karver boosted
karver boosted

RT @zooko@birdsite.link
This has been exploited in practice by Bitcoin thieves. They replaced the cold-wallet address in a hacked server so that BTC got redirected to them, and they vanity-generated their addr to match the first and last chars of the original and this successfully fooled the victims.

twitter.com/zooko/status/10689

karver boosted

The event-stream library in NPM has been backdoored with a Trojan for some time. Looks like a damn mess. If you do/did anything with that library, time to put your helmet on.

karver boosted

Citizens of infosec.exchange: i will very likely be migrating to a new server this weekend. Several things to note:
1. The new server does not have an IPv6 address. Apparently there is a shortage of IPv6 addresses and hosting providers are rationing them.
2. I will be applying the glitch.social mods, which will provide longer toot length, among other enhancements.
3. The new server uses NVMe SSD’s, which I’ve been told are so fast that you may get toots even before you’ve asked for them.

karver boosted
karver boosted

I read a bit about #PrimeNumbers yesterday, as I've always had a fondness for primes. I use them a lot in config settings for servers, as when you get weird timeouts, it's usually very obvious from a multiple of a given prime which timeout is being hit.

karver boosted
karver boosted
karver boosted

Anyone running their mastodon instance using a cloud hosting object storage service (s3, etc)? I am in awe at how fast the storage needs of infosec.exchange are growing.

karver boosted

Well written @wired piece about the real risks of using free wifi nowadays
TL;DR: If you're you're no high-value target you're probably safe as most (commonly used) websites are served over HTTPS.
wired.com/story/hotel-airport-

karver boosted
karver boosted

@LitMoose Digital Forensics? I did volunteer DF for nine years until it became clear it was a full-time job!

karver boosted
karver boosted

@jerry It’s the Year of the Linux Desktop all over again! A gorgeous paradox of choice.

Finally started messing with Mastodon ... no idea what I’m doing, but why should today be any different?

karver boosted

Looking for scripts that make my little DFIR heart happier. Anyone have favorite ps1's they've Frankensteined?
I would love to quick carve ntuser.dat files without encase...

Infosec Exchange

A Mastodon instance for info/cyber security-minded people.