2018-12-31 News Feed

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Today’s Principle to Follow:
Principle #6: Everyone Is Constantly Trying To Sell You Something.
   We live in a capitalistic society where ads are pretty much everywhere. They are on buses, buildings, on TV, in our computers, etc. Some people literally have ads tattooed on to their bodies. Also, commercial businesses surround us everywhere we go. You probably can’t walk a mile in any direction without finding a place that is selling something. A competitive marketplace has forced advertisers to look for more and more creative ways to sell their products. Experienced marketers have learned to appeal to us both consciously and subconsciously, increasing their power over us. We have to learn to resist their influence and to choose our own direction.
   
   You’ve probably heard that supermarkets strategically place items in the store so the ones everyone always needs like milk are often way in the back. Selling is everywhere, whether you notice it or not. Even if someone isn’t trying to sell you a product, they may be trying to sell you an idea. For example they may try to convince you of their religion, their politics, their world views, etc. We have to be aware of all this selling, so we are not so naive as to believe that everyone wants to personally help us. Much of the time rather than help, others are focused on selling a product or idea to us.


Researchers exploit Vein-based authentication system using a wax hand

Researchers exploit Vein-based authentication system using a wax hand


#hackerstuff #HackThePlanet


Windows Zero-Day Bug Allows Overwriting Files with Arbitrary Data (by @SandBoxEscaper)
https://www.bleepingcomputer.com/news/security/windows-zero-day-bug-allows-overwriting-files-with-arbitrary-data/
#hackerstuff #HackThePlanet


CenturyLink 911 outage was caused by a single network card sending bad packets
https://threader.app/thread/1078419619436810240
#hackerstuff #HackThePlanet


2018-12-27 News Feed

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Today’s Principle to Follow:
Principle #5: Read Source Literature and Books.
   There is nothing wrong with reading new books. This is a new book, and I read newer material all the time. However, you can often get a better quality learning experience when you go back to older classical reads like The Odyssey, anything by Shakespeare, The Wealth of Nations, Darwin’s On the Origin of Species, and Ancient Greco-Roman mythology. Going back gives you a more direct view into some of the greatest minds that came up with original works of great art and science. When you read older works, you also see interesting patterns. You start to see that a lot of classical works are referenced all over the place in modern society. If you aren’t aware of them, however, it’s easy to miss.



Three Actionable Steps To Take Following Your Penetration Testing

Three Actionable Steps To Take Following Your Penetration Testing


#hackerstuff #HackThePlanet


Nokia exposes passwords & secret access keys to its internal systems

Nokia exposes passwords & secret access keys to its internal systems


#hackerstuff #HackThePlanet


2018-12-21 News Feed

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Today’s Principle to Follow:
Principle #4: No One Weighs The Importance Of Facts For You. Weigh Them Yourself.
   In school you are usually given all the information for a test, and it is up to you to learn it. Tests are often multiple choice, meaning ever question is worth just the same as the other. In real life, this isn’t how things work. In real life, this isn’t how things work. In real life you often have access to information, but you are rarely told what is the most important to know. However, when you are testing in life (given a sort of grade, if you will) the people who do the best are the ones who understand what is most important. Also, realize that this is a skill that is never taught anywhere. Learn to weigh the facts for yourself. Observe patterns of what tends to be critical in your work space, or in your household, or in any system. Focus on making sure the most important things are taken care of first.



FBI Seizes 15 DDoS-For-Hire Websites, 3 Operators Charged
https://thehackernews.com/2018/12/fbi-christmas-ddos-for-hire.html
#hackerstuff #HackThePlanet


US Indicts Two Chinese Government Hackers Over Global Hacking Campaign
https://thehackernews.com/2018/12/chinese-hacker-wanted-by-fbi.html
#hackerstuff #HackThePlanet


#ROTFLMAO
New email extortion scam warns “Pay $4,000 or a hitman is coming for you”

New email extortion scam warns “Pay $4,000 or a hitman is coming for you”


#hackerstuff #HackThePlanet


How I accidentally found a clickjacking “feature” in Facebook

How I accidentally found a clickjacking “feature” in Facebook


#hackerstuff #HackThePlanet


Exploiting an 18 Year Old Bug
https://medium.com/tenable-techblog/exploiting-an-18-year-old-bug-b47afe54172
#hackerstuff #HackThePlanet


Write-up: Social Engineering – Impersonation made easy

Social Engineering – Impersonation made easy


#hackerstuff #HackThePlanet


Linux process infection(I): using the address space of other processes as warehouse
https://www.tarlogic.com/en/blog/linux-process-infection-part-i/
#hackerstuff #HackThePlanet


Complete and in-depth analysis of an Android SMS stealing application
https://maxkersten.nl/binary-analysis-course/malware-analysis/android-sms-stealer/
#hackerstuff #HackThePlanet


Inside of Danderspritz post-exploitation modules
https://medium.com/@woj_ciech/inside-of-danderspritz-post-exploitation-modules-18a4f2761130
#hackerstuff #HackThePlanet


Internet Explorer Zero Day Exploited in Attacks
https://infosecit.com/2018/12/20/internet-explorer-zero-day-exploited-in-attacks/
#hackerstuff #HackThePlanet


2018-12-20 News Feed

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Today’s Principle to Follow:
Principle #3: Learn to be Self-Reliant and to Prioritize What is Most Important
   School, work, government, and other systems have their own agendas, and their own flaws. They will be happy to tell you where to go and what to learn, but at some point you have to decide for yourself what is truly important to know.
   
