. Both progs can do it but doas doesn't contain all the bloat that sudo does.

author: Nominal Animal
author_rank: Super Contributor
timestamp: February 04, 2021, 01:29:10 pm
content: Quote from: Ed.Kloonk on February 04, 2021, 02:41:22 amIt's good for there to be more than one way, anddoashas been designed to do almost all that sudo does. "Just elevate to root" is how many end users use it, but its true purpose is to switch between differently-privileged user accounts.Unfortunately, it hasn't been packaged for Debian or Debian derivatives yet, and actually needs a bit of work to work with Linux PAM. Fortunately,OpenDoasseems to be progressing nicely, although I haven't pored through the code myself.(I've done quite a bit of work wrt. privilege separation via sudo, filesystem capabilities in Linux, and Apache SuEXEC mechanism. They are rather large hammers for things that often could be done better (more securely and robustly) via other ways... Just don't get me started on the assumptions of the Apache SuEXEC mechanism and how it propagates a nonsensical view of proper privilege separation for web services.)
Just installed program, now Bing was made default for search/context - Page 1
Forum section: electronics / general

author: MathWizard
author_rank: Super Contributor
timestamp: November 15, 2020, 05:18:46 am
content: I installed utorrent tonight, and jumped 2 hooop's to avoid adware/malware, but right away, firefox wants to search on Bing, which I rarely use.After a very quick check in ccleaner, I don't see anything referring to bing.....Whats the easist and/or best way to get rid of these things and undo the changes, besides not DL it?

author: Rerouter
author_rank: Super Contributor
timestamp: November 15, 2020, 05:25:04 am
content: uninstall the latest and go to an older version before the crap started being shoved into it, e.g. 2.2.1

author: MathWizard
author_rank: Super Contributor
timestamp: November 15, 2020, 05:29:18 am
content: I have versions from the last few years, but as usual, I just DLed the latest. Thanks, but will that undo the firefox changes ?In the past, I've fixed FF, but I don't remember how, or what/where/why

author: Lindley
author_rank: Regular Contributor
timestamp: November 15, 2020, 09:59:57 am
content: Click on the menu icon, the three bars on the top right hand side of the screen, Select Options, then Search, and select the Search engine you want.
HID SmartCard - How to encrypt files - Page 1
Forum section: electronics / general

author: NY2KW
author_rank: Regular Contributor
timestamp: May 08, 2020, 07:58:07 pm
content: I had to get an secure email through IdenTrust with my personal certificate. No problem there. Now I'm thinking how could I use this to encrypt specific files or folders on my PC. I don't want to do the whole drive with Bitlocker and I want the flexibility of taking these filers to another PC and using my smart-card for secure access. I googled and was surprised to see no simple software for personal smart-card use of this type. Any advice appreciatedJerry

author: electrolust
author_rank: Unknown
timestamp: September 11, 2020, 06:48:03 pm
content: this can't be done.

author: NY2KW
author_rank: Regular Contributor
timestamp: September 11, 2020, 09:54:58 pm
content: Thanks, finally got a reply. Could you explain a bit as to why not? Would be educational for me and others

author: electrolust
author_rank: Unknown
timestamp: September 15, 2020, 06:22:23 pm
content: Smartcards are a purpose made device. They run only very specific applications. The application that would be installed on an identity card can only do signatures. You can't encrypt data with a signature.The security of smartcards depends in part on you not being able to install new applications (or delete existing). So you can't modify the installed application profile.Lastly, even if you could update for an "encryption" application, the performance of a smartcard is absolutely dismal. Do you want your hard drive to perform at 1200 baud modem speeds? It would be completely nonfunctional for all but the simplest and smallest type of documents. So regardless of any ability to do so, you are just far better off buying a USB drive and using BitLocker to encrypt that whole drive. Now you have the flexibility to take just those files to another PC.You can buy a smartcard that has encryption feature. However for your use case it's just better to encrypt an external drive.I know what you're thinking. "I want the added security of the physical smartcard". Wrong. If you lose or damage the smartcard, whoops, bye bye files. Password (passphrase) is far far better for all intents and purposes. Also, if you suspect or want to protect against compromise on that other PC, smartcard doesn't help you protect against that. If you want to be sure you aren't giving up your passphrase to the other PC, get a SED (self encrypting drive). These devices almost universally suck and are insecure, so you have quite a lot of homework to do there. So much so, that Windows used to detect SED and use it if available. But then they realized this is completely insecure and untrustworthy, so now Windows ignores SED feature and always does software encryption in the OS. That's not to say 100% of the SED drives are bad. Just good luck knowing which ones are good. I'd just use bitlocker.
Secure elements for Nordic semiconductor - Page 1
Forum section: electronics / general

