Posts by Clausewitz4.1

UK govt promises digital reform in spending review. We've heard that before

Re: Decline and Fall/Rise and Reinvention

"the enabling of NEUKlearer HyperRadioProACTive Spaces ..... but such is undoubtedly sure to be correspondingly extremely worrying for many"

Do you know the frequencies being used ? Nightmares are an interesting area and I will dive into it. It will save me and others a lot of trouble reverse-engineering. The days and time I will keep note from now on (specially at night).

Re: Decline and Fall/Rise and Reinvention

Every receiver requires a transmitter. Yes, I know the technology is expensive. Politics will solve this in time. Just wait.

Hire me! To drop malware on your computer

Face to face

That's why in-person meetings are preferable. And communications cannot be disrupted this way.

English humor nice as always.

Blocking stolen phones from the cloud can be done, should be done, won't be done

"What about rooted phones running some other Android variant, can they lie about the IMEI? If so, there's the solution for the crooks."

There are tools to reflash other IMEI, depending on the phone model. I will not link it out here, but it is easy to find online.

UK CyberEM Command to spearhead new era of armed conflict

Re: Apples is different from potatoes as fruits are from vegetables.

"I was commenting on the software and secure proprietary instruction set"

Ohhhh you are talking about THIS specific secret. Sorry, there are too many, some I don't recon instantly, others are deeply buried into the past.

Politics will solve this one, with help from the big good / sometimes bad guys from the high command.

I will accept their decision, as a free man, of course.

Re: Camouflage and Misunderestimation ?

"developing cyber weapons and exploits takes them surprisingly little time and hardly any money"

You clearly don't know the business. Stuxnet took more than 1 nation to build and a lot of months ( not leaking nothing, source are the news ) and materials to be bought.

Re: Camouflage ?

"If they are doing cyber , why do they need to hide?"

Because developing cyber weapons and exploits takes a shitload of knowledge and time and money. Most prefer to pay zero-day brokers rather than developing an unit to build it themselves. This for the offensive part.

For the defensive part, because private Keys need to stay private to have secure communications.

India’s chipmaking ambitions hurt by Zoho’s no-go and Adani unease

Private Keys

the carrier has provided identity protection services to 20 million customers, replaced a million SIMs

Looks like someone left it's SIM card's private Keys unprotected.

Ex-NSA cyber-boss: AI will soon be a great exploit coder

Endpoint detection

but the computer had endpoint detection products installed.

An skilled attacker would have bypassed it. No need for AI, humans are better at creativity.

UK bans game controller exports to Russia in bid to ground drone attacks

Re: PMSL

They'll ban export of vodka next. That will show them!

That is truly terrifying.

Signalgate lessons learned: If creating a culture of security is the goal, America is screwed

Re: Is it really a security breach…

There are no good/bad guys in geopolitics. Only guys.

M&S stops online orders as 'cyber incident' issues worsen

That would be me. Always have some cash with me when shopping.

Me as well. Those new people need to learn the wisdom of the old fellas.

Assassin's Creed maker faces GDPR complaint for forcing single-player gamers online

Re: Alternative

As for me, I'm ok in the retro gaming community

One of the lat ones I played was Alex Kid in Miracle World and Carmen SanDiego

Bug hunter tricked SSL.com into issuing cert for Alibaba Cloud domain in 5 steps

Certificate pinning + DNSSEC

Certificate pinning + Apps + DNSSEC are the only real option.

Allowing third parties to hold your encryption keys never worked, and will never work.

CA's can be exploited, go rogue, sell themselves, be subpoenad. Already happens.

Today's LLMs craft exploits from patches at lightning speed

AI bubble bursting

And people still fall for that ?

Developer scored huge own goal by deleting almost every football fan in Europe

We had an award

Once I worked in an e-commerce company which had an award (usually given to trainees):

"First SQL UPDATE without WHERE of the month" in the production database.

Of course we had backups.

Downward DOGE: Elon Musk keeps revising cost-trimming goals in a familiar pattern

Re: "Also didn't it take a shit load of power to process the hydrogen"

"And it's ability to explode in air at roughly 4%-94%."

Yes, it is good but it is dangerous.

"Also didn't it take a shit load of power to process the hydrogen"

Yes it does take a lot of power to split H from H2O, and to collect it into cells. But we have a lot of solar and wind power over here in Brazil to make that happen.

Tesla is dead. BYD already took over.

But the future are Hydrogen-fueled cars, not electric ones.

