614Con 2018 Information Security Hacking Conference
http://614con.org
Submitted March 27, 2018 at 09:49PM by technoglowstick
via reddit https://ift.tt/2pGerNy
http://614con.org
Submitted March 27, 2018 at 09:49PM by technoglowstick
via reddit https://ift.tt/2pGerNy
reddit
614Con 2018 Information Security Hacking Conference • r/netsec
4 points and 1 comments so far on reddit
Microcontroller Firmware Recovery Using Invasive Analysis
https://ift.tt/2GaYZDc
Submitted March 28, 2018 at 01:35AM by sirusdv
via reddit https://ift.tt/2GydMXW
https://ift.tt/2GaYZDc
Submitted March 28, 2018 at 01:35AM by sirusdv
via reddit https://ift.tt/2GydMXW
The Duo Security Bulletin
Microcontroller Firmware Recovery Using Invasive Analysis
Duo Labs security researchers show how to bypass microcontroller interfaces used for internet of things (IoT) devices - these invasive attacks require physical access to typical microcontrollers.
Cowrie Honeypot Analysis - 24hrs of Attacks
https://ift.tt/2DVD50L
Submitted March 28, 2018 at 01:34AM by thewanderer1999
via reddit https://ift.tt/2I7H8ts
https://ift.tt/2DVD50L
Submitted March 28, 2018 at 01:34AM by thewanderer1999
via reddit https://ift.tt/2I7H8ts
HackerTarget.com
Cowrie Honeypot Analysis - 24hrs of Attacks | HackerTarget.com
A review of Cowrie Honeypot logs after 24 hours. Includes source analysis from over 200 unique connections and an animated attack map (pewpew).
Tool to Scrape Bug Bounty Subdomains from HackerOne using GraphQL
https://ift.tt/2pL2C7P
Submitted March 28, 2018 at 01:20AM by bjorgein
via reddit https://ift.tt/2pO8lto
https://ift.tt/2pL2C7P
Submitted March 28, 2018 at 01:20AM by bjorgein
via reddit https://ift.tt/2pO8lto
GitHub
bonkc/BugBountySubdomains
BugBountySubdomains - Tools to gather subdomains from Bug Bounty programs
The latest, with technical detail, on the City of Atlanta ransomware hack.
https://ift.tt/E1zo56
Submitted March 28, 2018 at 01:15AM by usgmlp
via reddit https://ift.tt/2GbcXoJ
https://ift.tt/E1zo56
Submitted March 28, 2018 at 01:15AM by usgmlp
via reddit https://ift.tt/2GbcXoJ
Raxis
City of Atlanta 2018 Ransomware Hack: What We Know and What You Can Learn From It - Raxis
The 2018 City of Atlanta Ransomware attack is still unfolding. Raxis discusses what we know so far and the technology behind the scenes.
[New Podcast] Explore Robin Stuart's roundabout journey to becoming one of the best malware researchers
https://ift.tt/2ut7mER
Submitted March 28, 2018 at 01:45AM by ju1i3k
via reddit https://ift.tt/2pJ20jJ
https://ift.tt/2ut7mER
Submitted March 28, 2018 at 01:45AM by ju1i3k
via reddit https://ift.tt/2pJ20jJ
SoundCloud
Ep 3 Robin Stuart: A Malware Superhero
Paralegal, mountain cyclist, malicious code researcher at eBay, security operations at Wells Fargo, cybercrime novelist, and now a principal threat researcher at a Fortune 50 company, Robin Stuart tal
Computer wouldn't shut down and it might be hacked?
I was leaving for school at around 7 and I had forgotten to turn off my computer (I fell asleep finishing up work for 3rd quarter and forgot to turn it off for the night). I rushed over to my room and had gone into the menu and pressed 'shut down'. The computer turns off, but turns back on. I was in a rush so I asked my dad to turn it off for me and didn't think too much of it. When I came back from school, my dad told me that someone else was using my computer from a different location and that was the reason it didn't shut down (not too sure if this was true, but that's what happened according to him). I didn't really understand too much of it, but this was not the first time it had happened. It happened a couple of days ago, but my computer did shut down that time. My dad told me I might have been hacked, but I don't want to start assuming things. Not sure what to do, so i'm asking you guys.
Submitted March 28, 2018 at 02:09AM by HurryingFawn
via reddit https://ift.tt/2uybDqH
I was leaving for school at around 7 and I had forgotten to turn off my computer (I fell asleep finishing up work for 3rd quarter and forgot to turn it off for the night). I rushed over to my room and had gone into the menu and pressed 'shut down'. The computer turns off, but turns back on. I was in a rush so I asked my dad to turn it off for me and didn't think too much of it. When I came back from school, my dad told me that someone else was using my computer from a different location and that was the reason it didn't shut down (not too sure if this was true, but that's what happened according to him). I didn't really understand too much of it, but this was not the first time it had happened. It happened a couple of days ago, but my computer did shut down that time. My dad told me I might have been hacked, but I don't want to start assuming things. Not sure what to do, so i'm asking you guys.