author: thelearner
author_rank: Contributor
timestamp: June 29, 2020, 04:25:20 am
content: Hello,I want to use a secure element with Nordic nRF52833.So which secure elements have support with nordic SoC?TIARegardsLearner

author: perieanuo
author_rank: Frequent Contributor
timestamp: August 19, 2020, 09:47:53 am
content: you have to scramble data with your algorithm and reconstruct on reception.saw this in a company I worked with embedded dsp's.nordic haven't any touch with sec, his job is to transmitmy colleague did a dll, it was windowsso simple question, simple answerregards,pierre

author: electrolust
author_rank: Unknown
timestamp: September 11, 2020, 06:47:15 pm
content: certainly the interface will be SPI or bit banging via GPIO. so, anything at all.
nRF52 family APPROTECT bypass via voltage glitch enables complete flash readout - Page 1
Forum section: electronics / general

author: I wanted a rude username
author_rank: Frequent Contributor
timestamp: June 13, 2020, 12:02:46 pm
content: https://limitedresults.com/2020/06/nrf52-debug-resurrection-approtect-bypass/>Nordic Semiconductor and LimitedResults did not agree on a responsible disclosure.That’s life.
fighting phishing by entering junk data - Page 1
Forum section: electronics / general

author: NiHaoMike
author_rank: Super Contributor
timestamp: August 17, 2020, 01:45:00 am
content: https://blog.haschek.at/2020/stopping-phishing-campaigns-with-bash.htmlTaking it a step further, the banks could create trap credentials and give those credentials to the phishers using phishing emails forwarded to a phishing report address. Then when the phisher tries to log in with the trap credentials, the bank gets alerted to that and takes action.

author: Berni
author_rank: Super Contributor
timestamp: August 17, 2020, 05:40:11 am
content: Id say its more of a fun thing to do in an afternoon while at the same time getting satisfaction for messing up a webservice without feeling guilty about it.Its still a good bit of work to reverse engineer the website and make a script that fakes submissions, and its difficult getting a list of phishing sites since they are typically sent directly to people via email/sms and never advertised anywhere while also too short lived to be picked up by search engines (What would the search term look like anyway?)Tho i suppose if the criminals ware smart they would have also logged a bunch of other information like the IP and browser. So when they see a suspiciously large amount of submissions from one place they can filter it out as garbage data. Not many people have a botnet at there disposal to use that to bombard them with data perfectly randomly.

author: NiHaoMike
author_rank: Super Contributor
timestamp: August 17, 2020, 01:15:46 pm
content: Quote from: Berni on August 17, 2020, 05:40:11 amProbably the easiest way to get a wide variety of phishing emails would be to set up an address that users can forward the emails to.QuoteWould be really fun to do it with VPN IPs, CGNAT, and Tor. In that case, merely discarding all data from IPs with a lot of submissions would also discard real data.I think the easiest way to undermine phishing in the first place would be to pose as black hats on the darknet selling "stolen" credentials that are actually just worthless random data. Probably not strictly legal due to laws against false advertising, but who would report that?
Nine million logs of Brits' road journeys spill onto the internet - Page 1
Forum section: electronics / general

author: SiliconWizard
author_rank: Super Contributor
timestamp: April 30, 2020, 10:14:46 pm
content: https://www.theregister.co.uk/2020/04/28/anpr_sheffield_council/Great stuff!

