Scott Miller

77 Followers
65 Following
599 Posts
www.millergeek.xyz

Everyone go subscribe to Wired! They're giving away free YubiKeys! https://subscribe.wired.com/subscribe/wired/

#yubike #2fa #mfa #security #infosec

WIRED Subscription

So, do the #meltdown and #spectre vulns create avenues for container or VM escape?

Thanks for the help everyone! Ultimately I'm pretty sure I'd need to use ARP poisoning, which is definitely out of scope as this isn't a sanctioned exercise. Alternately from an insider threat perspective I could capture traffic on the insecure servers, but I'm gonna call that out of scope for now as well.

Pleasantly surprised to find the problem isn't quite as bad as I expected, but still not great.

Hey guys, what tools would you recommend for capturing credentials sent over http on a local network? I need to make a point at work
The new Portal is a bridge-building puzzle game, and it looks AMAZING

The new Portal is a bridge-building puzzle game, and it looks AMAZING

Boing Boing
An "NSA backdoor" proposed TLS extension finally turns up inthe wild: in random Canon printers that fail to work with TLS 1.3...
https://blog.cryptographyengineering.com/2017/12/19/the-strange-story-of-extended-random/
As the blog post points out at length, gee this spy stuff can be super mundane.
The strange story of “Extended Random”

Yesterday, David Benjamin posted a pretty esoteric note on the IETF’s TLS mailing list. At a superficial level, the post describes some seizure-inducingly boring flaws in older Canon printers…

A Few Thoughts on Cryptographic Engineering
@Miller_Geek @icefox there's a huge environmental component imo - it's one of the reasons that I try to be more vocal about how sparse my knowledge is on some of the things I work on, to try and help destigmatize not knowing now kinda
Public records can be creepy. I found the home phone number for the guy that owns the LLC that pays the taxes on an abandoned property near me.

@Elizafox If we had a fairer justice system, where the death penalty was being applied to Hitler or Bin Laden or Mengele, sure. But our justice system sucks.

I buy that it's a waste of time to try to rehabilitate some people. But to me, the potential extra "justice" from death penalty rather than life in prison, even when warranted, is a lot less than the extra injustice from the death penalty being applied far too often.

So...I might be getting Gigabit internet. Any ideas for what to do with that much bandwidth?