221–230 of 555 posts
Earlier quoted context omitted.
We just broke the locks on the cages with a screwdriver. Locks only keep honest people honest.
Most common locks can be easily picked with a tiny bit of practice. I'm completely incompetent but I can pick any Master lock in 5 minutes or less.
Earlier quoted context omitted.
Unfortunately, there aren't really all that many "good locks" on the market. The Lock Picking Lawyer on YouTube[1] has pretty much destroyed my faith in the modern lockmaking industry. [1]: https://www.youtube.com/c/lockpickinglawyer/videos
I have hundreds of locks and lock bypass tools. I make sure to pay for ones that are not quickly defeated when it counts. LPL covers most locks in the wild which are bad, but locks like the Protec2 are quite strong and while it is implied one person in the world can beat it with custom tools (huxleypig)... even then not quickly.
Been a follower of Hak5 since way back in the day. Even crashed at the hak house with Darren a long time ago. Cool to see them here since they actually hack stuff haha.
Was very fortunate to meet Darren, Shannon, and Patrick Norton at Defcon in 2019. It was surreal to see them and even though I probably acted all nervous around them (still kinda had a crush on Shannon even after all these years) they were beyond nice and friendly. They were super busy selling their kits (these OMG cables were being sold unofficially as well lol) but they took the time to chat about the history of Ha…
Earlier quoted context omitted.
I'm in San Francisco, so not Seattle, but cars get broken into for the sport of it by this point. A friend's had her window broken and used, gross dog leashes and an old Nokia charger stolen. The lost hours of work to replace the window was the real cost to her dog walking business.
I've never had my car broken into... but most of that was a midwestern city not the coasts, although I've been in San Fran, NYC, and DC. I have a very messy car. Not rotting food messy, just a lot of clothes and things, often a lot of workout clothes, backup winter clothes, a couple blankets. Thieves like clean cars. See target, break in, grab, leave. Messy cars are slow, annoying, and induce too much cognitive load.…
This makes me miss older, simpler protocols. Sure, a parallel cable could also be compromised to snoop but at least it couldn't pretend to be some other device or install rootkits.
In the 1980's I worked with CAD/CAM software that required hardware dongles on parallel ports as an anti-piracy measure. That probably could have been exploitable: e.g., instead of returning the security response, cram a ton of data and cause buffer overrun on their 80286 + DOS5 application and smash the stack. It would be fun to go back in time and see just how vulnerable that software was.
It was my firm belief that many of the angry mobs at vote counting offices around the 2020 elections were cover for planting these types of devices. That is very much out of the Roger Stone playbook. The lack of anomalies has shaken that belief… but I do hope that the existence of these types of devices is included in security training for future polling staff.
Earlier quoted context omitted.
Most common locks can be easily picked with a tiny bit of practice. I'm completely incompetent but I can pick any Master lock in 5 minutes or less.
Which is why you should never use Master Locks. I am pretty decent at lockpicking but I can't pick a Medeco or better in any practical amount of time and very few in the world can. Little bit more money vastly reduces your attack surface.
Aren't medeco padlocks like $100, whereas master lock padlocks are less than $20?
Who buys this stuff? Other things in the shop: > Screen Crab: This covert inline screen grabber sits between HDMI devices - like a computer and monitor, or console and television - to quietly capture screenshots. Perfect for sysadmins, pentesters and anyone wanting to record what's on a screen. > Shark Jack: This portable network attack tool is a pentesters best friend optimized for social engineering engagements and…
Without products like this you have criminals, a small amount of enthusiasts/researchers, and government sponsored actors exploiting vulnerabilities. If you put it out in the open, much like open source software, everyone can do it, but there's more pressure to fix blatant vulnerabilities.
Earlier quoted context omitted.
The Lightning-to-HDMI adapter is also an insane miniaturization. It runs a (very) stripped down version of iOS/darwin (not sure what apple counts it as) that is loaded in about a second when you plug in the phone, establishes a network connection, and streams compressed video frames over the network over USB to the HDMI. That's why when you use the iPhone HDMI adapter, everything looks a little bit compressed. Becaus…
Yup. It's actually an incredibly clever piece of tech that lets the iPad/iPhone get around the fact that lightning doesn't have enough bandwidth to transmit HDMI. For regular home/app views, it does hardware compression of the iPad's screen, outputs that over lightning, then the adapter decompresses it to raw HDMI. While for Netflix/etc. streams, it outputs the stream directly to the adapter to decompress, without qu…
And I'll even leave aside the issue of running a whole OS just to decode video.
But this is dealing with 1080p output. That's not very intensive. A lightning port has two high speed data pairs. You don't even need USB 3 speeds to transmit HDMI over one of those data pairs, and then put in like a $2 redriver.
If you set up double-sided output I think you could even have a passive lightning to HDMI adapter. But that's a side issue, my main point is the bandwidth available that makes these tradeoffs unnecessary.
Earlier quoted context omitted.
That's hard if your laptop relies on USB-C for charging...
I specifically don't recommend laptops that rely on USB C charging for applications where trust is critical -unless- they are running Linux with USBGuard or QubesOS. That said I did make transparent and easily auditable USB type C condoms for one client that really wanted to use USB type C laptops. Systems with security as a strong priority like the Librem 14 use barrel jacks for good reason. I am in fact implying th…