Posts by sanmigueelbeer

Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC

Hey @Nightmare Eclipse,

Train your skills at Cisco products. I hear they are "more secure" nowadays. /s

Cisco thinks Mythos means instant death for unsupported networking kit

I am going to safely assume CSCwv93265 was because the newly released firmware was never vetted by Project Glasswing much alone tested them.

Cisco's open-weight bug busters take on Google and OpenAI

Re: Errmmm

Agree.

Eat your own dogfood, I say.

Telstra outage: Failed emergency services calls, train chaos, payment systems down

Many businesses (big or small) do not take NTP/SNTP (or keeping an accurate time) seriously.

I have no idea what the underlying reason the server lost time. I would've thought Telstra has a GPS-based NTP server.

And even if they did not (cost-cutting, maybe), for AU$200, I can get a GPS HAT and a Raspberry Pi 5.

Royal Navy chief backs drones, autonomous weapons in ‘Hybrid Navy’

A few decades ago, a senior UK public servant once asked a British General the question, "Why is a Main Battle Tank so expensive?"

To which the response was, "A fleet of Main Battle Tank is still cheaper than to go into battle."

Iran claims US used backdoors to knock out networking equipment during war

Re: @sanmigueelbeer - In case you don't remember

First off, Cisco et al cannot just sell kit to Iran directly. If I remembered correctly, almost all Cisco kit were delivered in a country that is not sanctioned and then sent on a truck to Iran for final delivery.

Same goes, I guess for Huawei kit. Deliver somewhere in HKG, for example, and then hop on a boat to final destination.

It can be done.

Secondly, this is not the first time Iran's Cisco kit got hacked.

https://www.theregister.com/2018/04/09/cisco_smart_install_clients_attack_vector/

https://thehackernews.com/2018/04/hacking-cisco-smart-install.html

If Iran and PRoC are very close, why is Iran still using Cisco, Mikrotik, etc. when Huawei is available?

Only Trump can decide when cyberwar turns into real war

Who's propaganda do you trust, POTUS or IRGC?

Yeah, it's that bad if no one can tell who is actually telling the truth.

Country that put backdoors into Cisco routers to spy on world bans foreign routers

I opened a Cisco box and included a small packet to contain some assembly kits like the rack-mounting kits.

In this bag is another bag which states "SCREW CHINA".

Re: MAGA Needs An Update.....

Make

American

Business

Greedy

Again

Comey even said dealing with Trump was like dealing with a mafia don

Except one of them is smarter and can run rings around the other.

I remembered seeing old c2600 with "Made in Mexico" stickers.

Sorry, Amazon, you couldn't pick a worse time to bring a phone to market: IDC analyst

It said that the phone ... would sync across other Alexa smart devices while also putting Amazon shopping at the center of the experience.

Nope, no chance of "backdoors" or privacy (or lack of) implications. Pretty safe, IMHO.

ChatGPT advised exec on how to fire Subnautica founders to avoid payout, court ruling says

Re: Chatbot responds to prompt

Much the same applies to an LLM giving legal advice.

TFTFY.

LLM giving "advice" -- What could possibly go wrong?

Legal advice is one thing but, please G*d forbid, someone believing in medical advice!

Anyone who believes in LLM giving "advice" (without checks or verification) deserves to get a call from MS's Indian call-center about his/her computer infected with a cold.

Jury out on whether Americans love or hate datacenters

in the majority of US states ... are losing money on the deals

Let us not lie to ourselves: Business are in it for the money.

Local states, however, are in it because of hookers-n-blows.

Pentagon AI chief praises Palantir tech for speeding battlefield strikes

It'll be such a shame if an Iranian Shahed, "launched somewhere from Iran", would crash into the building the FBI used to store all the Epstein evidence files (and burn everything down to dust).

Such a shame.

Ig Nobel Prize flees US for Switzerland after 35 years over safety concerns

Re: Zurich, Switzerland

Wanna take a wild guess why we got stuck with Trump in the first place?

