lookouttacks

- friends
330 link karma
1,990 comment karma
send messageredditor for
what's this?

TROPHY CASE

  • dust

Did Anderson Cooper just call out reddit on r/jailbait? by lookouttacksin reddit.com

[–]lookouttacks[S] 43 points44 points ago

sorry, this has been archived and can no longer be voted on

I like this one.

When it comes to our children safety, there is no freedom of speech!

IAmThe servier engineering lead at foursquare. Ask Me Anything. by harry_heymannin IAmA

[–]lookouttacks 7 points8 points ago

sorry, this has been archived and can no longer be voted on

How do you store passwords? No, seriously. How do you store your passwords?

Graffiti at its finest. by LegolasGreenleafin pics

[–]lookouttacks 2 points3 points ago

sorry, this has been archived and can no longer be voted on

That's.... nearly the exact same image! What the.... Why?! How?!

How long do you think this encryption algorithm would take to crack? by TeraPoolin crypto

[–]lookouttacks 0 points1 point ago

sorry, this has been archived and can no longer be voted on

Yea, all it does is lock a flash drive in. But look at a USB device - there's nothing consistent for it to hold onto, except by pressure. Like this. I bet you can just pull the thing out with force. If not, take/break the lock apart with hand tools.

If I host a site on amazon ec2 and it gets DDoS'd, do I wind up with a huge bill from amazon? by e35yrghrwin netsec

[–]lookouttacks 1 point2 points ago*

sorry, this has been archived and can no longer be voted on

Only if you had set up an Elastic Load Balancer and set it up to scale out machines automagically. Otherwise - you shouldn't listen to me, see synt4x.

I feel like web authentication via the traditional root authorities is a dead end. I hope that this is the future. by cronus42in netsec

[–]lookouttacks 0 points1 point ago

sorry, this has been archived and can no longer be voted on

I like it too, been on the working group mailing list for the past several months. But Moxie has some good points that shows that even this isn't the holy grail, and that in a sense it's just reducing the number of authorities you have to trust, not eliminating them/moving it all to the domain owner.

LulzSec Leaks Hundreds of Classified Arizona Police documents. Release called Chinga La Migra by foil-timein netsec

[–]lookouttacks 6 points7 points ago

sorry, this has been archived and can no longer be voted on

Wikileaks would sit on it forever and a half, debate what to do with it, try and time to some internal timeline, etc etc. They'd probably try and redact information that'd get people shot (which is a good thing) - but that takes time. Lulzsec doesn't seem to want to wait to release anything...

Bob sends a message to Alice.. by spazurein geek

[–]lookouttacks 0 points1 point ago

sorry, this has been archived and can no longer be voted on

Blowfish is a Symmetric Algorithm. SHA is a Hash Algorithm (not for encryption). RSA & ElGamal are asymmetric algorithms. A keysize of 1024 implies an asymmetric algorithm, and since SHA doesn't make sense there I'd have to correct further to Blowfish-128 or Blowfish-192.

Unless you just trollin.

Bob sends a message to Alice.. by spazurein geek

[–]lookouttacks 1 point2 points ago

sorry, this has been archived and can no longer be voted on

SHA-1024 encryption

wince

RSA-1024. Or ElGamal.

"I don't need no warrant..." Arizona Police officer says before shooting and killing man (and dog) because he refused to let them in without a warrant. This same officer was caught planting drugs on a homeless woman in 2005. by heyrichin politics

[–]lookouttacks 0 points1 point ago

sorry, this has been archived and can no longer be voted on

Starting salaries

  • NYPD $34,970
  • LAPD $48,880 (w/ College degree)
  • Chicago $43,104 ($64,374 after 18 mos)
  • San Francisco $82,602
  • Washington DC $48,716

CryptoBin, what do you think? by crypt00in netsec

[–]lookouttacks 0 points1 point ago

sorry, this has been archived and can no longer be voted on

The double-encrypt argument applies more to asymmetric (based on groups/fields) crypto than symmetric. Where it does applies to symmetric, it's usually more related to double-encrypting using the same cipher. Yes, in theory there may be unknown attacks that could be performed by very sophisticated attackers to gain some information about double-encrypted content...

But that's nothing compared to the very real threat of man-in-middle on javascript that can be performed by everybody and their dog.

"Chromium's code is perhaps the most quality code I've ever seen" by nickknwin programming

[–]lookouttacks 7 points8 points ago

sorry, this has been archived and can no longer be voted on

I learned four things:

  1. Nifty countof trick
  2. Chrome code is pretty good
  3. These guys are kind of jerks
  4. If I buy their product and try using it on a large project - I'll find errors in their product.

Interesting article, poor advertising!

