Re: [funsec] Important Service Announcement

2015-03-05 Thread Valdis . Kletnieks
On Thu, 05 Mar 2015 20:31:50 +, Kain, Rebecca (.) said: Back when I was young, we got our p0rn via uuencode and we liked it! Many moons ago, I got a trouble ticket about a user who had 2 complaints: 1) Their mail would take forever to send. 2) My Listserv server was rejecting even short

Re: [funsec] Waste four and a half minutes of your time

2015-02-27 Thread Valdis . Kletnieks
On Fri, 27 Feb 2015 20:29:59 +,Sam Finnemore said: It begs the question, how on *earth* did we make it to the top of the food chain? We're the only species that can get high speed chase and Yakkity Sax into the same sentence. Because let's face it, we really don't have anything else going

Re: [funsec] Net-connected Barbie?

2015-02-17 Thread Valdis . Kletnieks
On Tue, 17 Feb 2015 14:57:04 -0800, Rob, grandpa of Ryan, Trevor, Devon Hannah said: Then what kind of algorithm is being used to feed jokes and games? There wouldn't be *any* possibility that someone could tweak the agenda here, is there? No possibility of propaganda aimed at the kids?

Re: [funsec] Don't mess with Canadians carrying sticks ...

2014-10-23 Thread Valdis . Kletnieks
On Wed, 22 Oct 2014 21:36:16 -0400, Jeffrey Walton said: Given that some politicians are more dangerous than terrorist, and we kill terrorist, then what should be done with politicians who commit crimes against the democracy and the citizens? They should either lose elections, or they should

Re: [funsec] Don't mess with Canadians carrying sticks ...

2014-10-22 Thread Valdis . Kletnieks
On Wed, 22 Oct 2014 17:02:14 -0400, Jeffrey Walton said: Politicians are usually corrupt to the core. They are more than happy to take money and peddle influence. I'd much rather see a politician killed, and I'm not sure I would bestow honors on someone who stopped it... Would you bestow

Re: [funsec] Fake Cell Phone Towers Discovered Grabbing Signals

2014-09-09 Thread Valdis . Kletnieks
On Tue, 09 Sep 2014 09:23:53 +0200, PsychoBilly said: The fake towers force phones to slow down to 2G from 4G, so a sudden decrease in download speed may be a clue that a phone is being tapped. That's f#ing hilarious statement... You'd be amazed what you can use to detect that somebody is

Re: [funsec] Weather forecasts XOR wind power ...

2014-08-13 Thread Valdis . Kletnieks
On Wed, 13 Aug 2014 12:10:37 -0700, Rob, grandpa of Ryan, Trevor, Devon Hannah said: http://www.cbc.ca/news/technology/radar-software-may-fix-weather-forecast-issues-caused-by-wind-farms-1.2735138 Right up there with the mayfly blossom the other week that registered as a hailstorm on the

Re: [funsec] Chip based on human brain

2014-08-08 Thread Valdis . Kletnieks
On Fri, 08 Aug 2014 12:07:37 -0800, Rob, grandpa of Ryan, Trevor, Devon Hannah said: Is programming these things going to be more akin to psychoanalysis? Debugging large server clusters is already halfway there. pgpxBovPzNtzm.pgp Description: PGP signature

Re: [funsec] Driverless cars could be lethal - FBI

2014-07-19 Thread Valdis . Kletnieks
On Sat, 19 Jul 2014 15:44:45 -0700, Rob, grandpa of Ryan, Trevor, Devon Hannah said: http://www.bbc.com/news/technology-28344219 Seems to me that nobody in the FBI is reading the traffic fatality statistics obtained on cars driven by humans. (OK, yes, the feebies seem to be concerned about

Re: [funsec] US capitol not in US, according to TSA

2014-07-18 Thread Valdis . Kletnieks
On Fri, 18 Jul 2014 11:29:16 -0400, Jeffrey Walton said: Potomac. Maybe he was hoping it swallowed all the assholes in Washington and reverted back to the swamp ;) And you thought the marshes near Chernobyl were a toxic waste site. pgpY1NTTq24H0.pgp Description: PGP signature

Re: [funsec] Computing student jailed after failing to hand over crypto keys

2014-07-17 Thread Valdis . Kletnieks
On Thu, 10 Jul 2014 02:03:43 -, Blanchard, Michael (InfoSec) said: So, just for debate... The 5th protects us from handing over passwords. So they ask for decrypted data to be handed over. Wouldn't that be a 5th amendment violation as well? Keep in mind that the story is from

Re: [funsec] US capitol not in US, according to TSA

2014-07-17 Thread Valdis . Kletnieks
On Thu, 17 Jul 2014 23:23:37 -0400, Bill Terwilliger said: The comment about smart people being involved is a bit presumptive. Geography knowledge may or may not be an indicator of intelligence but I somehow doubt that lack of it is an indicator of stupidity. OK. I admit *I* don't know what a

[funsec] Crap. Why didn't I think of that?

