1.4 Billion clear text credentials exposed!
http://ift.tt/2zcGCbN
Submitted December 15, 2017 at 07:02AM by MrSnowflake75
via reddit http://ift.tt/2B1Mmod
http://ift.tt/2zcGCbN
Submitted December 15, 2017 at 07:02AM by MrSnowflake75
via reddit http://ift.tt/2B1Mmod
Medium
1.4 Billion Clear Text Credentials Discovered in a Single Database
A Massive Resource for Cybercriminals Makes it Easy to Access Billions of Credentials.
Plaintext password used for identity verification
Talking to Amaysim support and they asked me for the first 4 characters of my password to verify my identity. I explained that I'm not happy having my password being sent to the server unhashed. Support argued that it wasn't the whole password and my account was secure. What do you guys think? Is this a common industry practice?
Submitted December 15, 2017 at 10:16AM by howzagoin
via reddit http://ift.tt/2jVLOsK
Talking to Amaysim support and they asked me for the first 4 characters of my password to verify my identity. I explained that I'm not happy having my password being sent to the server unhashed. Support argued that it wasn't the whole password and my account was secure. What do you guys think? Is this a common industry practice?
Submitted December 15, 2017 at 10:16AM by howzagoin
via reddit http://ift.tt/2jVLOsK
reddit
Plaintext password used for identity verification • r/security
Talking to Amaysim support and they asked me for the first 4 characters of my password to verify my identity. I explained that I'm not happy...
Security Orchestration Meets Ticket Management
http://ift.tt/2yuukYL
Submitted December 15, 2017 at 09:02AM by abhishekiyer
via reddit http://ift.tt/2j4JbUK
http://ift.tt/2yuukYL
Submitted December 15, 2017 at 09:02AM by abhishekiyer
via reddit http://ift.tt/2j4JbUK
Demisto
Security Orchestration Meets Ticket Management: RSA Archer and Demisto
Learn how combining RSA Archer’s ticketing with Demisto’s security orchestration can provide you with a unified platform from ticket creation to resolution.
Really need help with Qubes-Whonix.
I have tried searching, I have tried reading the official documentation but I am just too dumb to understand it. If you are just going to link me to the documentation just save us both some time and don't.I use AirVPN, and I have no idea how to add the VPN config file into wherever it has to go, I don't know if I need to install my VPN client. I don't know anything.I want to have my VPN before TOR. Please could I have a basic tutorial on how to do it? I've looked all over YT and there isn't anything that I can understand.Edit: This is the best tutorial I have found, and I just used the AirVPN config file instead, but for some reason it isn't connect. http://ift.tt/2j3wkSw
Submitted December 15, 2017 at 08:10AM by Invitza
via reddit http://ift.tt/2zdOFFm
I have tried searching, I have tried reading the official documentation but I am just too dumb to understand it. If you are just going to link me to the documentation just save us both some time and don't.I use AirVPN, and I have no idea how to add the VPN config file into wherever it has to go, I don't know if I need to install my VPN client. I don't know anything.I want to have my VPN before TOR. Please could I have a basic tutorial on how to do it? I've looked all over YT and there isn't anything that I can understand.Edit: This is the best tutorial I have found, and I just used the AirVPN config file instead, but for some reason it isn't connect. http://ift.tt/2j3wkSw
Submitted December 15, 2017 at 08:10AM by Invitza
via reddit http://ift.tt/2zdOFFm
reddit
GUIDE: Setting up a VPN with Mullvad on Qubes! • r/Qubes
Hello! I'd like to show you how to set up a VPN with Mullvad on Qubes-OS! 0) Run this in your debian-8 templatevm (in a terminal): sudo wget -O...
A developer’s guide to Single Sign-On
http://ift.tt/2BsQLmE
Submitted December 15, 2017 at 12:03PM by dmichalakos
via reddit http://ift.tt/2CoMLRK
http://ift.tt/2BsQLmE
Submitted December 15, 2017 at 12:03PM by dmichalakos
via reddit http://ift.tt/2CoMLRK
Medium
A developer’s guide to Single Sign-On
The world of Identity Providers (IdPs) is bloated and full of complicated enterprise jargon — a deterrent to many developers who would…
Made me laugh really hard. Thought I’d share
https://twitter.com/brunns/status/941320476894334977
Submitted December 15, 2017 at 03:19PM by imgandhi
via reddit http://ift.tt/2zdGh8U
https://twitter.com/brunns/status/941320476894334977
Submitted December 15, 2017 at 03:19PM by imgandhi
via reddit http://ift.tt/2zdGh8U
Twitter
Simon Brunning
Finally managed to quit vim.