Hacking US crosswalks to talk like Zuck is as easy as 1234

Passwords, missiles

Reminds me:

The password to launch US nuclear missiles was “00000000” for 20 years. If a hacker tried figuring it out numerically (e.g. 00000000, 00000001, etc.), It would be the first one tried. Why was this password chosen?

Google, AWS say it's too hard for customers to use Linux to swerve Azure

Re: A mountain out of a small mole hill!

"For most SMBs moving away from Windows is not an option, they didn't build their apps, they bought them, and they run on Windows!"

Wrong. You can run most of them with wine, under a secured, encrypted Linux. Being doing that for ages, all sorts of clients.

Reverse Engineering

Hire a couple of reverse engineers and get the job done.

Pretty fast.

Already did it in the past. The most time consuming part is importing stuff, not the design.

Pidgin is back, so let's talk about why a local chat client matters

"Yeah, all the smart people are on Signal nowadays :-)"

Yeah. Doing controlled leaks to scare others.

Re: Oh, IRC in there as well...

"now seamonkey for > 10 years..."

Old but gold

Return of Redis creator bears fruit with vector set data type

Good caching solution

Used redis for years in e-commerce, sitting between MySQL and PHP. Things get much faster indeed.

Will later try the newest version.

Meta's AI, built on ill-gotten content, can probably build a digital you

Human creativity

Human creativity will never be replaced. By so-called AI or whatever.

UK officials insist 'murder prediction tool' algorithms purely abstract

Certainty

The only certain thing in life, is that nothing is certain.

Pharmacist accused of using webcams to spy on women in intimate moments at work, home

Re: Boys will be boys (Leavitt)

'"some" appears to have special values these days.'

All animals are equal, but some animals are more equal than others.

- George Orwell

Don't open that JPEG in WhatsApp for Windows. It might be an .EXE

Re: Home/Business Users?

"Most home/business users are unfamiliar with the Windows API"

So let's offer our services to them and make a profit !!!

"If only there was some sort of no-execute setting"

You can create a driver yourself hooking CreateProcess() and OpenProcess()... And voilà, there is your anti-exec feature.

Be sure to create a whitelist to avoid too many popups.

Asian tech players react to US tariffs with delays, doubts, deal-making

Re: Qualcomm

"Presumably that’s the same Qualcomm who donated $1m to the Trump campaign?"

I am seeing those who donated millions, losing billions.

"To be an enemy of America can be dangerous, but to be a friend is fatal"

- Henry Kissinger

Wikipedia's overlords bemoan AI bot bandwidth burden

Blocking / Rate limit

I would start rate limiting public cloud IP space. Then expanding - not an easy job, but not impossible if you have some firewall skills.

Google makes end-to-end encrypted Gmail easy for all – even Outlook users

Encryption

The only good encryption is the one where YOU hold the keys. And storage is encrypted as well.

Malware in Lisp? Now you're just being cruel

Re: Whitespace interpreter

"Edit: And you can hide it inside Lorem Ipsum, or normal source code and so on."

Hex Workshop from bpsoft. The best hex I used.

Mobile ad world drama: AppLovin not lovin' short seller assault claiming fraud

Nefarious

"a few nefarious short-sellers"

Oh, and what is life if not to dance ?

Zorba, the greek

Now Windows Longhorn is long gone, witness reflects on Microsoft's OS belly-flop

Years of work

"It's never pleasant to consider throwing away years of work"

But sometimes, necessary.

VMware sues Siemens for allegedly using unlicensed software

Re: Its annoying

"I've always liked VMWare Workstation"

So do I. One of the best to debug stuff in Windows.

ReactOS emits release 0.4.15 – its first since 2021

"

The ARM port of ReactOS is taking a while, like the rest of it."

Well...

20 Aug 2019: Fixed some ARM compilation problems. [17][18]

26 Apr 2020: ReactOS Applications Manager was able to start on Windows 10 for ARM32. [19]

Piano, piano, si va lontano

AI agents swarm Microsoft Security Copilot

Your data into Microsoft's hands?

Who would be crazy enough to put their data into Microsoft's hands?

The post-quantum cryptography apocalypse will be televised in 10 years, says UK's NCSC

Re: Bollocks

"my preference is for either DoT or DoQ, just not DoH, please!)"

I didn't saw a mention to a PKI into RFC 9250 (QUIC). Did I miss something ?

Bollocks

"organizations have ten years to migrate to a safer future."

Likely who wrote this has stocks in post-quantum crypto companies. My RSA-4096 will still be safe.

And IA will never beat real human intelligence.