   School focuses on learning math, science, and history, among other topics, but what about learning why those topics are important? They often don’t focus on the why, as much as they ask you to simply memorize facts. Survival skills are rarely taught in school, but this is another example of something that could be quite useful to learn. The point here is you need to decide for yourself what is important. Ask what you would teach if you were in charge of the school system. There is no excuse to be passive and let your education slip past you. Take those important topics and learn them for yourself.
   
   Be aware that often times in modern society, trivial things are talked about on and on as if they are important, and truly important things like world issues are rarely discussed in any deep way. Intelligent people tend to strive to find something meaningful and important to them, and they will focus on this instead of trivial issues.



NASA suffers data breach – Staff’s personal data stolen

NASA suffers data breach – Staff’s personal data stolen


#hackerstuff #HackThePlanet


Here is a list of top 25 worst passwords of 2018

Here is a list of top 25 worst passwords of 2018


#hackerstuff #HackThePlanet


Acunetix Vulnerability Scanner For Linux Now Available

Acunetix Vulnerability Scanner For Linux Now Available


#hackerstuff #HackThePlanet


MD5 instant collisions of any JPG, PNG, PDF, MP4…
https://github.com/corkami/pocs/blob/master/collisions/README.md
#hackerstuff #HackThePlanet


Another sanboxescaper 0day – by @evil_polar_bear
https://sandboxescaper.blogspot.com/2018/12/readfile-0day.html
#hackerstuff #HackThePlanet


@Amazon reveals private Alexa voice data files
https://www.heise.de/newsticker/meldung/Amazon-reveals-private-voice-data-files-4256015.html
#hackerstuff #HackThePlanet


@Amazon’s R&D lab in Kiev processing Ring’s footage
https://threader.app/thread/1075500901115154432
#hackerstuff #HackThePlanet


Advisory | MailCleaner Community Edition Remote Code Execution

Advisory | MailCleaner Community Edition Remote Code Execution


#hackerstuff #HackThePlanet


Binary Exploitation – Buffer Overflow Explained in Detail
https://0xrick.github.io/BinaryExploitation-BOF/
#hackerstuff #HackThePlanet


Project Zero: Searching statically-linked vulnerable library functions in executable code
https://googleprojectzero.blogspot.com/2018/12/searching-statically-linked-vulnerable.html
#hackerstuff #HackThePlanet


Security Controls at DoD Facilities for Protecting Ballistic Missile Defense System – Technical Information
https://media.defense.gov/2018/Dec/14/2002072642/-1/-1/1/DODIG-2019-034.PDF
#hackerstuff #HackThePlanet


RDP Man-in-the-Middle – Smile! You’re on Camera

RDP Man-in-the-Middle – Smile! You’re on Camera


#hackerstuff #HackThePlanet


You’re Not the Customer
https://ericalexander.org/posts/youre-not-the-customer/
#hackerstuff #HackThePlanet


2018-12-19 News Feed

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Today’s Principle to Follow:
Principle #2: Learn From Multiple Formats or Methods
   It is true that people learn in different ways. Some learn better through reading, others through listening, seeing or doing. When learning something new, it is a good idea to start with one method of learning, perhaps your favorite first. When you come across a barrier where you don’t understand, try another way. Keep doing this until you make progress and finally understand. Even just with the Internet you can use books, Wikipedia, YouTube, and free Open Courseware. You will learn more quickly and holistically through multiple sources. Understand that the real world will not allow you to choose how to learn from it. At work you may be asked to attend conferences or to read some material. Either way, you will be expected to learn even if it isn’t your preferred way.



Mayday! NASA Warns Employees of Personal Information Breach
https://thehackernews.com/2018/12/nasa-hack-data-breach.html
#hackerstuff #HackThePlanet


Intel VISA: Through the Rabbit Hole
https://www.blackhat.com/asia-19/briefings/schedule/index.html#intel-visa-through-the-rabbit-hole-13513
#hackerstuff #HackThePlanet


Pure In-Memory (Shell)Code Injection In Linux Userland
https://blog.sektor7.net/#!res/2018/pure-in-memory-linux.md
#hackerstuff #HackThePlanet


Happy 16shop hunting
https://hackmd.io/s/HJ4AOzDlE
#hackerstuff #HackThePlanet


The 2018 SANS holiday hack challenge – KringleCon
https://www.kringlecon.com/
#hackerstuff #HackThePlanet