younotesunreadstarredadd url
6
allunreaduntaggedstarred tagged netsec×
When You Pay the Ransom - Taking Apart an Interlock ESXi Decryptor | Maldbg
From Reddit saved post — r/netsec, u/tohitsugu, Aug 13 2026 https://www.reddit.com/r/netsec/comments/1vnmye4/when_you_pay_the_ransom_taking_apart_an_interlock/
netsec  reddit  imported 
august 2026
Hacking your PC using your speaker without ever touching it
From Reddit saved post — r/netsec, u/nns_ee, Jun 03 2026 https://www.reddit.com/r/netsec/comments/1tvlsan/hacking_your_pc_using_your_speaker_without_ever/
netsec  reddit  imported 
june 2026
Build your first LLVM Obfuscator
From Reddit saved post — r/netsec, u/CyberMasterV, Jul 17 2022 https://www.reddit.com/r/netsec/comments/w14fsr/build_your_first_llvm_obfuscator/
netsec  reddit  imported 
july 2022
Disclosure of three 0-day iOS vulnerabilities and critique of Apple Security Bounty program
From Reddit saved post — r/netsec, u/illusionofchaos, Sep 23 2021 https://www.reddit.com/r/netsec/comments/pu7se4/disclosure_of_three_0day_ios_vulnerabilities_and/
netsec  reddit  imported 
september 2021
I was asked to crosspost this here. I’m an OS developer learning about OS security by breaking into my own OS!
From Reddit saved post — r/netsec, u/SerenityOS, Jan 29 2020 https://www.reddit.com/r/netsec/comments/evinrg/i_was_asked_to_crosspost_this_here_im_an_os/
netsec  reddit  imported 
january 2020
Comment on: How to hack the upcoming Dutch elections – and how hackers could have hacked all Dutch elections since 2009
From Reddit saved comment — r/netsec, u/marcan42, Feb 02 2017 https://www.reddit.com/r/netsec/comments/5ri5mo/how_to_hack_the_upcoming_dutch_elections_and_how/dd89nmc/ Comment on: How to hack the upcoming Dutch elections – and how hackers could have hacked all Dutch elections since 2009 > When you encrypt a file, and only the authorized personnel has the key to decrypt and re-encrypt, that does stop people from editing a file if they don't have the key. How else are you going to do authentication on an XML file? No, it doesn't. You're a software developer, and you're writing election software. You decide to encrypt the results for maximum security. You choose AES-128-CTR with a salted passphrase, which is a secure encryption algorithm. Here's your results XML file: <state code="CA"> <total cand="Clinton">8753788</total> <total cand="Trump">4483810</total> </state> Encrypt it: openssl enc -aes-128-ctr -k "s3cr3tp4ssw0rd" -in votes.xml -out votes.xml.bin And here is the encrypted result, which is of course *totally* secure and nobody would ever be able to tamper with it: $ hexdump -vC votes.xml.bin 00000000 53 61 6c 74 65 64 5f 5f 7d 58 a7 90 ce 4c a7 66 |Salted__}X...L.f| 00000010 4c 51 91 8c a0 d1 57 f8 6b dc 9d b5 42 a7 28 20 |LQ....W.k...B.( | 00000020 d4 32 f5 92 c1 f9 aa a5 3b bc 15 a5 47 74 e2 5e |.2......;...Gt.^| 00000030 d5 84 1c 9d ad 14 c2 ae 67 03 20 4f f8 fa 39 f1 |........g. O..9.| 00000040 32 94 ba 0c 28 b7 1a cb 88 5b 72 5c 19 bb 5e 08 |2...(....[r\..^.| 00000050 ca da 90 34 6f b9 3d 5d 10 fa cb 90 ea 73 06 5c |...4o.=].....s.\| 00000060 9c 05 09 2e cf 68 e0 7c 6b 33 f2 02 e6 2f 8c fc |.....h.|k3.../..| 00000070 c1 4c bb 27 42 c8 9b |.L.'B..| 00000077 Now Putin comes along, without knowing the passphrase, and flips four bits (see if you can spot them!): 00000000 53 61 6c 74 65 64 5f 5f 7d 58 a7 90 ce 4c a7 66 |Salted__}X...L.f| 00000010 4c 51 91 8c a0 d1 57 f8 6b dc 9d b5 42 a7 28 20 |LQ....W.k...B.( | 00000020 d4 32 f5 92 c1 f9 aa a5 3b bc 15 a5 47 74 e2 5e |.2......;...Gt.^| 00000030 d5 84 1c 9d ad 14 c2 ae 67 0f 20 4f f8 fa 39 f1 |........g. O..9.| 00000040 32 94 ba 0c 28 b7 1a cb 88 5b 72 5c 19 bb 5e 08 |2...(....[r\..^.| 00000050 ca da 90 34 6f b9 3d 5d 10 fa cb 90 ea 73 0a 5c |...4o.=].....s.\| 00000060 9c 05 09 2e cf 68 e0 7c 6b 33 f2 02 e6 2f 8c fc |.....h.|k3.../..| 00000070 c1 4c bb 27 42 c8 9b |.L.'B..| 00000077 And the election officials use your software to access the election results: openssl enc -d -aes-128-ctr -k "s3cr3tp4ssw0rd" -in votes.xml.bin -out votes.xml And look at what they get: <state code="CA"> <total cand="Clinton">4753788</total> <total cand="Trump">8483810</total> </state> Now Trump won California, and it's all your fault. Good job. Try a hash, a MAC, or a signature next time. $ sha1sum votes.xml.bin b6a95430bf363d8217e0af1b6daa5824d603e7ba votes.xml.bin vs. $ sha1sum votes.xml.bin cfde07d5105db75ad0c2692f221d3830fe6ba9b0 votes.xml.bin
netsec  reddit  reddit-comment  imported 
february 2017
204080100

top tags     all tags251020manage

*bookmark *download *tobuy *tofollow 2d 360 3d 3dprinting 3g abandonware actionscript air algorithm android animation api app apple appstore arcade arduino art article askreddit asm audio automation backlight backup bambulab bbs berlin bitcoin blipfm blipster blog bluetooth book bookmark bootcamp brasil brazil bug buildapc business c c# c++ carro casa chiptune citypop claudeai cliq cocoa cocoa-touch code collection component controller cooking crt css database debug demoscene design deutschland dev diy dns doc dos dosbox dotnet download electronics emu emudev emulation emulator engine example famicom feedbin fix flash flex fluorine forum freeware gadget game gameboy gameboy-pocket gamecollecting gamedev games germany git GoogleReader hack hacks hamburg hardware home home-automation homeassistant homebrew honda howto html htpc http IFTTT image imported indie inspiration insteon ios iosprogramming ipad iphone iso itunes jailbreak japan japantravel java javascript job lcd lib library linux live localization mac mame math mce media mediacenter megadrive memory-management midi mod movie mp3 mpd music mythtv nas nes network objective-c opengl opensource osx pc piracy plex plugin Pocket programming project ps1 ps2 ps3 ps4 pvr python raspberrypi recalbox recipe reddit reddit-comment reddit-post region remote repro resource retrogaming retropc retropie rgb roms rubyonrails saopaulo scart sdk server shmups shop shopping sim sms snes software sound soundblaster source spotify star steamdeck svn swift synology synth tax terminal three20 tips tool toread torrent tracker travel tutorial twitter twitter-post ubuntu ui uitableview unix unlock veralite viagem video vista vita vpn vps walkthrough warez web2.0 webservices wifi wii windows wishlist wordpress xbmc xbox xcode xml xna z-wave z80