Viewing profile — mrkoot

FWIW, N=1: I'm Dutch and don't recall the word "uitwaaien" being commonly used like this throughout society. It's only used in informal settings, e.g. between friends/family/collea…

For better or worse, this helps establish neural networks that are not (or less?) vulnerable to deception via e.g. fake eyeglasses [ LINK: https://dl.acm.org/citation.cfm?id=297839…

Vendor confirmed the issue, noting that it exists in "probably all versions" of Dropbear (i.e., v2018.76 and earlier) and that a patch will follow in the next couple of days: http:…

...and apparently the same issue exists in Dropbear up until current version (2018.76 / Feb 2018), which has an entirely different code base. A comment on /r/blackhat [0] led a col…

Yes. Large corporate networks often still have (some) production systems that allow password-based authentication. I don't know how widespread it still is, but I still encounter it…

+1. But just to be sure: that does not prevent testing for usernames and hence enumerating software by testing for known/common service account usernames (e.g. "_tor" on OpenBSD an…

Exactly - it also works for non-SSH accounts, thus allowing software enumeration by testing for default/common/known default service users. For instance, an OpenBSD box running Tor…

Blog post: https://www.nccgroup.trust/uk/about-us/newsroom-and-events/b...

The 10-part series 'How to get Smarter: A guide to critical thinking, cognitive biases, and logical fallacies' published between in Jan-Apr 2018 at Life Lessons is also quite compr…

It incorrectly classified me (@mrkoot) as a bot w/.923 probability.

Alexandre Anzala-Yamajako posted interesting comments on this to [Cryptography] (@metzdowd.com): > IMO a statistical approach based on taking a bunch of data a saying essentially "…

The BCP's scope is broader than state actors: "The motivation for PM can range from non-targeted nation-state surveillance, to legal but privacy-unfriendly purposes by commercial e…

In March 2015, Karsten Nohl is quoted wrt type C in the context of BadUSB: '"The additional openness and flexibility of USB Type-C comes with more attack surface," says Karsten Noh…

It works - thx!