2014-06-17 Thread Valdis Kletnieks
Oy. Vey. Study done by Carnegie Mellon University examine the cost for an attacker to pay users to execute arbitrary code - potentially malware. User at home are asked to download and run an exe without being told what it did and without any way of knowing it was harmless. Each week they

Re: [funsec] LinkedIn to face customer lawsuit over email addresses -- itnews.com.au

2014-06-16 Thread Valdis . Kletnieks
On Mon, 16 Jun 2014 10:17:32 -0700, Steve Pirk said: I keep putting off deleting my LinkedIn account. If they can blow off any security concerns with this app, then they are quite clueless or evil, take your pick. I posit that anybody who hasn't already made up their minds regarding

Re: [funsec] I made Obama's BlackBerry

2014-05-28 Thread Valdis . Kletnieks
On Wed, 28 May 2014 06:59:10 -0400, Rich Kulawiec said: [1] Please. No whining. Steve Miller once rhymed Texas and facts is. The dude also thinks that pompetus is a word. pgporFhMtWLg0.pgp Description: PGP signature ___ Fun and Misc security

Re: [funsec] We're in for it now ...

2014-05-28 Thread Valdis . Kletnieks
On Wed, 28 May 2014 16:59:41 -0700, Rob, grandpa of Ryan, Trevor, Devon Hannah said: http://www.sciencedaily.com/releases/2014/05/140528163739.htm People with high levels of cynical distrust may be more likely to develop dementia. So being a realist makes you eventually go crazy? :)

Re: [funsec] Interesting twist on intellectual property law

2014-03-23 Thread Valdis . Kletnieks
On Sat, 22 Mar 2014 12:53:36 -0700, Rob, grandpa of Ryan, Trevor, Devon Hannah said: The trick can't be protected, but the performance can. [2] [2] - Normally I'm not on the side of IP protection, but I find this an intriguing legal argument. That's been baked into US copyright law since

Re: [funsec] Obfuscation = cryptography?

2014-02-04 Thread Valdis . Kletnieks
On Mon, 03 Feb 2014 16:28:28 -0800, Rob, grandpa of Ryan, Trevor, Devon Hannah said: OK, I'll admit that the math in this type of paper is completely beyond me. http://www.wired.com/wiredscience/2014/02/cryptography-breakthrough/ But, hasn't he, or any of his friends, paid any attention to

Re: [funsec] Job Security!!!!

2014-02-02 Thread Valdis . Kletnieks
On Wed, 29 Jan 2014 09:00:23 -0800, Rob, grandpa of Ryan, Trevor, Devon Hannah said: Apparently the new Cisco annual security report for 2014 says that some time this year the industry will be short more than a million security professionals. (I'd break out the champagne, except that I

Re: [funsec] Invitation to connect on LinkedIn

2014-01-08 Thread Valdis . Kletnieks
On Wed, 08 Jan 2014 18:38:19 -0500, Jeffrey Walton said: Thanks kind of interesting, considering the officers control and steer the organization. Have you been following this (trying to remove an NSA co-chair due to the surreptitious sabotaging of standards): NSA co-chair claimed sabotage on

Re: [funsec] It's ... SUPER-USER!

2013-08-30 Thread Valdis . Kletnieks
On Fri, 30 Aug 2013 15:20:52 -0700, Rob, grandpa of Ryan, Trevor, Devon Hannah said: According to the NSA, NOBODY could stop Snowden – he was A SYSADMIN! If they were using SELinux with the MLS policies, even as sysadmin he couldn't have done that stuff without being detected, because the

Re: [funsec] Explosive breast implants

2013-08-20 Thread Valdis . Kletnieks
On Tue, 20 Aug 2013 09:53:52 -0400, Stephanie Daugherty said: And the real reason airliners aren't being attacked anymore probably has more to do with the passengers than the added security. Post 9/11, the passengers will beat someone to a pulp before they can even think about doing anything

Re: [funsec] Encryption is less secure than we thought

2013-08-16 Thread Valdis . Kletnieks
On Fri, 16 Aug 2013 21:58:10 +0200, Daniël W. Crompton said: http://www.mit.edu/newsoffice/2013/encryption-is-less-secure-than-we-thought-0814.html What do you think? It's an interesting result, but not likely to make much real difference. Basically, they're pointing out that most estimates

Re: [funsec] How *NOT* to handle incorrect passwords ...

2013-07-25 Thread Valdis . Kletnieks
On Thu, 25 Jul 2013 10:59:55 -0700, Rob, grandpa of Ryan, Trevor, Devon Hannah said: https://twitter.com/cjcheshire/status/360326695137468416/photo/1 Virgin Atlantic feels that it is a good idea to provide the failed password, in plain text, in the URL when you try for a reset ... Just be

Re: [funsec] Huawei

2013-07-23 Thread Valdis . Kletnieks
On Mon, 22 Jul 2013 18:47:33 -0600, Bruce Ediger said: On Mon, 22 Jul 2013, Rob, grandpa of Ryan, Trevor, Devon Hannah wrote: Huawei Is a Security Threat and There's Proof, Says Hayden However, they are not going to tell you what the proof is. I assumed that because it was Hayden, that

Re: [funsec] We know where you are. And where you've been ...

