| Homepage | https://jacobtorrey.com/ |
| Blog | http://blog.jacobtorrey.com/ |
🎉🎉🎉 Hotel and flights are covered!!! 🎉🎉🎉 - If you've got an idea for a talk, we'd love to see you at BlueHat!
Call for papers closes on December 8th: https://msrc-blog.microsoft.com/2022/10/13/bluehat-2023-call-for-papers-is-now-open/.
#TryHackMe is hosting an Advent of Cyber. Beginner friendly exercises AND prizes so anyone of any skill level can participate.
If coding is more your thing, @singe posted about #AdventOfCode which has small coding tasks each day
Hope to see a lot of progress from everyone. Maybe we can treat this like Wordle and share progress to keep everyone engaged?
Keynotes and briefings from BlackHat 2022 are now online (h/t @eng) https://www.youtube.com/user/BlackHatOfficialYT
Certificate authorities (CAs) are a critical backbone of internet security; when they are compromised, users lose the ability to securely connect to websites without fear of interception. Websites cannot insulate themselves against a fully-compromised CA, even if they normally use other CAs.
I wanted to add a rand() biased default value to a column in #MySQL. To support replication, that is not allowed, so you must use a trigger. You cannot use the trigger to update the inflight INSERTed rows unless you set the trigger to occur BEFORE insert:
Example:
DELIMITER $$
CREATE trigger set_rand BEFORE INSERT on `tbl` FOR EACH ROW
BEGIN
IF NEW.randcol IS NULL THEN set NEW.randcol = FLOOR(RAND()*999999999);
END IF;
END$$
DELIMTER ;
Hidden gem in the paper just shared by @vanhoefm https://dl.acm.org/doi/abs/10.1145/3495243.3560530
A single frame can wake up (from power saving) all devices on a network and get them to respond with their real, not randomized MAC address. A beacon management frame with the Traffic Indication Bitmap (TIM) set to FF for all devices.
Lee Holmes 
Taylor Parizo
Pwnallthethings
Bob McIntosh
Yixin Zou
HD Moore
Dominic White