author: SilverSolder
author_rank: Super Contributor
timestamp: May 01, 2020, 01:53:33 pm
content: Good grief...
pppd vulnerable - Page 1
Forum section: electronics / general

author: BU508A
author_rank: Super Contributor
timestamp: February 20, 2020, 03:35:01 pm
content: Just as a heads-up: if you are having somewhere around pppd (e.g. the router for your internetconnection):it can be hacked.https://github.com/paulusmack/ppp/commit/8d7970b8f3db727fe798b65f3377fe6787575426Quote from the author:"So it affects the server and client. Both eap_request() and eap_response() are vulnerable (and have the exact same bug). Further more, there is no check to see if you’ve actually configured eap and are using eap prior to hitting the parser. So even if it’s not configured, you’re still vulnerable. Oh, and it’s pre-auth."Source (sorry, it's in German):https://blog.fefe.de/?ts=a0b08d9a

author: jstjep00
author_rank: Newbie
timestamp: April 05, 2020, 05:32:19 pm
content: Well as far as I know this might be a blessing in disguise for few reasons. One of the reasons is that this vulnerability even though widespread isn't widely applicable due to scope of router specific firmware. Since every router has different firmware and specific memory allocation then it can be argued that you would need to develop a bunch of different variants of this exploit to work across the board. Maybe few specific highly used routers will get affected on few major ISPs. The problem with security problems on router firmwares is the amount of middle men in the whole process with new firmware releases. pppd is developed by Paul Mackerras and other couple of people (Drew Perkins, Brad Clements, Karl Fox, Greg Christy, and Brad Parker). Then these new releases need to be implemented in routers of vendors (ZTE, Huawei, Thompson, Zyxel....) and then ISP needs to add on their own configuration and stuff to those firmware so that they get their wide commercial usage. Usually I would say that slowest ones to do this change are the ISPs themselves so if we see this thing go through relatively little bit of problem we might see ISPs getting their act together and rolling out firmwares faster.
OpenWRT code-execution bug puts millions of devices at risk - Page 1
Forum section: electronics / general

author: Black Phoenix
author_rank: Super Contributor
timestamp: April 07, 2020, 07:49:54 am
content: https://arstechnica.com/information-technology/2020/03/openwrt-is-vulnerable-to-attacks-that-execute-malicious-code/QuoteQuote
We will never disclose your data (but a leak of 1+ billion people's data will) - Page 1
Forum section: electronics / general

author: RoGeorge
author_rank: Super Contributor
timestamp: November 25, 2019, 11:51:33 am
content: https://techxplore.com/news/2019-11-mystery-blurs-dump-billion-people.html

author: SiliconWizard
author_rank: Super Contributor
timestamp: December 12, 2019, 11:04:47 pm
content: nice

author: LiftedTrace
author_rank: Regular Contributor
timestamp: January 04, 2020, 07:17:00 pm
content: wow
DVWA HTTP MITM & SQLi - Page 1
Forum section: electronics / general

author: TheEPROM9
author_rank: Frequent Contributor
timestamp: September 11, 2019, 02:50:38 pm
content: Ha we have an area in the form that is pretty much my day job. Heres a video I did three years ago that domstraghts a simple bit of hacking. I think for a job interview.
Wemo Switches - Page 1
Forum section: electronics / general

author: Bassman59
author_rank: Super Contributor
timestamp: September 06, 2019, 08:17:05 pm
content: I have a handful of these things. My new router (Synology) reports attempts by devices on my network to connect to potentially malicious IP addresses.And the switches love to reach out to IP 4.2.2.2, an ancient name server that was taken down. Apparently they have some very lazy programmers at Belkin.
Waiter, there is a compiler in my shellcode! - Page 1
Forum section: electronics / general

author: techman-001
author_rank: Frequent Contributor
timestamp: August 25, 2019, 10:29:39 am
content: A very interesting computer security video by Josh Stone at Nolacon 2019.