2013-07-18 Thread Valdis . Kletnieks
On Thu, 18 Jul 2013 16:49:09 -0400, Joel Esler said: License plates are not private information. Yes. But does the location of the car they're attached to count as private info? Is it legitimate to use massive amounts of cameras to end-run the court cases where a warrant was required to use a

Re: [funsec] Mailer Software that inserts X-NSCC header?

2013-06-25 Thread Valdis . Kletnieks
On Tue, 25 Jun 2013 05:54:59 -0400, Rich Kulawiec said: a) Inserting headers into the canned meat products of the Hormel Corporation would be a very neat trick. How do you know that Hormel isn't already doing that? Consider what they *do* put in there.. :) pgpQ_j3IJHaYl.pgp Description: PGP

Re: [funsec] The ultimate illegible PowerPoint slide!

2013-06-20 Thread Valdis . Kletnieks
On Thu, 20 Jun 2013 11:49:46 -0700, Rob, grandpa of Ryan, Trevor, Devon Hannah said: http://www.gartner.com/technology/research/digital-marketing/transit-map.jsp Am I the only one bothered by the fact there's a Pink Line that's unidentified? pgpd_6LqLi2u6.pgp Description: PGP signature

Re: [funsec] The ultimate illegible PowerPoint slide!

2013-06-20 Thread Valdis . Kletnieks
On Thu, 20 Jun 2013 17:51:36 -0500, RL Vaughn said: http://www.gartner.com/technology/research/digital-marketing/transit-map.jsp I am color blind. Are you talking about the pink line labeled Commerce or the pink line labeled MKTG MGMT? I mean the one that *would* be 'Ad Technology' if it

Re: [funsec] Former DOJ Prosecutor Files $3 Billion Suit Against Obama, Holder, NSA, Verizon Over PRISM

2013-06-16 Thread Valdis . Kletnieks
On Sat, 15 Jun 2013 20:55:25 -0400, Jeffrey Walton said: https://www.google.com/#q=Larry+Klayman+lawsuit+prism All the references are non-mainstream (Washington Post, NY Times, and other mainstream outlets have not picked up the story yet). This will almost certainly go nowhere, for the

Re: [funsec] 1984 sales spike

2013-06-14 Thread Valdis . Kletnieks
On Fri, 14 Jun 2013 17:51:35 -, Blanchard, Michael (InfoSec) said: But it's THEIR country to deal with but more so, You know... my grandfather left Latvia because doing so was a lot easier than staying there and trying to avoid being either shot or sent to Siberia, because there really

Re: [funsec] 1984 sales spike

2013-06-11 Thread Valdis . Kletnieks
On Tue, 11 Jun 2013 15:32:15 -0400, Conrad Constantine said: On 6/11/2013 3:25 PM, Rob, grandpa of Ryan, Trevor, Devon Hannah wrote: In other news, the NSA now knows the names of everyone who bought 1984 in the past three months ... Is anyone else feeling the urge to go buy a copy of

Re: [funsec] Risk analysis

2013-05-12 Thread Valdis . Kletnieks
dOn Sun, 12 May 2013 09:09:10 -0700, Steve Allison said: The military and law enforcement may end up having an horrifying dilemma. When they took the oath of enlistment (military and law enforcement), as I did, they swore to support and defend the Constitution of the United States against all

Re: [funsec] REVIEW: World War Hack, Ethan Bull/Tsubasa Yozora

2013-05-03 Thread Valdis . Kletnieks
On Fri, 03 May 2013 19:20:01 -0400, Jeffrey Walton said: I didn't know INTPs and INTJs read fiction outside of Bradberry, Tolkien, and other classics :) Meyer-Briggs is a total crock. Any model of personality types that doesn't allow for psychopathic asshole is flawed. pgpCZlVmNTC_s.pgp

Re: [funsec] I'll believe corporations are people when they let them drive in the HOV lane ...

2013-02-05 Thread Valdis . Kletnieks
On Tue, 05 Feb 2013 08:42:46 -0600, Dan White said: I do not fear the tyranny of the majority. I believe when push comes to shove that people will make their own selfish decisions, for the betterment of themselves and their own families. There is sufficient evidence in the last few election

Re: [funsec] While we're all trying to fix politics, economics, etc.

2013-02-05 Thread Valdis . Kletnieks
On Tue, 05 Feb 2013 12:49:44 -0500, Rich Kulawiec said: I have a question. Please to consider the following candidate password: S.3-t=2ga+Zilg59CEkp4 I'm curious as to how y'all would classify that on a scale of weak-to-strong. The answer is it depends. It's a strong password if your

Re: [funsec] While we're all trying to fix politics, economics, etc.

2013-02-05 Thread Valdis . Kletnieks
On Tue, 05 Feb 2013 13:44:25 -0500, Charlie Derr said: Aren't all passwords insanely weak for threat models that include keystroke loggers and spotting the post-it on the monitor? Yes. So what's your point? pgp6alKYoBFZt.pgp Description: PGP signature

Re: [funsec] I'll believe corporations are people when they let them drive in the HOV lane ...

