Abusing Linux's firewall: the hack that allowed us to build Spectrum
https://ift.tt/2HujVT2
Submitted April 13, 2018 at 01:25AM by rmddos
via reddit https://ift.tt/2Huemnx
https://ift.tt/2HujVT2
Submitted April 13, 2018 at 01:25AM by rmddos
via reddit https://ift.tt/2Huemnx
Cloudflare Blog
Abusing Linux's firewall: the hack that allowed us to build Spectrum
Introducing Spectrum: a new Cloudflare feature that brings DDoS protection, load balancing, and content acceleration to any TCP-based protocol.Today we are releasing Spectrum.
HITB2018AMS: Smashing smart contracts for fun and real profit (a tribute to Aleph One)
https://ift.tt/2GTOaBH
Submitted April 13, 2018 at 03:37AM by berndtzl
via reddit https://ift.tt/2qtKUpH
https://ift.tt/2GTOaBH
Submitted April 13, 2018 at 03:37AM by berndtzl
via reddit https://ift.tt/2qtKUpH
Polyverse Readhook Simulator: an open source buffer overflow exploit tool
https://www.youtube.com/watch?v=ok8Pe2RuM30
Submitted April 13, 2018 at 04:03AM by Polyverse_Security
via reddit https://ift.tt/2EHtkUj
https://www.youtube.com/watch?v=ok8Pe2RuM30
Submitted April 13, 2018 at 04:03AM by Polyverse_Security
via reddit https://ift.tt/2EHtkUj
YouTube
Polyverse Readhook Zero-Day Simulator
This video demonstrates the Polyverse ReadHook Zero Day Simulator tool. More details on this tool can be found here: blog.polyverse.io/an-intentional-buffer-...
Username/Password emailed for account creation
I recently received an email from a service that I needed to create an account on. It's not a publicly available service, so they had to setup the "temp" account for me and send me the credentials to log in the first time.This is nothing new, I've seen this many times before. What confused me was the fact that the username and password were sent as two separate emails back to back. The emails said that they were doing this for security.Could someone explain how this is more secure than sending this information in one email?
Submitted April 13, 2018 at 04:34AM by CreativeTechGuyGames
via reddit https://ift.tt/2JIDHef
I recently received an email from a service that I needed to create an account on. It's not a publicly available service, so they had to setup the "temp" account for me and send me the credentials to log in the first time.This is nothing new, I've seen this many times before. What confused me was the fact that the username and password were sent as two separate emails back to back. The emails said that they were doing this for security.Could someone explain how this is more secure than sending this information in one email?
Submitted April 13, 2018 at 04:34AM by CreativeTechGuyGames
via reddit https://ift.tt/2JIDHef
reddit
Username/Password emailed for account creation • r/security
I recently received an email from a service that I needed to create an account on. It's not a publicly available service, so they had to setup the...
Windows 10 Spring Creators Update adds "delete" button for all data collected by Microsoft from your device
https://ift.tt/2JzTPic
Submitted April 13, 2018 at 04:44AM by AzoWei
via reddit https://ift.tt/2EHOKAJ
https://ift.tt/2JzTPic
Submitted April 13, 2018 at 04:44AM by AzoWei
via reddit https://ift.tt/2EHOKAJ
PCWorld
Windows 10 Spring Creators Update: The best hidden features
Microsoft’s Windows 10 upgrade, code-named Redstone 4 and informally known as the Spring Creators Update and possibly Windows 10 Version Next, offers many smaller additions and changes you might miss. We've highlighted them here.
Residential camera system - help
Hey everyone, if this isnt the right place, cpuld you point me in the right direction?We are moving into "town" from the "country" and want to make the upgrade to a residential home camera system (I guess like what product like Nest might offer)Im looking for a cloud based service with continous recording and a reasonable annual/montly service charge. We would be needing about 2 inside, 2 outside with decent specs. Can anyone give me a few products to consider? My budget isnt unlimited, but I would rather spend the $300 dollar and do it right for when quality matters.