LTS Secure Listed Among TOP 10 Pitched Products At NASSCOM Product Conclave 2016
http://ift.tt/2Bp95gK
Submitted December 15, 2017 at 03:01PM by hardiksoni28111988
via reddit http://ift.tt/2j4E6vn
http://ift.tt/2Bp95gK
Submitted December 15, 2017 at 03:01PM by hardiksoni28111988
via reddit http://ift.tt/2j4E6vn
Ltssecure
LTS Secure Listed Among TOP 10 Pitched Products at NASSCOM Product Conclave 2016 − LTS Secure
Pune, INDIA – Mar 17, 2016: As promised, LTS Secure did display its power and efficiency at NASSCOM Product Conclave 2016. Not only LTS Secure proved itself as a useful product at the conclave, it also got listed among best products useful for every investor.
LTS Secure Cloud Access Security Broker Releases Version 2.0
http://ift.tt/2AKoIzy
Submitted December 15, 2017 at 02:30PM by hardiksoni28111988
via reddit http://ift.tt/2ywHqoB
http://ift.tt/2AKoIzy
Submitted December 15, 2017 at 02:30PM by hardiksoni28111988
via reddit http://ift.tt/2ywHqoB
Ltssecure
LTS SecureCloud Access Security Broker is a platform that detects threats LTS Secure
LTS Secure Cloud Access Security Broker is proudly ready with better cyber space security, along with bigger worries for cyber criminals.
A journey of a pentester in different interviews for a pentest/red-teaming job
http://ift.tt/2klIiHt
Submitted December 15, 2017 at 05:13PM by karezma24
via reddit http://ift.tt/2j7vwfF
http://ift.tt/2klIiHt
Submitted December 15, 2017 at 05:13PM by karezma24
via reddit http://ift.tt/2j7vwfF
Dan Helton's Blog
My Grand Tour of Pentest Interviews
Late last year, I began looking for a new job. Earlier this year, I finally got one! I was interested in branching out into the broader world of penetration testing and red teaming, with more ext…
Security In 5: Episode 133 - Tools, Tips and Tricks - Circle
http://ift.tt/2AQouqY
Submitted December 15, 2017 at 07:32PM by BinaryBlog
via reddit http://ift.tt/2BrZ5TO
http://ift.tt/2AQouqY
Submitted December 15, 2017 at 07:32PM by BinaryBlog
via reddit http://ift.tt/2BrZ5TO
Libsyn
Security In Five Podcast: Episode 133 - Tools, Tips and Tricks - Circle
This week's TTT episode talks about a fantastic new service to help manage your family's home Internet use. It's called Circle and this is a network level filter and time management capability that sits on your home router. No need to install anything on…
How you can be tracked even with your GPS turned off
http://ift.tt/2BsXI7z
Submitted December 15, 2017 at 07:28PM by volci
via reddit http://ift.tt/2AvKTp5
http://ift.tt/2BsXI7z
Submitted December 15, 2017 at 07:28PM by volci
via reddit http://ift.tt/2AvKTp5
Android Authority
How you can be tracked even with your GPS turned off
Researchers from Princeton University have discovered a new way to accurately track you— even if you turn your GPS location off.
Internet Chemotherapy
http://91.215.104.140/
Submitted December 15, 2017 at 07:39PM by mgvx
via reddit http://ift.tt/2CfSbhl
http://91.215.104.140/
Submitted December 15, 2017 at 07:39PM by mgvx
via reddit http://ift.tt/2CfSbhl
reddit
Internet Chemotherapy • r/netsec
2 points and 2 comments so far on reddit
SSRF and XXE in FastMail - bug bounty writeup
http://ift.tt/2jX5lZR
Submitted December 15, 2017 at 08:40PM by albinowax
via reddit http://ift.tt/2CxNLTW
http://ift.tt/2jX5lZR
Submitted December 15, 2017 at 08:40PM by albinowax
via reddit http://ift.tt/2CxNLTW
Medium
Bug Bounty: Fastmail
I would first like to start off by saying that Fastmail has a great bug bounty program and they really care a lot about the security of…
Security Planner: Why this new online safety advice tool looks promising
http://ift.tt/2CasHBF
Submitted December 15, 2017 at 09:14PM by silverf0x001
via reddit http://ift.tt/2CxYaii
http://ift.tt/2CasHBF
Submitted December 15, 2017 at 09:14PM by silverf0x001
via reddit http://ift.tt/2CxYaii
TechRepublic
Security Planner: Why this new online safety advice tool looks promising
Old security awareness campaigns, move down the bench, and make way for Citizen Lab's Security Planner. Discover what makes this online safety guide for users unique.