2013-02-05 Thread Valdis . Kletnieks
On Tue, 05 Feb 2013 18:26:55 +, Blanchard, Michael (InfoSec) said: If you use an old party label in any manner or function, you are immediately disqualified from candidacy The problem is that the instant a candidate says I'm standing with these 27 other congresscritters in support of

Re: [funsec] Portable SDK for UPnP Devices (libupnp) contains multiple buffer overflows in SSDP

2013-01-30 Thread Valdis . Kletnieks
On Tue, 29 Jan 2013 09:06:41 -0800, Paul Ferguson said: UPnP is a security nightmare. Period. What, just because its *design purpose* was to allow a machine behind a firewall to send a Pants Down! command to the firewall? :) pgpERkJQhn15c.pgp Description: PGP signature

Re: [funsec] Youth expelled from Montreal college after finding sloppy coding that compromised security of 250, 000 students personal data

2013-01-22 Thread Valdis . Kletnieks
On Tue, 22 Jan 2013 08:14:34 -0500, Rich Kulawiec said: about that story is that this statement from the company CEO (Edouard Taza): We acted immediately to fix the problem, and were able to do so before anyone could use it to access private information. was not challenged by

Re: [funsec] Fwd: petition to remove Aaron Swartz prosecutor

2013-01-15 Thread Valdis . Kletnieks
On Tue, 15 Jan 2013 11:04:41 +, Michael Simpson said: Young men are the best patient group for successfully completing suicide and often the cause is multifactorial and difficult to elucidate However I think that the upcoming court case has to be taken into account. Exactly. I'm positive

Re: [funsec] Fwd: petition to remove Aaron Swartz prosecutor

2013-01-14 Thread Valdis . Kletnieks
On Mon, 14 Jan 2013 12:15:09 -0500, Jeffrey Walton said: From the Full Disclosure mailing list. Schwartz recently committed suicide over the incident. Do we have any confirmation that the suicide was directly caused by the legal issues? Like a suicide note that says so? pgp2aH3qFGXcX.pgp

Re: [funsec] Fwd: petition to remove Aaron Swartz prosecutor

2013-01-14 Thread Valdis . Kletnieks
On Mon, 14 Jan 2013 15:34:32 -0500, Jeffrey Walton said: On Mon, Jan 14, 2013 at 3:26 PM, valdis.kletni...@vt.edu wrote: On Mon, 14 Jan 2013 12:15:09 -0500, Jeffrey Walton said: From the Full Disclosure mailing list. Schwartz recently committed suicide over the incident. Do we have

Re: [funsec] B.C. judge certifies class-action suit for men denied gambling winnings

2013-01-13 Thread Valdis . Kletnieks
On Sat, 12 Jan 2013 11:29:22 -0800, Rob, grandpa of Ryan, Trevor, Devon Hannah said: And this week, B.C. Supreme Court Justice John Savage ruled there were sufficient grounds to certify a class-action for winners denied because they were in the self-exclusion program. I suppose there

Re: [funsec] Whya can't my laptop figure out what time zone I'm in, like my cell phone does?

2012-12-06 Thread Valdis . Kletnieks
On Thu, 06 Dec 2012 12:47:12 -0700, Rob Slade, doting Grandpa of Rayn, Trevor, Devon, and Hannah said: Computers can find out (or somebody can find out) where a specific computer is when they are on the net. (And you have to be on the net to get time updates.) Some Websites use this

Re: [funsec] Twinkipocalypse averted

2012-11-20 Thread Valdis . Kletnieks
On Tue, 20 Nov 2012 16:03:51 +, Blanchard, Michael (InfoSec) said: Little Debbie is a perfect example… no unions, better management solutions… You *do* realize that at many companies, the *threat* of unionizing is sufficient to make the companies play nice? Or are you one of those

Re: [funsec] Sandy and BCP

2012-11-06 Thread Valdis . Kletnieks
On Tue, 06 Nov 2012 14:12:40 -0500, Jeffrey Walton said: Who is more dangerous to this country? The corrupt politicians who never face investigation or prosecution? Or the Muslims living in a cave pissed off about socio-economic injustice and biased foreign policy? The corrupt politicians

Re: [funsec] This is [phishing] news?!?

2012-10-05 Thread Valdis . Kletnieks
On Fri, 05 Oct 2012 15:35:56 -0400, Blanchard, Michael (InfoSec) said: Man, you just used the one term that makes my skin crawl APT. APT == Anything our security team hasn't figured out how to stop. pgpoc6vFpqgjY.pgp Description: PGP signature

Re: [funsec] City of Tulsa website not hacked after all

2012-10-02 Thread Valdis . Kletnieks
On Tue, 02 Oct 2012 09:51:03 -0500, Dan White said: A third-party security firm that was hired to do periodic, unannounced tests of the city's networks for vulnerabilities used an unfamiliar testing procedure last month that city IT personnel misinterpreted as an unknown breach, according to

Re: [funsec] Automatic cyber-counter-attacks

2012-09-12 Thread Valdis . Kletnieks
On Wed, 12 Sep 2012 19:45:53 -0700, Kyle Creyts said: And what happens in cybersepsis? Isn't that already the normal state of the Internet? pgppsjGyY39PE.pgp Description: PGP signature ___ Fun and Misc security discussion for OT posts.

