kafrofrite

13 ms·

1.
by kafrofrite 3mo ago
IIRC, around 2016 or so, Slack invited us in their office to pitch us the enterprise version and ask whether we would be interested in becoming one of their first enterprise customers. Among other requests, one colleague asked me to ask the
2.
by kafrofrite 4mo ago
I guess there's merit for that, especially if you are in a cloud environment. In a previous company, I decided to set up dnf/kpatch for VMs that we considered critical. At the time I had a healthy disregard for reliability, mostly
3.
by kafrofrite 5mo ago
Please do share
4.
by kafrofrite 1y ago
It's probably not trivial to implement and there's already a bunch of problems that need solving (e.g., trusting keys etc.) but... I think that if we had some sort of lightweight code provenance (on top of my head commits are sign
5.
by kafrofrite 1y ago
The answer to your question is WebKit (because iOS), kernels (XNU, Linux, Windows) etc. In case you are not familiar with the domain I'd start with user-space exploitation and relevant write ups to get my feet wet. You'll find ple
6.
by kafrofrite 2y ago
Most probably what Apple means is that since their codebase is shared, the vulnerability exists across devices. This does not mean that the vulnerability is actively exploited in iOS nor that it will not be actively exploited as part of som
7.
by kafrofrite 2y ago
> Has this happened before? That iPhones had a security hole that could be exploited over the web? Yes, there were exploits in the past that could be exploited remotely, including some that were used for jailbreaking.
8.
by kafrofrite 3y ago
I work as a security engineer and, yes, the CT logs are extremely useful not only for identifying new targets the moment you get a certificate but also for identifying patterns in naming your infra (e.g., dev-* etc.). A good starting point
9.
by kafrofrite 3y ago
IIRC, in [1] it mentioned a few examples of AI that exhibited the same bias that is currently present in the judicial system, banks etc. [1] https://en.wikipedia.org/wiki/Weapons_of_Math_Destruction
10.
by kafrofrite 3y ago
I'm not a fan of Windows but Stuxnet didn't happen because of Windows. Iran decided to spin up a nuclear program and Israel and the US had concerns and wanted to stop it. They had the resources to develop something tailored for th
11.
by kafrofrite 3y ago
I'll try my best to explain everything (trying to avoid too much security lingo, hopefully). A password manager is a big database of passwords. There is a master password that decrypts the database and from there you can use your passw
12.
by kafrofrite 3y ago
Most providers had a semi-automated process that granted you permission to conduct your pentest (assuming you'd share any findings reg. their infra with them). In reality though, most of the findings didn't come from poking around
13.
by kafrofrite 3y ago
Reminded me of a funny story. Maybe a decade ago, when moving to the cloud was all the rage, my then employer decided to check whether the cloud was any good. Long story short, he asked me to conduct penetration tests against the major prov
14.
by kafrofrite 3y ago
IIRC, Intel announced about a year later plans to develop something similar. That being said, at the time they didn't have a specific timeline.
15.
by kafrofrite 3y ago
> I don't think OS becomes any less vulnerable than usual Linux/Windows installation. is not a good enough argument. For the story, SIP is Apple's "rootless". Effectively the OS runs with less privileges than ro
16.
by kafrofrite 3y ago
DEP is a Windows implementation of a non-executable stack, i.e., memory permissions that do not allow execution on specific pages. Depending on the situation, an attacker can e.g., mmap() a new page with the execute permission set, write hi
17.
by kafrofrite 3y ago
My two cents reg. this. Creating backdoors that allow encryption schemes to be subverted is _fundamentally_ going to cause harm on the internet, and eventually fail the weakest users/those that need privacy/security the most. A me
18.
by kafrofrite 3y ago
In the above he's mentioning that Privacy features like user-agent reduction, IP reduction, preventing cross- site storage, and fingerprint randomization make it more difficult to distinguish or reidentify individual clients, which is
19.
by kafrofrite 3y ago
Uh the joys of PHP's type juggling. Fairly sure this bug is still present in many systems.
20.
by kafrofrite 3y ago
You can target co-processors in general, e.g., here [1], thus I assume people do hack GPUs. Generally, the better we become in introducing mitigations, the more expensive attacks become and attackers have bosses, budgets and deadlines. They
21.
by kafrofrite 4y ago
We actually have two libraries in the office :) The first library has, for the biggest part, engineering books. Everyone can order books and everyone can borrow them. Most modern books also exist internally as e-books so the physical librar
22.
by kafrofrite 4y ago
> I like that they suggest better solutions I didn't think of. Although I don't write code full-time, when I do this is the part I enjoy more. People reviewing my code and coming up with better solutions on that same problem a
23.
by kafrofrite 4y ago
For what it's worth, Meta offered me slightly after the hiring freeze was announced for a security engineer position (L4 IIRC). I'm interviewing with Google for Security Engineering as well and still they haven't told me anyt
24.
by kafrofrite 4y ago
Just adding to your comment, there is some VX activity here https://www.vx-underground.org/ . Some fun stuff still takes place in game hacking and jailbreaking (whether iOS devices or consoles).
25.
by kafrofrite 4y ago
There's some theoretical background on how collision functions work. Generally, the assumption is that the hashing functions in cryptography meet the following: - Each input can be quickly converted to a digest (hash). - Getting from a
26.
by kafrofrite 4y ago
I wouldn't be surprised. I've seen colleagues reference April's Fools RFCs, and the reference wasn't meant to be taken as a joke.
27.
by kafrofrite 4y ago
or they could maybe use a specific OS as their golden image, use ansible or chef or puppet or any of the hundreds of tools that config machines and keep their staging and prod in sync. Bonus points for introducing a service that produces mo
28.
by kafrofrite 4y ago
- I don't always test my code but when I do, it's in production. - Everyone has a testing environment. Some people are lucky enough that they have a separate one for running production [INSERT ADDITIONAL JOKES HERE]
29.
by kafrofrite 5y ago
I use both, almost daily (paid versions) since ~2015ish. IMHO, 1password is way better than lastpass. That being said, lately 1password has shifted some of their focus towards more enterprise features (secrets etc.) so I don't know for
30.
by kafrofrite 5y ago
Any reasonably complex piece of software will have vulnerabilities. In other words, vulnerabilities are not a variable for the security equation, they are a constant. When designing something, vulnerabilities will exist. Generally, vulnerab

More ›