Hackers halt plant operations in watershed cyber attack
http://ift.tt/2j4HtT1
Submitted December 15, 2017 at 08:46PM by SecurityTrust
via reddit http://ift.tt/2kxje04
http://ift.tt/2j4HtT1
Submitted December 15, 2017 at 08:46PM by SecurityTrust
via reddit http://ift.tt/2kxje04
Mail Online
Hackers halt plant operations in watershed cyber attack
Hackers likely working for a nation-state invaded the safety system of a critical infrastructure facility and halted operations, according to cyber investigators.
Breaking Out HSTS (and HPKP) on Firefox, IE/Edge and (possibly) Chrome
http://ift.tt/2l1qzJu
Submitted December 15, 2017 at 09:12PM by llbe
via reddit http://ift.tt/2kzTUGK
http://ift.tt/2l1qzJu
Submitted December 15, 2017 at 09:12PM by llbe
via reddit http://ift.tt/2kzTUGK
Elevenpaths
Breaking Out HSTS (and HPKP) on Firefox, IE/Edge and (possibly) Chrome. Our Black Hat research
The corporate ElevenPaths blog that offers insights about security.
Network Pivoting Technique Cheatsheet
http://ift.tt/2kxdF1K
Submitted December 15, 2017 at 09:03PM by errprone
via reddit http://ift.tt/2Cix4L1
http://ift.tt/2kxdF1K
Submitted December 15, 2017 at 09:03PM by errprone
via reddit http://ift.tt/2Cix4L1
Bit Rot
Network Pivoting Techniques
Basic Pivoting Types
Type
Use Case
Listen - Listen
Exposed asset, may not want to connect out.
Listen - Connect
Normal redirect.
Connect - Connect
Can’t bind, so connect to bridge …
Type
Use Case
Listen - Listen
Exposed asset, may not want to connect out.
Listen - Connect
Normal redirect.
Connect - Connect
Can’t bind, so connect to bridge …
Making something out of Zeros: Alternative primitive for Windows Kernel Exploitation
http://ift.tt/2Bu5Qoe
Submitted December 15, 2017 at 08:53PM by mgalloar
via reddit http://ift.tt/2BdOSYE
http://ift.tt/2Bu5Qoe
Submitted December 15, 2017 at 08:53PM by mgalloar
via reddit http://ift.tt/2BdOSYE
Core Security
Making something out of Zeros: Alternative primitive for Windows Kernel Exploitation
While working on the NVIDIA DxgDdiEscape Handler exploit, it became obvious that The GDI primitives approach discussed the last couple of years would be of no help to reliably exploit this vulnerability.
How Security Alarms Provide Security?
http://ift.tt/2CiEK05
Submitted December 15, 2017 at 09:54PM by tritonsurveillanceca
via reddit http://ift.tt/2BeiR2y
http://ift.tt/2CiEK05
Submitted December 15, 2017 at 09:54PM by tritonsurveillanceca
via reddit http://ift.tt/2BeiR2y
Surveillance Cameras Edmonton | Surveillance Systems Edmonton
http://ift.tt/2gQJgcU
Submitted December 15, 2017 at 09:29PM by tritonsurveillanceca
via reddit http://ift.tt/2BdWmec
http://ift.tt/2gQJgcU
Submitted December 15, 2017 at 09:29PM by tritonsurveillanceca
via reddit http://ift.tt/2BdWmec
Triton Surveillance - Edmonton Surveillance & Security Alarm Systems
Surveillance Cameras Edmonton | Surveillance Systems Edmonton
Triton Surveillance offers latest digital Surveillance Systems and Cameras installation in Edmonton for industrial properties. Request a Free Quote Today!
Triton Surveillance Inc Edmonton T6X 0A9, Security Control Systems
http://ift.tt/2ogvVBx
Submitted December 15, 2017 at 10:26PM by tritonsurveillanceca
via reddit http://ift.tt/2AS6nRp
http://ift.tt/2ogvVBx
Submitted December 15, 2017 at 10:26PM by tritonsurveillanceca
via reddit http://ift.tt/2AS6nRp
MisterWhat
Triton Surveillance Inc Edmonton T6X 0A9, Security Control Systems
Triton Surveillance Inc in Edmonton T6X 0A9 - Company Profile, Phone Number, Address, Postcode, Map and more