Submitted April 13, 2018 at 05:39AM by TwentyCharacterMaxim
via reddit https://ift.tt/2EGVK0w
Hey everyone, if this isnt the right place, cpuld you point me in the right direction?We are moving into "town" from the "country" and want to make the upgrade to a residential home camera system (I guess like what product like Nest might offer)Im looking for a cloud based service with continous recording and a reasonable annual/montly service charge. We would be needing about 2 inside, 2 outside with decent specs. Can anyone give me a few products to consider? My budget isnt unlimited, but I would rather spend the $300 dollar and do it right for when quality matters.
Submitted April 13, 2018 at 05:39AM by TwentyCharacterMaxim
via reddit https://ift.tt/2EGVK0w
reddit
Residential camera system - help • r/security
reddit: the front page of the internet
Analyzing CVE-2017-0263 - reported to be used to attack with an EPS vulnerability to interfere the French election (See Comment)
https://ift.tt/2IRv0xd
Submitted April 13, 2018 at 09:11AM by TechLord2
via reddit https://ift.tt/2GV0jq7
https://ift.tt/2IRv0xd
Submitted April 13, 2018 at 09:11AM by TechLord2
via reddit https://ift.tt/2GV0jq7
reddit
Analyzing CVE-2017-0263 - reported to be used to attack... • r/netsec
1 points and 1 comments so far on reddit
12 tips for regular website owners to keep their site online (and secured).
https://ift.tt/2IOTXJq
Submitted April 13, 2018 at 02:01PM by ded1cated
via reddit https://ift.tt/2HlEy6e
https://ift.tt/2IOTXJq
Submitted April 13, 2018 at 02:01PM by ded1cated
via reddit https://ift.tt/2HlEy6e
WebARX
12 Website Security Tips From Experts For 2018 - WebARX
We have gathered 12 website security tips from experts for 2018. Security is something people can not ignore anymore and our mission is to make it as elementary as locks on home doors.
Invoke-Adversary – Simulating Adversary Operations
https://ift.tt/2GNNAFG
Submitted April 13, 2018 at 02:15PM by Moti_Ba
via reddit https://ift.tt/2qtQhpQ
https://ift.tt/2GNNAFG
Submitted April 13, 2018 at 02:15PM by Moti_Ba
via reddit https://ift.tt/2qtQhpQ
12 tips for website owners to keep the site secured
https://ift.tt/2IOTXJq
Submitted April 13, 2018 at 02:03PM by ded1cated
via reddit https://ift.tt/2qvxKZg
https://ift.tt/2IOTXJq
Submitted April 13, 2018 at 02:03PM by ded1cated
via reddit https://ift.tt/2qvxKZg
WebARX
12 Website Security Tips From Experts For 2018 - WebARX
We have gathered 12 website security tips from experts for 2018. Security is something people can not ignore anymore and our mission is to make it as elementary as locks on home doors.
DOM-based CSRF in Facebook
https://ift.tt/2pSQGB7
Submitted April 13, 2018 at 03:37PM by albinowax
via reddit https://ift.tt/2quYqcR
https://ift.tt/2pSQGB7
Submitted April 13, 2018 at 03:37PM by albinowax
via reddit https://ift.tt/2quYqcR
Hey Dave, next time your mate tells you to change your password in the University PC suite, don’t read it out loud as you type it. Oh, and capital D, ave3333 isn’t very secure.
No text found
Submitted April 13, 2018 at 04:41PM by po30555
via reddit https://ift.tt/2HyGlCy
No text found
Submitted April 13, 2018 at 04:41PM by po30555
via reddit https://ift.tt/2HyGlCy
reddit
Hey Dave, next time your mate tells you to change... • r/security
4 points and 2 comments so far on reddit
PoC Code for demonstrating CVE-2018-0886 [See Comment]
https://ift.tt/2GV4INV
Submitted April 13, 2018 at 05:10PM by TechLord2
via reddit https://ift.tt/2EIrTVM
https://ift.tt/2GV4INV
Submitted April 13, 2018 at 05:10PM by TechLord2
via reddit https://ift.tt/2EIrTVM
GitHub
preempt/credssp
credssp - A code demonstrating CVE-2018-0886
50 VPNs share data on their users with Facebook
https://ift.tt/2Hz5ltx
Submitted April 13, 2018 at 05:31PM by KingHeenrry
via reddit https://ift.tt/2JITslE
https://ift.tt/2Hz5ltx
Submitted April 13, 2018 at 05:31PM by KingHeenrry
via reddit https://ift.tt/2JITslE
vpnMentor
Report: 50 VPNs share data on their users with Facebook | vpnMentor
Is your VPN running the Facebook pixel, thus putting a dent in your privacy? We tested almost 300 — check out the results and see if it’s time you had a word with your provider.
