karver @karver@infosec.exchange
Tactical Computer Geek
hacker // #infosec #forensics #dfir
here to learn, here to help // (he|him)
not my employer’s views
Receiving NOAA Weather Satellite Images with $10 USB SDR Device (2014) [video]
https://news.ycombinator.com/item?id=18581269
#hackernews #tech
RT @zooko@birdsite.link
This has been exploited in practice by Bitcoin thieves. They replaced the cold-wallet address in a hacked server so that BTC got redirected to them, and they vanity-generated their addr to match the first and last chars of the original and this successfully fooled the victims.
The event-stream library in NPM has been backdoored with a Trojan for some time. Looks like a damn mess. If you do/did anything with that library, time to put your helmet on.
Citizens of infosec.exchange: i will very likely be migrating to a new server this weekend. Several things to note:
1. The new server does not have an IPv6 address. Apparently there is a shortage of IPv6 addresses and hosting providers are rationing them.
2. I will be applying the glitch.social mods, which will provide longer toot length, among other enhancements.
3. The new server uses NVMe SSD’s, which I’ve been told are so fast that you may get toots even before you’ve asked for them.
@jerry @smays there is a cool podcast about the machine that generates the sitcom laughs: https://99percentinvisible.org/episode/the-laff-box/
I read a bit about #PrimeNumbers yesterday, as I've always had a fondness for primes. I use them a lot in config settings for servers, as when you get weird timeouts, it's usually very obvious from a multiple of a given prime which timeout is being hit.
Paint16b: A 16 byte paint program written in 12 lines
https://news.ycombinator.com/item?id=18481929
#hackernews #tech
Forgot your #instagram password? You just had to use their GDPR export tool to get it in plain text https://www.theverge.com/2018/11/17/18100235/instagram-security-bug-exposed-user-passwords-data-download-tool
Anyone running their mastodon instance using a cloud hosting object storage service (s3, etc)? I am in awe at how fast the storage needs of infosec.exchange are growing. #mastoadmins
Well written @wired piece about the real risks of using free wifi nowadays
TL;DR: If you're you're no high-value target you're probably safe as most (commonly used) websites are served over HTTPS.
https://www.wired.com/story/hotel-airport-wifi-safe/
#Infosec #CyberSecurity
Insomnia: 'No link' between sleepless nights and early death
https://news.ycombinator.com/item?id=18468651
#hackernews #tech
@LitMoose Digital Forensics? I did volunteer DF for nine years until it became clear it was a full-time job!
Japan cyber security minister admits he has never used a computer. More secure than any of us!
https://www.theguardian.com/world/2018/nov/15/japan-cyber-security-ministernever-used-computer-yoshitaka-sakurada
Old MacDonald had a CPU instruction set, https://www.ibm.com/support/knowledgecenter/en/ssw_aix_71/com.ibm.aix.alangref/idalangref_eieio_instrs.htm
@jerry It’s the Year of the Linux Desktop all over again! A gorgeous paradox of choice.
Finally started messing with Mastodon ... no idea what I’m doing, but why should today be any different?
Looking for scripts that make my little DFIR heart happier. Anyone have favorite ps1's they've Frankensteined?
I would love to quick carve ntuser.dat files without encase...
Tactical Computer Geek
hacker // #infosec #forensics #dfir
here to learn, here to help // (he|him)
not my employer’s views
