elnerd

11 ms·

1.
by elnerd 2mo ago
I once got a wildly inaccurate billing estimate shortly after I created my AWS account. I could not find a out which resources that would cost me so dearly, and saw no other option to delete the entire account. A few hours later, I got a ma
2.
by elnerd 3mo ago
I’m using Postgres for my DNS log service. I only store data for 90 days. To delete data, my strategy is to use partitions based on month. At the start of every month, I drop one partition. I am not sure of this is the best way to do this,
3.
by elnerd 4mo ago
I changed from Gmail to proton many years ago. The only pain point I have is the search. Understandable, the emails are encrypted and search has to be done on the client. That works when using the web hi as you have the option to index all
4.
by elnerd 4mo ago
Same goes for logistics, which is an extension to your point: https://walton.uark.edu/clc/posts/when-supply-chain-is-the-b...
5.
Microsoft Edge loads all your saved passwords into memory in cleartext(github.com)
3 points by elnerd 4mo ago|2 comments
6.
by elnerd 5mo ago
Yesterday, I took a web application, downloaded the trial and asked AI to be a security researcher and find me high and critical severity bugs. Even vanilla models spew out POC for three RCE’s in less than an hour
7.
by elnerd 6mo ago
I have a fully populated server with 2x7K62 and 16x64GB (3200 mhz) for my home lab. Do you know how to check if I am affected by this?
8.
by elnerd 7mo ago
«Document future incidents to build a case for AI contributor rights» Is it too late to pull the plug on this menace?
9.
by elnerd 8mo ago
I just read gnutella page on Wikipedia, no mention of bad actors
10.
by elnerd 8mo ago
I have the impression this is not the same. In the linked video, they talked about unauthenticated functions in BLE if I recall correctly…
11.
by elnerd 8mo ago
In related news, 10% of Meta ads are malicious, and they have Meta seems to have little incentive to stop it. https://www.reuters.com/investigations/meta-is-earning-fortu...
12.
by elnerd 9mo ago
Would it be be trivial to have a init container to do CA injection? Maybe though mutating admission controller? Then some CNI magic to redirect outbound traffic to do transparent proxying?
13.
by elnerd 9mo ago
One domain parking actor is responsible for nearly 10% of all issued ssl certificates. 185.53.178.99. This is just one of many bad actors.
14.
by elnerd 10mo ago
We soon will have to implement paradoxes in our infrastructure.
15.
by elnerd 11mo ago
I unsubscribed from Spotify for this very reason.
16.
by elnerd 11mo ago
Just because you cannot see how a vulnerability can be exploited does not mean that others can. As you describe, people seem to assume that the only way the config file ends up on the server is «physically» editing it. An anecdote: I have b
17.
by elnerd 11mo ago
What’s the emulator he used when designing the firmware?
18.
by elnerd 11mo ago
It is strange how EVs are measured by how far they can go full charge when this is a metric I never have seen for fossile cars. It tells a story how inconvenient EVs or the charging network really is
19.
by elnerd 1y ago
You are actually more likely to buy a car just after you have bought a car than the 10 years you did not need to buy a car. Maybe not cars, but I’ve heard this argument for kitchen appliances. If you for some reason return the item you just
20.
by elnerd 1y ago
Getting the rug pulled under you does not qualify as an experience you need. It happens, but should not be in the curriculum for kids. I am sure that being forced to spend time on this steals time from more interesting projects.
21.
by elnerd 1y ago
After thinking of it for a while, I do not think it is such a big issue. The threat actor was probably an adversary to existing huntress customers and the EDR probably reacted to his tooling and mistakes. When doing red team engagements, we
22.
by elnerd 1y ago
Unrelated story; how politician gave us a look into their financial adventures. I am curious where the red line is. Any criminal activity or just behavior that the analysts find interesting?
23.
Darcula and the Magic Cat: How Osint Unmasked a Phishing Tycoon(osint.industries)
2 points by elnerd 1y ago|0 comments