author: tggzzz
author_rank: Super Contributor
timestamp: August 25, 2019, 07:20:02 pm
content: Care to give us a clue as to why it is interesting?As it stands it isn't interesting enough for me to spend 50mins of my little remaining life on it.

author: Ian.M
author_rank: Super Contributor
timestamp: August 25, 2019, 09:07:46 pm
content: Its not, unless you already have an interest in Forth or a serious interest in PC security.TLDR: its a minimalist RAM resident Forth kernal, running on a possibly remote Windows target, which does its normal I/O on the host controlling it, similar to an embedded Forth, + the rest of the Forth, as usual written in Forth, + a bunch of Forth utility programs for stealth 'black hat' hacking.

author: borjam
author_rank: Unknown
timestamp: August 25, 2019, 09:18:50 pm
content: So it seems Forth has just been rediscoveredI was a member of the Forth Interest Group back in the 90's.

author: Mr. Scram
author_rank: Super Contributor
timestamp: August 25, 2019, 09:20:12 pm
content: Quote from: borjam on August 25, 2019, 09:18:50 pmThe Church of Forth is calling and it’s only slightly more painful to deal with than Scientology.
Zipato hardcoded same private SSH key into every one of its hubs - Page 1
Forum section: electronics / general

author: windsmurf
author_rank: Frequent Contributor
timestamp: July 03, 2019, 07:43:32 am
content: Zipato hardcoded same private SSH key into every one of its hubs, essentially giving everyone within wifi range the keys to open all of their smart door lockshttps://blackmarble.sh/zipato-smart-hub/Correction: If the hub is connected to the Internet, then anyone on the Internet can open your Zipato smart-locked doors.

author: Halcyon
author_rank: Unknown
timestamp: July 14, 2019, 10:50:42 am
content: BrilliantThis is why I hate "Internet of Things" -- Essentially devices which have no business being connected to the Internet. What's worse, people who have no idea about networking expose these types of devices to thefor everyone to see and abuse.

author: andersm
author_rank: Super Contributor
timestamp: July 22, 2019, 09:38:08 pm
content: They're just following in the footsteps of the big guys:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-nexus9k-sshkey
"connecting to cloffext.com" a concern? - Page 1
Forum section: electronics / general

author: Circlotron
author_rank: Super Contributor
timestamp: September 03, 2019, 12:42:09 pm
content: Just tonight I noticed on Firefox when I go to Google, down the bottom where it shows you all the various servers you are being connected to, it also says "connecting to cloffext.com". Some sites list it as a Windows malware thing. I put a line in my hosts file to block it, so is it something to be concerned about on my Linux system? Mint Mate 18.3

author: Circlotron
author_rank: Super Contributor
timestamp: September 03, 2019, 12:53:05 pm
content: While looking it up, other people were having this trouble and also with "connecting to fileserver.xyz"' I removed Best YouTube Downloader and it doesn't seem to be happening now. Wait and see what happens.
IBM, HPE, Tata CS, Fujitsu, NTT had been pwned by Beijing APT10 for 2 years! - Page 1
Forum section: electronics / general

author: windsmurf
author_rank: Frequent Contributor
timestamp: June 27, 2019, 12:40:34 am
content: "...hackers had such total control over the corporate network that they had begun leaving messages taunting system administrators.""The hackers knew exactly where to retrieve the most sensitive data and littered their code with expletives and taunts. One hacking tool contained the message “FUCK ANY AV” – referencing their victims’ reliance on anti-virus software. The name of a malicious domain used in the wider campaign appeared to mock U.S. intelligence: “nsa.mefound.com”https://www.reuters.com/investigates/special-report/china-cyber-cloudhopper/