Posts by NonSSL-Login

Spineless oversight

Probably not as serious as driving on the wrong side road and causing an accident that kills someone and then scurrying them back home from abroad.

Re: Not sure about this...

We are probably still doing the checking as there is hope that Trump loses the election and we can then go back to installing the better Huawei kit we want to install. Even though a Nokia deal has been talked about im sure we are just biding our time in the hope of the sanctions being dropped if Biden wins.

Biden is anti-chinese too and akin to the devil in disguise so it might be a false hope.

Bottom line is we want the cheaper + better Hauwei kit.

It's not quite a Facebook where everyone posts everything they do daily and informs the NSA exactly who they know and how along with pictures for their facial recognition database plus telephone numbers.

Its more akin to twitter where you follow people and make comments on their videos. So its mostly that nasty metadata you are sharing compared to Facebook where you give everything including all your likes, dislikes and views on everything so that NSA algorithms can decide if you might say something nasty one day about america so they have an excuse to search all your luggage and computers next time you go through one of their airports.

Re: Number of commentards who cannot RTFA

The article and headline was written to deceive from the start.

I wish there was a way we could block certain authors on el reg who are poisoning the site with this stupidity.

Re: I keep seeing this word "hacker" ...

While some of Lulzsec may have been immature and not more than skids, there was some real talent there too.

Even a skid needs to work out the best workflow and exfiltration methods when dealing with intelligence organisations.

Re: one app per country?

It makes more sense to throw the tracking app idea out the window altogether.

Judging distances via bluetooth is a shambles to begin with due to how all different phones with different chipsets output the BT signal and how they receive it. Working on that flawed data and advising people (advising them what exactly?) based on that is pointless,

Even if you accept someone will change their behaviour based on the app, we have to assume everyone has a mobile phone and installs the app. There would be so many holes and missing information in the big picture, I just dont see it being useful in any way at all. Except for goverments to have one database to easily track who interacts with who, without waiting for the NSA and GHCQ's to do the search through their collated phone mast info instead. /Cynic

Re: Cisco Kit

The software than runs on top where all the exploits have been found have been coded by Cisco themselves, I assume in their American HQ.

Re: ????

I think the point was some used Chrome only because Google promised not to track them with browser code and the lie was believed.

People generally trust companies not to lie straight to their face, even in this case.

Yet another backdoor in Chinese products to snoop on traffic..oh wait, Broadcom & Cisco are American, must be a bug! /Sarcasm

How useful this could be depends on how well the client OS/software reconnects and re-transmits and how many errors get shown on the desktop I would guess. Repeated warnings vs silent recovery would make a huge difference in whether someone investigates the reconnects or not.

You can make a wifi de-auther using a ESP8266 board which is about the size of a flat finger but i'm not sure if it possible to modify that project to read the known encryption key traffic after. Something to look in to!

Amazingly he wasn't the Belmarsh prisoner beaten to death by two other prisoners today, which surprised even me when I first heard about it!

Censoring a service so that users have to use a different service which can be spied on is often the goal.

It can be done in your face where everyone can see it or quietly under another guise. DDosing certain VPN nodes so VPN services software thinks Server X under gov control is the fastest node so their targets connect to it for example. not much different from this email provider block.

Western countries shout about the control other regimes are inflicting while hypocritically doing the same via more discreet methods.

Part of this is to stop MITM attacks.

It's easy (using available frameworks) to MITM someone on a network and modify their HTTP downloads on the fly. So as they download an EXE, your MITM machine adds malware to the file and the unsuspecting user gets the modified version

Same can be done with archives and ISO downloads.

This makes it harder for someone on your network, ISP, NSA types (or criminals who have gained access somewhere/redirected traffic via BGP attacks) to intercept along the route and add their own code.

Exactly.

When various 'debugging backdoors' have been found in Cisco equipment the el reg articles say it was a probably a genuine dev mistake and no mention of a backdoor.

When a company connected to Huawei have something similar, even if it's not internet connectable like Cisco's built in keys and backdoors, its suddenly the end of the world and Huawei are evil and it was likely intentional.

I love el reg but slowly losing my respect for their articles with this bullshit. There needs to be a way for us to be able to disable American based propaganda authors articles showing on the page....

Re: names redacted...

With the Donuts registry being involved in the buying....they were the first (and I think only) registry that decided to throw law out the window and suspend domains based on the MPAA's say so.

https://torrentfreak.com/inside-the-mpaas-piracy-deal-with-the-donuts-domain-registry-160210/

With that tight media cartel connection I wouldn't trust anything this company does. like trying to buy rights to .org

This whole deal needs a full independent audit and public report before the sale on important internet infrastructure goes through as a bare minimum.

Re: What if..

Had a problem like that using Multiboot to have multiple roms on a phone and when one got a kernel update, caused problems galore with booting the others.

If I understand what they are doing here, they are not changing the deleting or replacing the bootloader but putting it in memory and patching the phone to boot from that bit of memory instead of the current bootloader. If this is the case then it should have no effect on the phone after a reboot.

Otherwise like you say, may things that can go wrong!

Re: Here's a safe Starwars download

No encryption on Telnet so the packets can be easily MITM'ed. At least HTTPS is TLS and can be secure from that so theoretically cleaner and safer /Pedantic

Re: Good accounting

Often greed that gets people. If he had stopped at + 60 million after a year and run away into the night, he would have come out smelling of roses.

But 5 years for whatever he still has squirrelled away is probably well worth it.

Re: Where is Anne Sacoolas?

There goes that bargaining ticket...

Business as usual on the one way extradition street from UK to US. Bout time someone had the balls to resolve that.