Because Trump promised to make Iceland, UK, Greece, Malta, Cyprus, Wakanda the 51st state?

Iran-linked cyber crew says they hit US med-tech firm

"It wasn't us" is not going to work this time, gents

Good, this means that the Iranian government will no longer be able to deny who did it.

Lenovo, Nintendo sue US government seeking tariff refunds

They probably already have someone to blame for it.

Easy. Blame Biden.

West Midlands Police earn red card over Copilot's imaginary football match

Excel's lawyer, Word, has been issued a docket.

Pop music fans literally dying to stream hot new albums – in car crashes, that is

Re: Maybe the music

Or Mariah Carey's "All I Want for Christmas" for the nth f**king time in the last 60 minutes.

Ex-Amazon UK boss lined up to chair Britain's competition watchdog

This or Dido Harning.

Asking for a friend ...

Texas sues TP-Link over China links and security vulnerabilities

Ken Paxton is humping at the wrong tree.

Instead of suing TP-Link, Huawei, Hannibal Lecter, Xiaomi, Jack & Jill, Mork & Mindy, etc, it would be a lot wiser to mandate that all Texas household use modems from American companies like, for example, Cisco.

It is nothing but a win-win scenario:

1. He will be helping American companies make more money (and this news will reach the top), obviously.

2. When was the last time anyone has heard that American-made modems have backdoors or send back data to their mother ships innocuously?

/S

NASA points fingers at Boeing and chaotic culture for Starliner debacle

You be careful making accusations like that, Jared.

Especially against companies who's CEO frequent a golf club somewhere in Florida.

I'm just sayin' ...

You can jailbreak an F-35 just like an iPhone, says Dutch defense chief

Re: You'd like to think

Yes, I think it was FTDI.

And FTDI was not the only one. There are several very well-known companies in the world who quietly practice this.

I know of a multi-billion dollar company who used to ship their equipment with >90 year certificates. One day, they announced a patch to fix a security vulnerability to one of their gadgets. What they did not want to tell anyone was that in that security patch was a 10 year certificate which, conveniently, over-wrote the previous certificate.

Two months after the end-of-life date kicked in, the devices suddenly stopped working. And because the HTTPS access also uses the same certificate (HTTP and telnet are disabled in the software and SSH is not working in known port), no one can actually "see" what is going on nor can someone downgrade the software. Once you've uploaded the security patch, the device stops working. The manufacturer then fell back to the age old argument that since the devices are already past their end-of-life, the manufacturer is not obligated to release a fix.

So a software "kill-switch" is not really difficult to implement.

Re: You'd like to think

Microsoft has the ability to push out Windows Updates to every Windows PC. An update could (deliberately or accidentally) brick a PC.

I remembered this happened several years ago (Windows 10). A company manufactured this piece of PC card for a specific application/control (I do not remember what it was) and this card got "copied" by a company in China.

So the company submitted a driver update to MS which caused a vital chip in the counterfeit cards to fail/stop working.

Cisco set to release home-brew hypervisor as a VMware alternative

stable, easy-to-manage

"stable" and "easy-to-manage" is not a quality Cisco is known for. Try "unstable" and "convoluted".

Customers are leaving VM because the cost of doing business with VM is getting expensive and unaffordable.

Is Cisco's solution an "affordable" option to VM? Wait `til it is time to renew Smart License!

Cisco hikes prices to cover memory cost rises, says you don’t much care

Customers get it

I have no idea who Chuck spoke to but customers will not "get it" if customers find out e-Licenses are in the list of SKUs included in the price increase.

CFO Mark Patterson said buyers haven’t changed plans due to memory price impacts.

Of course not. Not if buyers were told, well in advance, when the next price rise is happening. We were only made aware two weeks ago by a peer who passed this info.

Pakistan to test students for real-world skills before they graduate from IT degrees

Re: Interesting approach

It’s called peer review.