Re: [funsec] More bad news for risk management

2012-08-19 Thread valdis . kletnieks
On Sat, 18 Aug 2012 12:17:40 -0400, Jeffrey Walton said: On Fri, Aug 17, 2012 at 12:43 AM, Tomas L. Byrnes t...@byrneit.net wrote: Ignoring risk is a perfectly valid way of managing it, if the return of putting the resources into the risky endeavor exceed the costs of putting them into

[funsec] What's the yiddish for 'D'Oh!?

2012-08-14 Thread Valdis Kletnieks
http://www.npr.org/blogs/thetwo-way/2012/08/14/158773637/leader-of-anti-semitic-party-in-hungary-discovers-hes-jewish?ft=1f=1001 pgpm1UP0YTNvs.pgp Description: PGP signature ___ Fun and Misc security discussion for OT posts.

[funsec] Obama was *WHAT*??!?

2012-08-10 Thread Valdis Kletnieks
There's a few screws loose crazy, and there's the lug nuts holding this guy's brain in place are in the next county crazy... http://www.addictinginfo.org/2012/08/06/pakistani/ pgpEj5ONu0D3J.pgp Description: PGP signature ___ Fun and Misc security

[funsec] Sometimes, you gotta feel sorry for the poor TSA agent...

2012-07-19 Thread Valdis Kletnieks
http://www.rawstory.com/rs/2012/07/16/tsa-frisks-man-with-worlds-largest-penis/ pgpqJPuAXsQG1.pgp Description: PGP signature ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a

Re: [funsec] Citizen cyber-protectors?

2012-07-19 Thread valdis . kletnieks
On Thu, 19 Jul 2012 16:43:16 +0100, Drsolly said: What, even if loads of beetle-sellers told you how important it is? I usually disregard any advice regarding how important *anything* is until I've also heard it from somebody who doesn't have a vested interest in my believing it's important.

Re: [funsec] Disney to sue the planet Mercury

2012-06-15 Thread valdis . kletnieks
On Fri, 15 Jun 2012 19:18:33 -0700, Robert Slade said: ... claiming any images of their flagship mouse are a violation of inter-multiverse copyright laws: http://messenger.jhuapl.edu/gallery/sciencePhotos/image.php?gallery_id=2image_id=876 And promptly gets countersued and has their ass

Re: [funsec] Really awful TV news report on virus (from 1988)

2012-06-12 Thread valdis . kletnieks
On Mon, 11 Jun 2012 14:09:06 -0700, Rob, grandpa of Ryan, Trevor, Devon Hannah said: I believe the author was quite upset he messed things up like he did. Bob Jr's statement that he intended it to be more limited seems to ring true, but it was definitely supposed to be a worm. He got

Re: [funsec] [Full-disclosure] Obama Order Sped Up Wave of Cyberattacks Against Iran

2012-06-05 Thread valdis . kletnieks
On Tue, 05 Jun 2012 16:20:04 -0300, Marcio B. Jr. said: really matters, that is, an imminent *real* war against China: http://www.bbc.co.uk/news/world-us-canada-18305750 One could equally well read that as We're fed up and about to pound North Korea even further back into the Stone Age.

Re: [funsec] Flame on!

2012-05-30 Thread valdis . kletnieks
On Wed, 30 May 2012 22:51:09 -0400, michael.blanch...@emc.com said: a-effin-men Rob! I went through the same screaming fit too Even though it sounds clever until you dig in just a little bit... 20 freakin meg in size? I mean seriously The only reason it hasn't been caught in 5

Re: [funsec] .secure TLD

2012-05-12 Thread valdis . kletnieks
On Fri, 11 May 2012 21:23:01 -0400, Ben April said: http://www.darkreading.com/authentication/167901072/security/security-management/24187/new-i-secure-i-internet-domain-on-tap.html If they really wanted to be secure they would require the implementation of RFC 3514 Read between the

Re: [funsec] Seriously?

2012-05-05 Thread Valdis . Kletnieks
On Sat, 05 May 2012 15:18:39 -0400, Jeffrey Walton said: Seriously? The new threat of user-initiated drive by downloads? NBC actually used if you haven't seen it, it's new to you as a slogan during reruns season a few years back. pgpu1upVqsIVZ.pgp Description: PGP signature

Re: [funsec] OK, all you EU guys who took the CEH just wasted your money

2012-03-30 Thread Valdis . Kletnieks
On Fri, 30 Mar 2012 12:46:04 -0700, Vic Vandal said: Ethical (the E in CEH) hackers would only attack systems that belong to organizations that gave them written permission to do so. The new laws would be inapplicable to that scenario. From the fine article's first paragraph: Possessing or

Re: [funsec] OK, all you EU guys who took the CEH just wasted your money

2012-03-30 Thread Valdis . Kletnieks
On Fri, 30 Mar 2012 18:05:44 -0700, Vic Vandal said: It's not illegal to possess a tire iron (as mentioned in the email below), but that makes a decent segue to a similar point. It is a crime in the state where I live to have lockpicking tools in your possession - if you're illegally

Re: [funsec] OK, all you EU guys who took the CEH just wasted your money ...

