sprkyco

7 ms·

1.
2018 DBIR Report – Daniel Miessler(danielmiessler.com)
1 points by sprkyco 8y ago|0 comments
2.
All these vulnerabilities, rarely matter(blog.jeremiahgrossman.com)
1 points by sprkyco 8y ago|0 comments
3.
by sprkyco 8y ago
I work for: https://www.signalsciences.com/ and our tool is specifically designed for use cases like this. Let me know if you would like more info cody-at-signalsciences-dot-com
4.
by sprkyco 9y ago
http://moose-team.github.io/friends/
5.
by sprkyco 9y ago
Someone replied to our internal outage notification and replied to everyone@ with a gif. The chaos has begun.
6.
by sprkyco 9y ago
https://cyber.wtf/2017/07/28/negative-result-reading-kernel-... Failed attempt in July which is being attributed as earliest work via https://twitter.com/lavados/status/9487007832598
7.
Signal Sciences – Account Take Over Report(info.signalsciences.com)
1 points by sprkyco 9y ago|0 comments
8.
by sprkyco 9y ago
Common practice, but still illegal. Recommend watching https://en.wikipedia.org/wiki/The_Internet%27s_Own_Boy if you haven't. Similar use case here.
9.
Anyone's Uber password change 30+ days after account deletion?(imgur.com)
1 points by sprkyco 10y ago|0 comments
10.
How I hijacked top celebrities tweets including Katy Perry, Shakira…(medium.com)
1 points by sprkyco 10y ago|0 comments
11.
by sprkyco 10y ago
For anyone that thinks that programming bootcamps are still worth considering. Why not try a free one: https://www.freecodecamp.com/ Really great student curated content!
12.
IoTSeeker – Similar to Mirai, but HTTP/HTTPS(github.com)
3 points by sprkyco 10y ago|0 comments
13.
by sprkyco 10y ago
New TOS prompted a deletion of my account: https://twitter.com/sprkyco/status/770242306678988800
14.
by sprkyco 10y ago
Typically physical control is deemed as the game ender. If this is proven to be OS executable it will be a major issue. Many of the Adobe, IE, and other high volume exploit vendors codebase zero-day root exploits would allow one to not only
15.
by sprkyco 10y ago
https://zedshaw.com/2016/06/10/riot-games-is-violating-calif...
16.
by sprkyco 11y ago
Or... one could actually read the response article: "This bug has been fixed, the affected keys have been rotated, and we have no evidence that Wes or anybody else accessed any user data. "
17.
by sprkyco 11y ago
Really mining is seen as this hardcore active lifestyle when in reality it is rather sedentary. Typically there are jobs for jr. level positions which are very physically demanding. Afer about 2 years experience most people get "promot
18.
by sprkyco 11y ago
Absolutely anecdotal. This article nor myself never stated that "the entire out-of-work blue collar worker population" can or even would want to make the jump. Many of these blue collar workers can move into other industries it ju
19.
by sprkyco 11y ago
After eight years in mining I made the jump to coding. However, my coding quickly changed to infosec. So definitely miners can make this jump. This is highly biased, but I would say that many blue collar workers bring a very different work
20.
by sprkyco 11y ago
Can you cite "all Android devices affected"? Cannot find this particular quote in this or any other article. Also what bug report? I found this article and other articles cited, but no bug report from Google or the researcher as o
21.
by sprkyco 11y ago
What is the logic to responding to security disclosures like this? In the reddit world this is called shit posting. Security bug A affects product B (or c-f) someone always responds at least I use g or h on z! Thus, I am immune from this pa
22.
ES6 based XSS in EZDATA search(respectxss.blogspot.com)
1 points by sprkyco 11y ago|0 comments
23.
by sprkyco 11y ago
Can you suggest a better term that would enable a speaker to convey a generally identifiable demographic?
24.
by sprkyco 11y ago
One thing I really liked about the write-up is the thoroughness that everything was explained. Nothing was assumed. The author explains what burp is why it was used. Broke down the basics in a high level and the touched on the simple things
25.
A vulnerability in WebLogic, WebSphere, JBoss, Jenkins, OpenNMS and others(foxglovesecurity.com)
125 points by sprkyco 11y ago|24 comments
26.
by sprkyco 11y ago
Most likely due to the fact that a publishing company was utilizing this "hack".
27.
Biometrics-Piloted Drone-(gofundme)(gofundme.com)
1 points by sprkyco 11y ago|0 comments
28.
by sprkyco 11y ago
This seems like trolling, but this line of thought seems very extreme. Not sure where the perceived obsession comes from. People communicate in different ways and assuming that there should be a single refined dump of information is not tak
29.
by sprkyco 11y ago
Would agree with above, but given the evidence of chauvinism in the workplace I would say regardless of the facts this will be seen as sexism. Personally, I think it would be cool to have either a male or a female that was genuinely interes
30.
by sprkyco 11y ago
Out of curiosity what would be a better theme to follow that is "hacker-y" if 1337speak is not currently trendy. It is something that is deeply ingrained in the culture and was never really a trend to infosec people. It's fun

More ›