Proposal: We pair up malware devs with devs of open source tools
That way we can get tools that run without 10 minutes of setup + troubleshooting, and the malware devs learn to write readable code
@sans_isc @malware_traffic I'm finding these write ups really fascinating. To protect internal users we can add ad-block to our managed browsers. But what about protecting our customers? What can we do, from a brand/company perspective, to protect against this?
If I'm AnyDesk/Teamviewer, I'd be pissed right now. Not only did Google allow them to divert customers away from the company, but it also allowed them to be infected with some malware impersonating our product
The only solution I can think of is we would have to rely on tooling by Google to alert/block display URLs from other AdSense accounts using our domains, but I'm unaware of any tooling that exists like that
As it stands, Google knows this is happening, and has chosen to allow it to continue
@alyssam_infosec @fuzztech You guessed it, they were Narco. Garmin just announced their 2023 pricing a couple weeks ago, and included a pretty big price hike
I went the GPS replacement route as well. $24,000 piece of fancy glass. Expensive, but worth it.. hopefully
@fuzztech @alyssam_infosec Photovoltaic sensors on my nav radios started going bad, it wasn't nearly $500 to fix... It was $24,000
Company that made them went out of business in the 90's. Ended up ripping out the whole panel and putting in new instrumentation
@davywtf @dave_cochran We shouldn't be using %s, %d, etc. for string interpolation. It's been deprecated for a decade now. f strings and str.format are much more powerful and easier to read/write
Also, I highly recommend spending a bit to read through the PEP8 style guide. It's good to learn standardized spacing and naming conventions early. Bad habits are tough to break (I learned the hard way)