2012-03-29 Thread Valdis . Kletnieks
On Thu, 29 Mar 2012 17:06:21 -0700, Rob, grandpa of Ryan, Trevor, Devon Hannah said: http://www.europarl.europa.eu/news/nl/pressroom/content/20120326IPR41843/html/Hacking-IT-systems-to-become-a-criminal-offence So.. what's the difference between attack tools and a good pentester's toolkit?

Re: [funsec] US spent USD 25 [million] on internet freedom in Middle East in 2012

2012-03-17 Thread Valdis . Kletnieks
On Fri, 16 Mar 2012 20:16:20 PDT, Paul Ferguson said: Oh, irony of ironies... Fortunately, the tools are available to US citizens too. :) pgpx9OKpcGDc5.pgp Description: PGP signature ___ Fun and Misc security discussion for OT posts.

Re: [funsec] NSA Creates Android based Super Secure Smartphone

2012-03-03 Thread Valdis . Kletnieks
On Sat, 03 Mar 2012 22:04:07 EST, Jeffrey Walton said: Will there be an NSA sponsored Market so folks can get hardened apps? Anything that adds finer grain permissions for applications is a NSA already gave us SELinux. pgpx9476QLNbg.pgp Description: PGP signature

Re: [funsec] [Full-disclosure] Trustwave and Mozilla

2012-02-15 Thread Valdis . Kletnieks
On Wed, 15 Feb 2012 18:13:25 +0900, peter evans said: Does anyone know the LD50 for coffee in humans? ^^? From the Wikipedia page: The LD50 of caffeine in humans is dependent on individual sensitivity, but is estimated to be about 150 to 200 milligrams per kilogram of body mass or roughly

Re: [funsec] [Full-disclosure] Trustwave and Mozilla

2012-02-12 Thread Valdis . Kletnieks
On Sun, 12 Feb 2012 05:54:30 EST, Jeffrey Walton said: For what its worth, pinning the certificate can usually remediate these sorts of MitM attacks, but Mozilla subverted it: http://ssl.entrust.net/blog/?p=615. Maybe I'm not sufficiently caffienated, but that link doesn't seem to mention

Re: [funsec] WTF? Cyber bill to put US in charge of global cyber security

2012-02-10 Thread Valdis . Kletnieks
On Wed, 08 Feb 2012 20:55:18 PST, Paul Ferguson said: Chris Sonderby, Facebook's Associate General Counsel who oversees the company's global law enforcement relations, believes it's in the interest of private companies to partner with law enforcement agencies to protect customers as much as

Re: [funsec] [Full-disclosure] can you answer this?

2012-02-05 Thread Valdis . Kletnieks
On Fri, 03 Feb 2012 02:58:52 CST, Fatherlaptop said: ... Why? How is this IP asking for DHCP to another not in my trust IP scheme? Simple - it probably came in from elsewhere, and it's asking an IP from an address that it thought *was* in *its* trust scheme. pgpa1TQ5nT8UP.pgp Description: PGP

Re: [funsec] BitDefender, you've created a monster! (story ...)

2012-01-30 Thread Valdis . Kletnieks
On Mon, 30 Jan 2012 10:34:57 EST, michael.blanch...@emc.com said: s dribble and by far nothing at all new. But when I'm talking to folks that claim to be malware experts, or IT security experts, and they start stating stuff like yah, malware's getting so bad these days that viruses are

Re: [funsec] Teaching reporters infosec ...

2012-01-30 Thread Valdis . Kletnieks
On Mon, 30 Jan 2012 10:51:19 EST, michael.blanch...@emc.com said: I just type everything in using on the fly, in my head blowfish encryption to fool the keyloggers Cryptonomicon time. pgpIqALSwRJ2T.pgp Description: PGP signature ___ Fun and

Re: [funsec] Confusion Flaw?

2012-01-24 Thread Valdis . Kletnieks
On Tue, 24 Jan 2012 18:04:13 EST, Jeffrey Walton said: From USN-1263-2 (http://www.ubuntu.com/usn/usn-1263-2/): It was discovered that a type confusion flaw existed in the in the Internet Inter-Orb Protocol (IIOP) deserialization code. A remote attacker could use this to cause an

Re: [funsec] Consumer group accuses Hollywood of 'threatening politicians'

2012-01-23 Thread Valdis . Kletnieks
On Mon, 23 Jan 2012 10:43:59 EST, michael.blanch...@emc.com said: Is there anyone who would claim a PAC contribution is not a bride (other than Congress and lobbyists)? Yes, a PAC contribution is certainly NOT a bride... Yes it is. Take a look at the ugly divorces that happen when a

Re: [funsec] Did the borg start this way?

