Trump signs memo calling for cyber privateers to conduct cyberattacks abroad against criminal groups targeting Americans — but they have to escrow $1 million to join

Trump signs memo calling for cyber privateers to conduct cyberattacks abroad against criminal groups targeting Americans — but they have to escrow $1 million to join

Where are those Cyberpunk 2077 memes?😄

You got the creds to chime in, choom?

techradar.com
u/stupiddogmademelook — 8 days ago

Best Spotify playlist to mp3 converter

Is there a place to download a Spotify playlist? I do have the premium but just wanna make a quick copy on my disk in one sweep per say.. Just as a backup in case they happen to pull some songs.. Ideally something that wouldnt ask me to log in.

I had an app from github though seems like a recent update on my OS broke it down. Need alternatives

reddit.com
u/stupiddogmademelook — 11 days ago

What are some popular reality shows in Asia?

Looking for some eastern show recommendations.

I like it when the shows got high production value and how different the editing/vibes feel compared to Western reality TV. Whether speaking of mind games, dating/social experiments, or just wholesome slice-of-life unscripted stuff, what are the top-tier shows I should add to my watchlist?

Hidden gems from South Korea, Japan, China, or Thailand are all acceptable... Suggestions can be from any country though as long as its from the east.. Though I like Korean, and Japanese shows the most

A suggestion for the likeminded people - Viva La Romance. Theres an olympic athlete that got infamous for how he acted on the show. The drama was quite popular among the Chinese. Lots of videos highlighting the show online. If you dont have the energy to see the actual show, check out the video I linked in my post

youtube.com
u/stupiddogmademelook — 16 days ago

Brinks Home Discloses Data Breach as Hackers Leak Files

Seemed a worthy article to share.. I used to have sensors from these guys. Now my alarm is a DIY sensor and chip combo linked with my wifi

Quite ironic that a security firm ends up in such a boat but thats moden cyber-security for ya.. Doesnt look like theyll do anything about the user data they had lost. Wonder if they had mine in the breach lol

securityweek.com
u/stupiddogmademelook — 17 days ago

Vulnerability management and other ME risks

How does one defend against Ring-3 level of risks? I recently found old articles about how the Intel x86 has a serious risk over the ME(management engine). Basically, only Intel has the keys to the Krabby Patty recipe that is their exclusive system, and I havent heard of any security researcher, or even malicious hackers finding exploits in these. I fear the prior, since this stuff could mean that there is no tangible method to investigate the potential security caps.

Is there any other processor I could go for that would give me full reign? Or is there some sort of tool that would be the next best thing to perform a deeper inspection?

The articles I read are almost a decade old but I find very little info on such risks online apart from niche reports

P.S. Ring-3 I mentioned generally refers to the user mode of the CPU protection ring. Basically the lowest CPU priveledges in your computer where apps such as the browsers and simple games operate, so I feel that I am not overthinking the risks here

reddit.com
u/stupiddogmademelook — 2 months ago

New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing

Some people making jokes online that this all sounds like we'll have to settle to disabling javascript in full for our browsers

Honestly very niche to be a risk for an average computer user, though figured this is a worthy news bit to share

thehackernews.com
u/stupiddogmademelook — 2 months ago

GrapheneOS is taking a stand against digital age verification laws - but how long can its defiance last?

I wanted to get the phone for a while now but now I wonder if Ill be able to keep using longerm with all the pressure Graphene is getting

Do you think the government would restrict any privacy-focused phones from functioning on mainstream apps, and sites?

techradar.com
u/stupiddogmademelook — 2 months ago

How a Canadian Company's Encrypted Phones Ended Up in the Hands of Criminals Worldwide

What do you guys think of such occurence? The more I hear of similar headlines, the more I feel like the governments will want to totally clamp down on privacy-focused technology

Nothing seems to come to mind in terms of the white-collar crime scale Sky Global managed to reach back then

occrp.org
u/stupiddogmademelook — 3 months ago

Utility of hash functions and what are they used for

Had a funny talk with a coworker, so I figured I might share some... A lot of people online(coworker included..) think cryptographic hash functions are pure math wizardry, but the concept is actually simple.

Think of a hash function like a digital blender. You throw anything into the pile. It can be a single password, a photo, or a video file, and you hit blend. The blender always spits out a fixed length string of random letters and numbers (aka the hash)

Here are the essential rules that make it work:
-You can blend it up, but you can't look reverse-engineer it back into the ingredients. This is why websites store the hash of your password, not the actual password. If hackers steal the data, they just get useless scrambled codes.

-Minor changes will break it. If someone changes a single comma in a file, the hash changes completely. This is how one could check if a file has been tampered with.

Basically, hashes are just unique digital fingerprints keeping the internet secure and since the hashes can persist, they can be re-used.

Does anyone know of any risks hash configurations have? Also, if someone has more to share about utility of using a hash configuration in programming workflows, id love to hear of it. Right now I'm working on a discussion page foundation where a user could register an account within an encrypted database and they should login using hashes. Struggling with some integrations, since the same account in the database needs to work for a browser game component on the site. Still not fully having a working prototype at this time due to some errors with my hash structures. Taking a breather and hoping someone might give me more ideas to work from in the meantime

reddit.com
u/stupiddogmademelook — 3 months ago

Zero-Day YellowKey Bypasses BitLocker on Windows 11

Many articles on the topic as is, though this guy's post on Linkedin was straight on the technical side without the article fluff which I feel is more important if you dabbled in BitLocker

Some guy out of spite for Microsoft released BitLocker vulnerabilities over the web, and on Github of all places(owned by Microsoft which is absurd). Normally, you would get paid for such a bug bounty, though I heard he had some sort of falling out with the arrangement, so he decided to go vengeance sicko mode instead. Funny how Microsoft essentially tried to shut down VeraCrypt only to get a bit of their own medicine. Irony. Gotta love seeing it

Worth to check your BitLocker setup if you have been using it as well as the hacker's Github since he did give nice details of what was at fault even with all the spite he held

From the guy's post I linked:
"What to action now:

  1. Enable BitLocker pre-boot PIN on laptop devices
  2. Set a BIOS password
  3. Disable USB boot
  4. Alert on unexpected WinRE entry events in Intune or your SIEM."
linkedin.com
u/stupiddogmademelook — 3 months ago

How VoidStealer bypasses Chrome’s protections to hijack sessions and steal data

Been reading into session stealers and found an interesting article.

Key takeaways:

  1. don't store passwords on the browser, use a management tool;
  2. Update your OS(yes they used to make devices slow in the past, yet modern updates are essential for device security);
  3. Fake drivers and "cracked" game downloads online hide such malware, so make sure the sources for downloads are legit.
kaspersky.com
u/stupiddogmademelook — 3 months ago