Aight, BET.
comments
Would be great to see adjusted to population size
The only thing MS does to justify its existence is counter-cyber-warfare.
If only they homomorphically encrypted that data ╮(︶▽︶)╭
Can somebody hack the Epstein files too? Be sure to redact the parts that the Congress asked DoJ to, before publishing it.
Just block ‘em whether it’s DNS or IP blocks. Browser extensions aren’t enough on their own since ads are oftentimes loaded directly via apps too.
Seems like TypeScript could be generating JavaScript code that does these type checks on function entry - with a runtime cost of course.
Is there no such setting, general or conditional toggle on functions or types?
Sanitizer logic: Skips execution (wrong type)
But why? Why does it "skip" when there's logic there? That doesn't make sense.
If someone passes an object with a length property, this works. If they pass an array, it works.
This later example explains how it can work for some logic. But it doesn't correlate to the actual exploitation or code in question.
comment on
A Possible US Government iPhone-Hacking Toolkit Is Now in the Hands of Foreign Spies and Criminals
🔥
Message from the hacktivist, if anyone's curious:
I'm disclosing a list containing the details of 6,681 organizations that applied for contracts with the US Department of Homeland Security.
This data was taken from the Office of Industry Partnership at https://oip.dhs.gov.
Why hack the DHS? I can think of a couple Pretti Good reasons!
I'm releasing this because the DHS is killing us and people deserve to know which companies support them and what they're working on.
This data includes:
• Company names
• Company URLs
• Names of various employees and sometimes their titles
• Business and potentially personal addresses
• Employee phone numbers
• Employee email addresses
• Tax identification numbers, including employer identification numbers and potentially SSNs
• Other government contractor IDs, such as UEI numbers and CAGE codes
• Some internal comments by DHS staff regarding things like updates to the information above
Examples of companies in the list:
• Palantir
• Anduril
• Microsoft
• Raytheon
• Oracle
• L3Harris
• HBGary
Additionally, I've included a second list containing information on which of these companies won contracts and what those contracts were for.
The information in this second list may be less sensitive, but it doesn't appear in the public section of https://oip.dhs.gov as far as I could tell.
I've included the second list for reference and comparison to the first. Both are likely incomplete.
There are some entities in this list that I take no issue with, such as NASA, the various universities, water safety organizations, etc.
However, people deserve to know about them, too, and these entities likewise deserve to know that they're part of the breach.
Furthermore, there are also details from government agencies, including the FBI and the DHS itself.
What you do with this data is entirely up to you. Thanks for checking this out!
To the DHS:
You are neither increasing the security of our homeland nor are you secure yourselves.
How does it feel to be hunted?
To the contractors:
You wage war just to make a buck. I do this for free.
How does it feel to be spied on?
To everyone else, thanks for reading and good luck.
- Department of Peace
Email: oaqeitbfqxczhe8yle57@proton.me
GPG: See department_of_peace.pub.asc
Small numbers factored. Error correcting progressing, material science and they just got qbits needed to crack RSA in theory under 100k. And yes NSA is expected to build one early. And China and GHCQ wanted to start on one a few years ago.
On one hand yeah there's been progress, but on the other we're still not anywhere close to having any useful computation done on them.
It's difficult to predict if the technology will come close enough for a state actor like the NSA to build something capable of attacking current modern encryption. I suspect if it does, they'll be the first to build one and we still won't know if it's possible.
which are append-only distributed ledgers
Lol, couldn't bring themselves to say "blockchain".
Based on what? Field has been progressing steadily for a decade.
Quantum computers will not solve the discrete log or factor a large prime(*) in our lifetimes.
- faster than a contemporaneous classical computer, for a practical key size and algorithm with full iterations
If they do then I will eat my hat.
"Mexico’s tax authority said it had reviewed its access logs and couldn’t find evidence of a breach."
Wouldn't it be funny if it hallucinated stolen data lol
SSNs are supposed to be secret? Then why does every financial institution request it?
DOGE's doing, in case anyone wondered.
Borges alleges that a little-known federal tech team called the Department of Government Efficiency, or DOGE, copied the government’s master Social Security database into a cloud system that lacked normal oversight.
Are there people whose SSNs haven't already been leaked at this point?
Uh huh. I'm sure this administration can be trusted with that.
but I finally memorized mine: 123-45-6789
This article reads like AI and lacks coherence in crucial parts of the attempted "explanation", specifically:
TypeScript compiler checks the code: ✓ Types match (at compile-time)
I'm not even sure whether there's a defense against this when trying to limit the user to a subset of JavaScript. It feels like you need to write a compiler or interpreter that doesn't know anything outside of that subset otherwise you can break out of the language sandbox.
Kinda shocks me that most of these cli apps still have no method of securing these credentials. No encryption with passphrase, no integration with password/secret managers. Just a plaintext credentials file in a static location.