2012-01-23 Thread Valdis . Kletnieks
On Tue, 17 Jan 2012 16:24:27 EST, Patrick Laverty said: I know Kung Fu. Show me. At which point we'll need even better anti-virus software for memes, because otherwise you just can't win The Game. pgpNl5lwFjWbQ.pgp Description: PGP signature ___

Re: [funsec] Stratfor is Online

2012-01-16 Thread Valdis . Kletnieks
On Mon, 16 Jan 2012 12:10:52 EST, Jeffrey Walton said: cards) should thank Stratfor for their failure, since the costs will be passed on to stock holders; and higher credit card rates will be used to offset loss due to this sort of incompetence. You have that only half right. Higher rates

Re: [funsec] Issa Announces Oversight Hearing

2012-01-09 Thread Valdis . Kletnieks
On Mon, 09 Jan 2012 21:08:26 PST, Rob, grandpa of Ryan, Trevor, Devon Hannah said: http://j.mp/A9G3fG (U.S. House) House Committee on Oversight and Government Reform Chairman Darrell Issa (R-CA) today announced that the Full Committee will hold a hearing on January 18 to

Re: [funsec] Copper thieves get dumber?

2012-01-06 Thread Valdis . Kletnieks
On Fri, 06 Jan 2012 11:51:50 PST, Rob, grandpa of Ryan, Trevor, Devon Hannah said: http://www.nsnews.com/news/Vandals+Internet+thousands/5955855/story.html A while ago, I saw a picture of the new cable cladding being used by one European telco, that says in like 7 or 8 langauges fiber cable -

Re: [funsec] Who's Who phish

2012-01-04 Thread Valdis . Kletnieks
On Wed, 04 Jan 2012 11:42:32 PST, Rob, grandpa of Ryan, Trevor, Devon Hannah said: Hello Candidate, it starts, and goes on to tell me that As the school year opens, *facepalm*. pgpVCa7PCoVdq.pgp Description: PGP signature ___ Fun and Misc

Re: [funsec] Happy Merry.

2011-12-15 Thread Valdis . Kletnieks
On Thu, 15 Dec 2011 19:32:28 GMT, Drsolly said: So, never mind. Merry Christmas. Whether you like it or not. (If not, yo u can have a Happy New Year anyway :-) You insensitive clod, for some of us the New year starts on the First of Nissan. Corporate sponsorship has obviously gone

Re: [funsec] REVIEW: Good Night Old Man, George Campbell

2011-12-14 Thread Valdis . Kletnieks
On Wed, 14 Dec 2011 07:02:46 EST, Marc said: air! You can get most anywhere around the world on 5 watts RF with CW while voice requires many times that. Great. You can tune into 154.342 and talk to somebody in Zanzibar on 5 watts. Let's think about that for a moment - it *also* means that

[funsec] Israeli hacker tries to rob bank...

2011-12-05 Thread Valdis . Kletnieks
Gadi, do you know this guy? ;) https://www.youtube.com/watch?v=RJVHTQSvUIo pgpSLH7HeFYX2.pgp Description: PGP signature ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public

Re: [funsec] If only this were just a Friday joke ...

2011-12-03 Thread Valdis . Kletnieks
On Sat, 03 Dec 2011 12:03:59 EST, Jeffrey Walton said: I believe that's called extortion. From the article, it sounds like business as usual with Buma/Stemra. Is there no oversight in the Netherlands? I don't believe there's any realistic oversight of copyright extortion schemes anywhere in

Re: [funsec] Siri's been cracked!

2011-11-14 Thread Valdis . Kletnieks
On Mon, 14 Nov 2011 20:15:18 PST, Rob, grandpa of Ryan, Trevor, Devon Hannah said: it has been able to figure out. (A fair volume of information itself.) (Also, think about that: Apple has the full audio of every request you make of Siri. And anything it can parse out of the audio.)

Re: [funsec] There are some things man was not meant to meddle with ...

2011-11-01 Thread Valdis . Kletnieks
On Tue, 01 Nov 2011 09:37:40 +0200, Gadi Evron said: But as they can choose WHEN to enter our universe, A dubious proposition at best - they're pretty much restricted to entering the space-time cone of the lab *after* the experiment. If they can go back in time, that creates all the usual

Re: [funsec] There are some things man was not meant to meddle with ...

2011-11-01 Thread Valdis . Kletnieks
On Tue, 01 Nov 2011 17:49:19 +0200, Gadi Evron said: Not necessarily, this is uncharted territory. Their Universe may answer to different laws of physics, and be independent of our own. But their entry point has to obey the laws of physics in *this* universe. pgpvPtsBkb1D9.pgp

Re: [funsec] There are some things man was not meant to meddle with ...

