Slashdot Mirror


User: Redmancometh

Redmancometh's activity in the archive.

Stories
0
Comments
745
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 745

  1. Re: I Process Retail Returns Daily on Finnish IT Retailer Reveals Most Returned Products · · Score: 1

    Bought 320gb of patriot ram for work recently..80 sticks, none bad. Maybe they checked them since bulk..but they have good heat spreaders too. Great ram for a similar price

  2. Re: The usual suspects on Finnish IT Retailer Reveals Most Returned Products · · Score: 1

    Dont buy wireless audio stuff or you'll be sad. My PX22s could be sturdier...but performance wise they are awesome

  3. Re: Extension cable Return - did not reach my toil on Finnish IT Retailer Reveals Most Returned Products · · Score: 1

    At my old retail job A/A extenders usually got returned because they thought it was a regular usb cable

  4. Re: No Surprise on Finnish IT Retailer Reveals Most Returned Products · · Score: 1

    Kids arent so big on perspective

  5. Re: Random .PNG file? on DecryptorMax/CryptInfinite Ransomware Decrypted, No Need To Pay Ransom (softpedia.com) · · Score: 1

    The key has to be derived out.

  6. So all you NASCAR fans coming out of the wood work (and racing fans in general) I have a questions. Are there any motor racing events without restrictions to (at least) the engines?

    As a huge nerd...I'd love to see a motor sport that is more about the ability to manufacture some crazy ass vehicle than how good the driver is.

  7. No, just no. on AMD Sued Over Allegedly Misleading Bulldozer Core Count · · Score: 1

    Eight instruction can, in fact, be executed simultaneously. Run a parallel CompletableFuture task or something, and this becomes extremely obvious. Each parallel "run" use a ClassTransformer to see the ASM instructions being run with a locking (NOT a re-entrant lock) counter, and a \n every 8 locks/unlocks.

    You will see 8 ASM instructions at a time.

    That being said...physically they aren't cores, and shouldn't be referred to as such. They should have referred to them with their own term "module." If they didn't...they should be sued.

  8. Re: What's The Vector, Victor? on Ransomware Found Targeting Linux Servers, MySQL, Git, Other Development Files (drweb.com) · · Score: 1

    Javascript doesn't attack a browser in the classical sense. The way you cause damage with JS is poisoning the browser's cache. So you add something sketchy to the cached version of a given webpage.

    The classical route of this attack is a proxy that injects code to cache sketchy objects on top of the cache of any page visited. The cache expiration is set to something ridiculously high, so it's not removed without clearing the cache.

    So for example injecting an ad that wasn't there before into youtube, slashdot, etc. Every time the user loads the page they load your ad, and get you an impression.

    So yes this is strictly limited to browsers, and even within the browser is quite limited.

    I asked if you meant Java, because there have been attacks in Java that can escape the browser sandbox and modify system files. Potentially java could be used to infect a server via a means besides a browser.

    Flash is not on servers, no one checks email on servers, and no one views word/excel documents on a server. Word/excel files may be "viewed" on a server, but that would be for processing. In which case they would be accessed using something like the mono interop API (C#) or Apache tika/POI. So embedded bytecode wouldn't be executed.

    I suppose these things could happen on a windows servers, but if you're admin is browsing and checking his email on a server...ffs

  9. All of those services you configure, run as root, then they are running as services. Its not like you start sshd or cron up everyday. Hell, starting things up often is cron's purpose.

    Also ping can be replaced with a script...tcp doesnt need root.

  10. Re: What's The Vector, Victor? on Ransomware Found Targeting Linux Servers, MySQL, Git, Other Development Files (drweb.com) · · Score: 1

    None of these are things you can even do on a nix server. Also...js? You mean java?
    Cache poisoning itself doesnt infect you.

  11. Re: Offer paid support? on Corporations and OSS Do Not Mix (coglib.com) · · Score: 1

    I can make bugs that a team wouldnt catch from looking at code alone...c++ templating is incredibly powerful

  12. Re: Socalim is organized psychopathy on DHS Detains Mayor of Stockton, CA, Forces Him To Hand Over His Passwords · · Score: 1

    "overpaid" exec here...chief information officer. If I got to work 60 hours it would be a blessing. Most executives work literally twice the hours, and cause 10x more to happen per given hour than any employee there. Then we go home and file dailies/weeklies and get 4hrs of sleep.

    Outside of leviathan-esque companies this is mostly true

  13. Re:Microsoft Windows strikes again :) on Hacker Group That Hit Twitter, Facebook, Apple and Microsoft Intensifies Attacks · · Score: 1

    This is a lot more of an important question ask than you think. A friend of mine runs a DDoS protection service, and they recently got hit by a 60 gigabit attack (Syn-flood, unamplified obviously) that was from a botnet of surveillance cameras. Shit be whack yo.

  14. Re: Relation to CryptoWall virus? on Emergency Adobe Flash Patch Fixes Zero-Day Under Attack · · Score: 1

    Are you insane? From a business standpoint they don't give a shit about your privacy. If anything it should have already been blocked.

  15. Re: Turdis on Microscopic Underwater Sonic Screwdriver Successfully Tested · · Score: 0

    Second

  16. Re:Get over it on No Justice For Victims of Identity Theft · · Score: 0

    As an ISS professional I'm looking forward to the advent of chip-and-pin in the US. All the extra mandatory PCI-compliance auditing, and pen-testing contracts are going to be great.

    I'm so excited for all the data breaches after attackers are able to leverage the card as a means to compromise the point of service.

    Also the nostalgia of seeing all these super-micro pieces of malware combined with "interesting" hardware hacks is probably going to make me tear up a little bit.

  17. Re:Boo Hoo on No Justice For Victims of Identity Theft · · Score: 1

    I think of it more as "death by a few billion cuts" followed by the government using a phoenix down on them.

  18. Re:The other way round on Keurig Stock Drops, Says It Was Wrong About DRM Coffee Pods · · Score: 1

    This is actually one of the best posts I've ever read on slashdot. Well done sir.

  19. Re: wha? on Top Cyber Attack Vectors For Critical SAP Systems · · Score: 1

    Odd, all of the PRs for my software are functionality patches...as are my changes. Almost as if it's not an issue of "haters gonna hate," and that 40 vulnerabilities in that period of time is insanely unacceptable.

    Then again it's corporate IT, and a ridiculous amount of that "community" are still running highly vulnerable IIS servers, so par for the course I suppose.

  20. Re:Seriously...? on James Comey: the Man Who Wants To Outlaw Encryption · · Score: -1

    Ask hackers and other cybersecurity experts, and they'll tell you that the entire idea of a âoebackdoorâ is a bureaucratic fantasy with little basis in technical reality.

    The entire idea of a "backdoor" is fantasy? What the actual fuck are you smoking man.

      So...what do you call a command interpreter listening on the port of an unsuspecting user's machine exactly?

    How about a modification of hosted files to allow an attacker to bypass authentication on a page in some highly unlikely/impossible set of conditions he/she can emulate?

  21. Whoops this was me.

  22. Re:A sane supreme court decision? on Supreme Court Rules Extending Traffic Stop For Dog Sniff Unconstitutional · · Score: 1

    I don't post much anymore, so I don't have mod points, or I'd give them to you.

  23. Re:So what? on Using Adderall In the Office To Get Ahead · · Score: 1

    Hahahahhahaha, I'm going to go out on a limb and say you don't work in IT cdwi?

  24. Sarcasm was super effective

  25. Re: Female chess players on Chess Grandmaster Used iPhone To Cheat During Tournament · · Score: 1

    Obvious troll is obvious...I hope.