Reverse engineering of the NSA's public key by isisgrimalkinin crypto

[–]lookouttacks 3 points4 points ago

sorry, this has been archived and can no longer be voted on

For those not up on the latest factoring status, this would take about 1695 Core-Years to factor, and that's using tools that are not open-source/publicly available.

John C. Dvorak has no idea what is going on with Sony and LulzSec. Why is he regarded as an expert? by Centropomusin netsec

[–]lookouttacks 7 points8 points ago

sorry, this has been archived and can no longer be voted on

People regard John C Dvorak as an expert? I liked Leo Laporte, but Dvorak was such an assholish idiot that it creating a some sort of envelope of hate around him so large I stopped liking Leo.

Swype says they'll end Swype Beta on Android indefinitely if permission spoofing catches on. by rdr0b11in Android

[–]lookouttacks 0 points1 point ago

sorry, this has been archived and can no longer be voted on

I personally spoke with ciwrl this morning, who relayed our conversation to the rest of TeamDouche, and talked with him about our concerns

/giggle

DOJ threatens no-fly zone for Texas in retaliation for attempting to enforce the 4th amendment in state law. by georgedonnellyin OperationGrabAss

[–]lookouttacks 0 points1 point ago

sorry, this has been archived and can no longer be voted on

I've seen a lot of things come out of left field on reddit, people citing some specific thing they think is wrong - this is the first time I've seen someone arguing against the 17th Amendment. And it's got 14 upvotes!

I just don't get it though. Yes, state assemblies having recourse with the federal government is a good thing. But I don't see how one more level of abstraction away from citizens' representation is a good thing. If Senators were appointed by the assembly, they'd only have to convince/fool/lobby a few hundred people instead of their constituents. It'd be much easier to have an old boys' club. I can't say I'm really buying this one...

What are the best security conferences to go to? by untouchable0789in netsec

[–]lookouttacks 0 points1 point ago

sorry, this has been archived and can no longer be voted on

so someday I can maybe make it to an upper level position

Upper level defined as "management/compliance" or upper level defined as the hacker whispered in huddled circles? If you want to be as impressive as jono - RECon. Summerc0n. Massive amounts of effort.

If you want to be a suit - maybe RSA? It's a vendor-mosh-pit, but that's what businessy people go. OWASP would be really good actually.

For meeting people and hanging out - SOURCE (Boston I went to, I assume the others too). They have a mentor program too. DEFCon for the ridiculousness. And of course - any local events. OWASP, citysec (New York/Boston/Chicago/etc), 2600 (although I've never gone to one), and any local cons.

What are the best security conferences to go to? by untouchable0789in netsec

[–]lookouttacks 2 points3 points ago

sorry, this has been archived and can no longer be voted on

What do you want to get out of it?

CurveCP committed to Google Chrome repo (a work in progress). by selfin crypto

[–]lookouttacks 2 points3 points ago

sorry, this has been archived and can no longer be voted on

Does CurveCP stop man-in-the-middle attacks? Yes. The client knows the server's long-term public key in advance, before making a CurveCP connection.

I couldn't find out 'how' the client knows this. Anyone know?

The Factorization of RSA768 by bulibutain ReverseEngineering

[–]lookouttacks 0 points1 point ago

sorry, this has been archived and can no longer be voted on

Source - or, if not the source, then more details.

Bring it on! by [deleted]in pics

[–]lookouttacks 0 points1 point ago

sorry, this has been archived and can no longer be voted on

Completely unprovoked I thought 'What was the name of that guy who always posted truck photos'? And I knew it was something like 'metsruleonplanetearth' so I went looking, and lo and behold, he posts mere hours ago, his first in nearly 10 months. Quite a coincidence. And I must say, I am glad he is back. But I don't understand what happened to all his old posts? Were they deleted? Is this a slightly different, but equally old account?

Police departments who push a policy of "if you videotape us, you will go to jail" are being investigated by the Department of Justice for civil rights violations by mepperin politics

[–]lookouttacks 5 points6 points ago

sorry, this has been archived and can no longer be voted on

Agreed, with an additional note: the police department, mayor, and courts have always, and will always side with a police officer making reasonable decisions based on the input he has - even if the result is horrible. A police officer, in search of an armed rapist, having a description of him would be exonerated if circumstances led him to shoot an innocent man matching the description if the man took aggressive action (instead of following the order to put your hands up and get on the ground) [situation not described in detail]. And they should be so exonerated.

What we want in the ability to film officers is to show flagrant abuse of power and misconduct. Police shouldn't be worried about being tarred and feathered for making a wrong decision - everyone does. They should know that we will hold them accountable for conduct they already know is wrong, but do anyway for whatever reason (racism, anger issues, authority gone to their head, money, etc).

view more: next