Kubernetes Security - Best Practice Guide
https://ift.tt/2JiTKz8
Submitted April 13, 2018 at 06:08PM by speckz
via reddit https://ift.tt/2qtiEna
https://ift.tt/2JiTKz8
Submitted April 13, 2018 at 06:08PM by speckz
via reddit https://ift.tt/2qtiEna
GitHub
freach/kubernetes-security-best-practice
Kubernetes Security - Best Practice Guide. Contribute to freach/kubernetes-security-best-practice development by creating an account on GitHub.
Bug hunters: The hackers earning big bucks... ethically
https://ift.tt/2IRKEIz
Submitted April 13, 2018 at 06:31PM by sassanix
via reddit https://ift.tt/2IPzjJa
https://ift.tt/2IRKEIz
Submitted April 13, 2018 at 06:31PM by sassanix
via reddit https://ift.tt/2IPzjJa
BBC News
Bug hunters: The hackers earning big bucks... ethically
Big rewards are available for hackers who can spot when websites have got their coding wrong.
Security In 5: Episode 216 - Cloudflare DNS - Why You Should Start Using It Today
https://ift.tt/2ISxM5j
Submitted April 13, 2018 at 06:36PM by BinaryBlog
via reddit https://ift.tt/2qvaUBO
https://ift.tt/2ISxM5j
Submitted April 13, 2018 at 06:36PM by BinaryBlog
via reddit https://ift.tt/2qvaUBO
Libsyn
Security In Five Podcast: Episode 216 - Cloudflare DNS - Why You Should Start Using It Today
This week's Tools, Tips and Tricks episode is the one you should use starting today. Cloudflare released a new, private and public DNS that anyone can use. In the growing concern around privacy and the rest of the Internet users waking up to how companies…
Is cyber insurance the solution to GDPR liability?
https://ift.tt/2GVs3uS
Submitted April 13, 2018 at 07:03PM by htbridgedigital
via reddit https://ift.tt/2EIKe54
https://ift.tt/2GVs3uS
Submitted April 13, 2018 at 07:03PM by htbridgedigital
via reddit https://ift.tt/2EIKe54
Htbridge
Is cyber insurance the solution to GDPR liability?
The enforcement of GDPR is imminent (25 May 2018). Companies have already spent millions of dollars, euros and pounds reinforcing their security and adapting their processes to ensure compliance.
Cross-Protocol Request Forgery
https://ift.tt/2qtGgYV
Submitted April 13, 2018 at 07:14PM by digicat
via reddit https://ift.tt/2HkF8kB
https://ift.tt/2qtGgYV
Submitted April 13, 2018 at 07:14PM by digicat
via reddit https://ift.tt/2HkF8kB
Snow Day Calculator XSS
https://ift.tt/2GZxwRn
Submitted April 13, 2018 at 04:21AM by veggiedefender
via reddit https://ift.tt/2HwmbJy
https://ift.tt/2GZxwRn
Submitted April 13, 2018 at 04:21AM by veggiedefender
via reddit https://ift.tt/2HwmbJy
Android phone makers skip Google security updates without telling users – study
https://ift.tt/2HxQwr5
Submitted April 13, 2018 at 09:46PM by imr2017
via reddit https://ift.tt/2qvJLhw
https://ift.tt/2HxQwr5
Submitted April 13, 2018 at 09:46PM by imr2017
via reddit https://ift.tt/2qvJLhw
the Guardian
Android phone makers skip Google security updates without telling users – study
Users told smartphone’s software has been updated with monthly patches when it hasn’t, new research claims