steffanA

7 ms·

1.
by steffanA 1y ago
Same campaign
2.
by steffanA 2y ago
The autorun.inf would be in the flash drive, not the executable they uploaded to Any.Run. Were any pics of the flash drive contents shared?
3.
by steffanA 2y ago
Nothing sophisticated about this attack.
4.
by steffanA 2y ago
The people who DDoSed Internet Archive never claimed to be behind the breach. That was some media companies who misreported this. The breach happened over a week before the DDoS attack, according to Troy Hunt. Stop looking for conspiracy th
5.
by steffanA 2y ago
Article says API token was stolen in original breach.
6.
by steffanA 2y ago
This is bad enough. This alone is a privacy bug/data leak. Theoretically, someone could scrape the pages and compile a list of exposed email addresses.
7.
by steffanA 2y ago
There is a strange dynamic between the threat actors who conduct these breaches and researchers. When not used for extortion and for "status" in the hacking community, they share them with researchers (commonly HIBP) to warn peopl
8.
by steffanA 2y ago
More details here about the data breach. Stolen database contains 31 million records. https://www.bleepingcomputer.com/news/security/internet-arch...
9.
by steffanA 2y ago
It's doubtful to me that this is due to malware. Many malware hijack search settings. However, very few hijack default browsers themselves these days. In the past (10 years ago) it was much more common. Furthermore, I don't know o
10.
by steffanA 2y ago
Including Firefox who previously bypassed it: https://www.theverge.com/2021/9/13/22671182/mozilla-default-...
11.
by steffanA 3y ago
So you bought and fed 14,500 books into the AI to make these summaries?
12.
by steffanA 3y ago
Title is clickbait. I am sure the content of the article clears it up, but the title implies Microsoft is forcing all users to pay for normal security updates. In reality, it's your choice to stay on an end-of-support OS and purchase u
13.
by steffanA 3y ago
Because the title makes it sounds like Microsoft will charge for any security update in the future. These are for end of life products and it is very common for companies to require additional support contracts to keep supporting them. You
14.
by steffanA 3y ago
Such BS clickbait. This article should be removed from Ycomb. Microsoft is not charging anyone for security updates unless you wish to use the operating system after end of life.
15.
by steffanA 3y ago
There is absolutely nothing wrong with trying different titles on a story.
16.
by steffanA 3y ago
Very common to get access to the Azure/Local AD in ransomware attacks. That Bing CMS bug was only exploited by the researchers who disclosed it to MS.
17.
by steffanA 4y ago
It is privilege escalation. Used in NTLM relay attacks.
18.
by steffanA 4y ago
I have NordVPN on one device. Nothing in their license agreement and no settings for this at all. Doesn't appear they are recruiting devices into this residential proxy service.
19.
by steffanA 4y ago
Actually, looks like they understand how the leaks occurred. Just not that AWS automatically decrypts the files, making it unable to protect against those types of breaches.
20.
by steffanA 4y ago
Looks like this change is more to protect against Insider threats, ie Amazon employees or their infrastructure is compromised, and to make it easier to comply with some security policies that require EAR.
21.
by steffanA 4y ago
Debunked over and over. This is just more clickbait.
22.
by steffanA 4y ago
Sorry, but this is a joke of a response. When they started sending out password reset emails, they should have explained why. Not only when people started complaining, and the media picked up on the lack of transparency.
23.
by steffanA 4y ago
If you login with a different profile, is the GoGuardian software still running? Or is it only running on the managed school account?
24.
by steffanA 4y ago
Factory reset and not logging into the account again, should fix the issue.
25.
by steffanA 4y ago
Prosecute for what, though? It's very common for school accounts to take over a chromebook until you remove their profile/perform factory reset. This sounds more like a Google issue for allowing this behavior in the first place.
26.
by steffanA 4y ago
The Chromebook isn't ruined. Just do a factory reset and do not log into the school account. I know it doesn't help the op's kids who needs the CB for school, but there is nothing being done that a factory reset can't fi
27.
by steffanA 5y ago
On the other hand, do you have any proof that its enabled by default? This is a crappy thing to add to an antivirus program but there is no indication its enabled by default. Yeah, it makes the software bloated, but if its not mining by def
28.
by steffanA 5y ago
Why would you want to vote against this change? It's local policy and has no bearing on anyone else. Sites cannot enable it.
29.
by steffanA 5y ago
Agreed. Deleting comments and disabling comments are two entirely different things. Title should read "Microsoft disables comments under heavily criticized Windows 11 upgrade video" Clickbait.
30.
by steffanA 5y ago
Good tech details here about the attack. Also interesting "politically charged" Windows Registry keys and password changes: "For example, a sample [VirusTotal] installed by BleepingComputer adds the HKLM\SOFTWARE\Wow6432Node\

More ›