Submitted March 28, 2018 at 02:09AM by HurryingFawn
via reddit https://ift.tt/2uybDqH
reddit
Computer wouldn't shut down and it might be hacked? • r/security
I was leaving for school at around 7 and I had forgotten to turn off my computer (I fell asleep finishing up work for 3rd quarter and forgot to...
Thought Meltdown was bad? Here's Total Meltdown (Win7/2008R2)!
https://ift.tt/2DWtiYp
Submitted March 28, 2018 at 02:08AM by Jeoh
via reddit https://ift.tt/2GwmZjA
https://ift.tt/2DWtiYp
Submitted March 28, 2018 at 02:08AM by Jeoh
via reddit https://ift.tt/2GwmZjA
reddit
Thought Meltdown was bad? Here's Total Meltdown... • r/sysadmin
https://blog.frizk.net/2018/03/total-meltdown.html >Did you think Meltdown was bad? Unprivileged applications being able to read kernel memory at...
Video game account recovery via twitter. Is this secure?
Hello,When people update my app on android, andoid leaves no data behind from previous install to id the user on my server. So I need some sort of password recovery system. I am opting twitter integration to promote my game too with contests.Here is my system:
1) Someone logs in after an update
2) It asks them their Twitter handle
3) If the Twitter handle is already registered, it gives them a six digit id code.
4) They direct message @Battlemontrue that five digit code
5) @Battlemontrue direct messages them back a five digit code
6) They type this into their mobile device, and their account is recovered and stored.This is mostly just a temporary solution because twitter api doesn't scale well past a couple thousand users.
Submitted March 28, 2018 at 04:37AM by goodnewsjimdotcom
via reddit https://ift.tt/2pJJnwc
Hello,When people update my app on android, andoid leaves no data behind from previous install to id the user on my server. So I need some sort of password recovery system. I am opting twitter integration to promote my game too with contests.Here is my system:
1) Someone logs in after an update
2) It asks them their Twitter handle
3) If the Twitter handle is already registered, it gives them a six digit id code.
4) They direct message @Battlemontrue that five digit code
5) @Battlemontrue direct messages them back a five digit code
6) They type this into their mobile device, and their account is recovered and stored.This is mostly just a temporary solution because twitter api doesn't scale well past a couple thousand users.
Submitted March 28, 2018 at 04:37AM by goodnewsjimdotcom
via reddit https://ift.tt/2pJJnwc
reddit
Video game account recovery via twitter. Is this secure? • r/security
Hello, When people update my app on android, andoid leaves no data behind from previous install to id the user on my server. So I need some sort...
Automation and Orchestration tool to use?
I can't seem to find the differences between the various orchestration and Automation tools for security firms. I want to automate alot of the tasks in my CISO.Which do you recommend and why? Like what are the differences?I know about rapid7, alienvault, phantom and threatconnect
Submitted March 28, 2018 at 04:19AM by gorerillaz
via reddit https://ift.tt/2pM6llB
I can't seem to find the differences between the various orchestration and Automation tools for security firms. I want to automate alot of the tasks in my CISO.Which do you recommend and why? Like what are the differences?I know about rapid7, alienvault, phantom and threatconnect
Submitted March 28, 2018 at 04:19AM by gorerillaz
via reddit https://ift.tt/2pM6llB
reddit
Automation and Orchestration tool to use? • r/security
I can't seem to find the differences between the various orchestration and Automation tools for security firms. I want to automate alot of the...
Wells Fargo – Online Banking Authentication Weakness - Mostly Technical Writeup
https://ift.tt/2pKItPe
Submitted March 28, 2018 at 06:54AM by Angrymilks
via reddit https://ift.tt/2J0w9Dm
https://ift.tt/2pKItPe
Submitted March 28, 2018 at 06:54AM by Angrymilks
via reddit https://ift.tt/2J0w9Dm
Gh0st - Security Blog About Nothing
Wells Fargo – Online Banking Authentication Weakness / “Feature”
Try as I might to contact Wells Fargo regarding an almighty issue of issues regarding their authentication logic. So let’s say your password that you set purposely to “SuperDuperPassword” or better…
Facial recognition technology can now text jaywalkers a fine
https://ift.tt/2urdoWx
Submitted March 28, 2018 at 08:04AM by robert_brooks
via reddit https://ift.tt/2pLwtgA
https://ift.tt/2urdoWx
Submitted March 28, 2018 at 08:04AM by robert_brooks
via reddit https://ift.tt/2pLwtgA
New York Post
Facial recognition technology can now text jaywalkers a fine
Jaywalkers in China are to be named, shamed and slapped with an instant SMS fine.
And it’s all thanks to cutting-edge artificial intelligence.
In the southeastern city of Shenzhen, police have
And it’s all thanks to cutting-edge artificial intelligence.
In the southeastern city of Shenzhen, police have
Students Information and their Student No.
Do you think it's okay to show to public a complete list of student of a school in their website along with their Name, Course/Degree, Year of Attendance, year of graduation and their Student No.?