Just to clarify, do you mean " 'peer' (wink, wink, wink) review" or just plain "peer review".

Maybe CISA should take its own advice about insider threats hmmm?

Do what we say (not do what we do).

Amen

Finnish cops grill crew of ship suspected of undersea cable sabotage

Re: Given that it is a cargo vessel

They were caught with their pants anchors down.

Hegseth needs to go to secure messaging school, report says

but he's not the only one using insecure messaging, and everyone needs better training.

I totally agree.

Everybody in DoD needs to be trained on how to (im)properly use insecure messaging and social media account to discuss/disclose sensitive materials.

Oh, wait ...

Networking startup Meter takes a page from the Steve Jobs playbook

stood on stage effusing about Meter Switches

Made by EnGenius Technologies.

Pentagon and soldiers let too many secrets slip on social networks, watchdog says

War Thunder, when?

Chamber of Commerce sues over Trump's $100K H-1B paywall

Wrong! TAC will go after anyone*, even the dead, who do not kowtow before him.

TACO is going to make a mob debt collector look juvenile!

Make American Business Great Greedy Again, baby!

Noted Exception: TACO will never go after Putin.

US PC shipments hit the buffers as Trump’s tariffs take their toll

Re: Funny, I was reading

King MA(B)GA (Make American Business Great Greedy Again) and his loyal subjects cannot take a joke.

US gov shutdown leaves IT projects hanging, security defenders a skeleton crew

Re: Another step towards chaos

Trump is dragging the US down the drain.

That's a lie and you know it! Donald is not "dragging the US down the drain".

He is, as a matter of fact, pushing the US down the drain while he hovers above in his brand spanking new Qatari Air Force One, paid for by hardworking low- to medium income Americans while he guzzles his Diet Coke, bites into his freshly prepared hamburger fit for a king on his way to play a round of golf in Scotland Greenland Iceland, America's 52nd state (after Canada, of course!).

Taiwan gets chippy about US request it shifts manufacturing

Re: Please shut down your companies

Let's face it. Trumps promises aren't worth the social media paper they're not printed on.

Three more years.

Let us all hope and pray the Americans will have the intelligence (and "experience gained") to choose their next leader.

I pray and hope the light-at-the-end-of-the-tunnel is not from an incoming train.

FAA decides it trusts Boeing enough to certify the safety of its own planes again

That is one last hurdle for DOGE to shut down FAA.

The money save for not upgrading the outdated flight control systems could go and complete the fence.

What could possibly go wrong?

Make American (Business) Great Again!

Zero-day deja vu as another Cisco IOS bug comes under attack

Re: Zero‑day vulnerability in the Cisco IOS

the quality control test

BWAHAHAHAHAHAHAsnortHAHAHAHAHAHAHAHAHAwheezeHAHAHAHAHAHAHAHAHAchoke

Huawei used its own silicon to re-educate DeepSeek so its output won’t bother Beijing

Having a fiber optic network is bad but a mobile- or smartphone is fine? Gotcha.

Pull the other leg son. It's got bells.

Firewall upgrade linked to three deaths after Australian telco cut off emergency calls

when a firewall upgrade

"a" firewall. Singular, i. e. No redundancy.

The things companies have to resort just to earn a (in)decent buck.

Trump admin says tech companies are abusing H-1B visas, slaps $100k a year to allow entry

unless employers make a $100,000 payment bribe with the petition

TFTFY & TYVM

Alleged Scattered Spider teen cuffed after extortion Bitcoin used to buy games, meals

He should've spent his money wisely.

Instead, he's going to participate in a VR game called "Grand Theft Auto: Welcome to Sing Sing".

Trump backpedals as Hyundai factory ICE raid enrages South Korea

Re: Trump backpedals...

TACO in action

Four more execs man the decks at leaky sales vessel Atos

leading provider of AI-powered digital transformation

No, ATOS is not.

If AI was indeed working correctly in ATOS, the AI would've already GTFO & resigned (or jumped out the window).