2011-10-31 Thread Valdis . Kletnieks
On Mon, 31 Oct 2011 12:30:35 PDT, Rob, grandpa of Ryan, Trevor, Devon Hannah said: OK, ten bucks says they tear the fabric of the universe apart, and then can't figure out how to stitch it together again. (You ever notice that these biggest in the world things never seem to have a

Re: [funsec] 15 Mind-Blowing Facts About Wealth And Inequality In America

2011-10-16 Thread Valdis . Kletnieks
On Sun, 16 Oct 2011 23:49:58 EDT, Jeffrey Walton said: The underlying problem is the politicians. The problem is not democrats, republicans, conservatives, liberals, rich, or poor. Only a small fraction of the 1% was responsible for the additional burdens the 99% must bear. The problem is

Re: [funsec] Sony was a victim as well: Australian privacy watchdog

2011-10-01 Thread Valdis . Kletnieks
On Fri, 30 Sep 2011 20:06:28 EDT, Jeffrey Walton said: http://www.theregister.co.uk/2011/09/30/sony_cleared_by_privacy_commissioner/ According to Pilgrim's investigation, the PSN and Qriocity breaches did not breach National Privacy Principles. This is exactly the sort of topsy-turvy logic

Re: [funsec] One touch search and seizure

2011-09-28 Thread Valdis . Kletnieks
On Wed, 28 Sep 2011 13:09:09 PDT, Rob, grandpa of Ryan, Trevor, Devon Hannah said: Interesting. Touch `Any' key, or move the mouse, and you can invalidate the evidence from a search.

Re: [funsec] That's cheating!

2011-09-26 Thread Valdis . Kletnieks
On Mon, 26 Sep 2011 12:19:31 PDT, Rob, grandpa of Ryan, Trevor, Devon Hannah said: Somebody is using virtual monkeys to recreate Shakespeare. The virtual monkeys aren't the cheating part. The fact that they are doing it only nine characters at a time, *that's* cheating! As somebody

Re: [funsec] APT Summit

2011-09-16 Thread Valdis . Kletnieks
On Fri, 16 Sep 2011 14:49:44 EDT, michael.blanch...@emc.com said: I LOL'd at the newly found #1 threat when I first read that PDF a few days ago social engineering is now the #1 threat When was the first Your PC is broadcasting an IP address pop-up? pgpVPzB6V7T8A.pgp Description: PGP

Re: [funsec] Gender? (Y/N)

2011-09-15 Thread Valdis . Kletnieks
On Thu, 15 Sep 2011 09:23:15 PDT, Robert Slade said: etting harder to determine these days, so is gender no longer of any use for authentication? It's still just as good as any *other* biometric data on the passport. I may gain/lose a drastic amount of weight, change hair color/style, or get

Re: [funsec] Apple's faith-based security taking a hammering

2011-09-14 Thread Valdis . Kletnieks
On Wed, 14 Sep 2011 10:40:22 EDT, Joel Esler said: My thought behind the whole thing is that iTunes accounts are getting hacked by brute force of the password. There are indications that at least some are being done via phishing, and there have been complaints about the fact that iTunes

Re: [funsec] Apple's faith-based security taking a hammering

2011-09-13 Thread Valdis . Kletnieks
On Tue, 13 Sep 2011 18:52:44 EDT, Joel Esler said: Oh, I'm a fanboy. Anyone knows that. I'm also a believer in the factor that most humans are stupid and set their passwords to password. Am I the only one surprised that unintentional mis-spellings of password aren't higher up the most

Re: [funsec] Sony Just Hired a Chief Information Security Officer (CISO)

2011-09-08 Thread Valdis . Kletnieks
On Thu, 08 Sep 2011 01:40:23 EDT, Jeffrey Walton said: Philip Reitinger, former director of the United States National Cyber-Security Center, a division of the Department of Homeland Security, will be joining Sony as a chief information security officer, Sony said Sept. 6. Horses and barn

Re: [funsec] Fight! Fight!

2011-08-19 Thread Valdis . Kletnieks
On Fri, 19 Aug 2011 12:20:39 PDT, Rob, grandpa of Ryan, Trevor, Devon Hannah said: http://blogs.mcafee.com/mcafee-labs/shady-rat-is-not-a-botnet Well.. she says: Speaking of technical arguments, apparently Mr. Kaspersky has gotten it in his head that Shady RAT is a botnet. And then continues

Re: [funsec] Bitcoin vs spam?

2011-08-17 Thread Valdis . Kletnieks
On Wed, 17 Aug 2011 16:50:39 PDT, Rob, grandpa of Ryan, Trevor, Devon Hannah said: I wonder if some botherders, possibly not as good at math, converted some of their networks? Who said anything about it being an either-or situation? If you got a botnet client on a machine that has a

Re: [funsec] MBR Rootkit

2011-08-13 Thread Valdis . Kletnieks
On Sat, 13 Aug 2011 13:08:59 MDT, Daniel Otis said: Does anyone have a sample of the latest MBR Rootkit? I need one to experiment on, thanks! *the* latest? Try 'git clone git://github.org/mbr' or similar? ;) (And here I thought there were multiple *families* of MBR rootkits out there, each

Re: [funsec] Pwnie Awrd Winners Announced Today

2011-08-09 Thread Valdis . Kletnieks
On Mon, 08 Aug 2011 19:57:11 EDT, Jeffrey Walton said: http://pwnies.com/ Dude, that was *so* last week. Literally. Click the link you provided, and: Latest posts Pwnie Award winners for 2011 Aug 3, 2010 The winners of Pwnie Awards 2011 were announced today at a ceremony in Las Vegas. The

  1   2   3   4   5   6   7   8   >