Submitted March 28, 2018 at 07:33AM by ojnabable
via reddit https://ift.tt/2IW6jQK
Do you think it's okay to show to public a complete list of student of a school in their website along with their Name, Course/Degree, Year of Attendance, year of graduation and their Student No.?
Submitted March 28, 2018 at 07:33AM by ojnabable
via reddit https://ift.tt/2IW6jQK
reddit
Students Information and their Student No. • r/security
Do you think it's okay to show to public a complete list of student of a school in their website along with their Name, Course/Degree, Year of...
How to Prevent Retail Shrinkage
https://ift.tt/2J2dpU6
Submitted March 28, 2018 at 12:59PM by scorpionsecurities17
via reddit https://ift.tt/2I9FSpy
https://ift.tt/2J2dpU6
Submitted March 28, 2018 at 12:59PM by scorpionsecurities17
via reddit https://ift.tt/2I9FSpy
reddit
How to Prevent Retail Shrinkage • r/security
2 points and 0 comments so far on reddit
Not sure if repost, but this pod gives some great highlights of the sites that expose your data
https://ift.tt/2HLZdOh
Submitted March 28, 2018 at 10:24AM by DayOfReckoning47
via reddit https://ift.tt/2IXytLg
https://ift.tt/2HLZdOh
Submitted March 28, 2018 at 10:24AM by DayOfReckoning47
via reddit https://ift.tt/2IXytLg
Timothy De Block
What's happening in OSINT?
In this open edition of the Exploring Information Security podcast, I sit down with Micah Hoffman, Kerby Plessas, and Josh Huff to discuss Open Source INTelligence (OSINT). Micah Hoffman ( @WebBreacher ) is a SANS instructor who will be teaching a brand…
I’ve tested seventy VPN providers and 16 of them leaks users’ IPs via WebRTC (23%)
https://ift.tt/2Ghkv58
Submitted March 28, 2018 at 01:40PM by nibblesec
via reddit https://ift.tt/2GgT5wj
https://ift.tt/2Ghkv58
Submitted March 28, 2018 at 01:40PM by nibblesec
via reddit https://ift.tt/2GgT5wj
VoidSec
VPN Leak - VoidSec
VPN leaks users’ IPs via WebRTC. I’ve tested seventy VPN providers and 16 of them leaks users’ IPs via WebRTC (23%)
Use rtl-sdr to turn your cheap DVB-T dongle into a high quality entropy source
https://ift.tt/1CaAEF3
Submitted March 28, 2018 at 02:54PM by liotier
via reddit https://ift.tt/2pLSsVv
https://ift.tt/1CaAEF3
Submitted March 28, 2018 at 02:54PM by liotier
via reddit https://ift.tt/2pLSsVv
GitHub
pwarren/rtl-entropy
rtl-entropy - An entropy generator using SDR peripherals, including rtl-sdr and BladeRF
Charles Proxy Now Available on iOS
https://ift.tt/2IZ69YR
Submitted March 28, 2018 at 03:56PM by yawnful
via reddit https://ift.tt/2E1p9SQ
https://ift.tt/2IZ69YR
Submitted March 28, 2018 at 03:56PM by yawnful
via reddit https://ift.tt/2E1p9SQ
Charlesproxy
Charles for iOS • Charles Web Debugging Proxy
Charles Web Debugging Proxy - Official Site
Academics Discover New CPU Side-Channel Attack Named BranchScope
https://ift.tt/2GAXHRz
Submitted March 28, 2018 at 04:40PM by zexterio
via reddit https://ift.tt/2pMvsVr
https://ift.tt/2GAXHRz
Submitted March 28, 2018 at 04:40PM by zexterio
via reddit https://ift.tt/2pMvsVr
BleepingComputer
Academics Discover New CPU Side-Channel Attack Named BranchScope
A team of academics from four US universities have discovered a new side-channel attack that takes advantage of the speculative execution feature in modern processors to recover data from users' CPUs.
Still, haven't applied SSL? Here's why you should do it right now.
https://ift.tt/2pK4azO
Submitted March 28, 2018 at 05:43PM by ded1cated
via reddit https://ift.tt/2utMcq4
https://ift.tt/2pK4azO
Submitted March 28, 2018 at 05:43PM by ded1cated
via reddit https://ift.tt/2utMcq4
WebARX
Why HTTPS Is Important And How To Choose SSL Certificate?
63,2% of internet users are using Google Chrome as their internet browser. And the latest updates that Google has made on Chrome make sure, that any website that has no security layer (SSL certificate) will be marked as insecure.
When Quantifying Risk, Make It Real And Tangible
https://ift.tt/2pN5hh9
Submitted March 28, 2018 at 05:41PM by Uminekoshi
via reddit https://ift.tt/2pMiF6l
https://ift.tt/2pN5hh9
Submitted March 28, 2018 at 05:41PM by Uminekoshi
via reddit https://ift.tt/2pMiF6l
Nehemiah Security
When Quantifying Risk, Make it Real and Tangible - Nehemiah Security
“If your friend was put in charge of measuring cyber risk at their company, what advice would you give them?”