eyalm

5 ms·

1.
by eyalm 8y ago
Cloud native/kubernetes race is just exploding. RH strategy was mostly focused around OpenShift lately, which makes complete sense. Kubernetes is the next datacenter OS, just as ESX (and virtualization in general) was in the past 15 ye
2.
by eyalm 8y ago
The Nazis established a massive, systemic and vicious program for the complete annihilation of any "enemy" of the aryan race, and by "enemy" we are talking about innocent jews, Romani and many more (although, the comple
3.
by eyalm 8y ago
"Console hacking 2010"[0][1] - The story and history of the different hacks and security bypasses around the Sony PlayStation 3 gaming console. Absolutely brilliant. [0] https://events.ccc.de/congress/2010&#x2
4.
by eyalm 9y ago
The title here is misleading. The vulnerabilities were not actually publicly disclosed, the only thing that was disclosed publicly is the fact that the vulnerabilities exist. The actual details of the vulnerabilities were disclosed privatel
5.
by eyalm 9y ago
> These are people that regularly write good quality code themselves, but there is a high amount of distrust. Why doesn't a team of talented programmers trust each other? This has nothing to do with trust or any other personal matte
6.
by eyalm 9y ago
I'll add to that - It is still very easy to hijack SMB connections and use it steal the NTLM hash in almost any network with Windows machines (Managed with a DC or not). Just go ahead and try [1] (Disclaimer - running responder.py with
7.
by eyalm 9y ago
Not really. Requires to have the CAP_NET_RAW capability, which is pretty rare. (This capability allows you raw access to the network interface, which is usually only given to the root user)
8.
by eyalm 9y ago
Bottom line - locally exploitable vulnerability in the linux kernel, in case you have the CAP_NET_RAW capability which never really happens. Not a real security threat for your standard linux distro. On the other hand, this is a great techn