✭
When You Pay the Ransom - Taking Apart an Interlock ESXi Decryptor | Maldbg
august 2026
From Reddit saved post — r/netsec, u/tohitsugu, Aug 13 2026
https://www.reddit.com/r/netsec/comments/1vnmye4/when_you_pay_the_ransom_taking_apart_an_interlock/
netsec reddit imported august 2026
✭
Hacking your PC using your speaker without ever touching it
june 2026
From Reddit saved post — r/netsec, u/nns_ee, Jun 03 2026
https://www.reddit.com/r/netsec/comments/1tvlsan/hacking_your_pc_using_your_speaker_without_ever/
netsec reddit imported june 2026
✭
Disclosure of three 0-day iOS vulnerabilities and critique of Apple Security Bounty program
september 2021
From Reddit saved post — r/netsec, u/illusionofchaos, Sep 23 2021
https://www.reddit.com/r/netsec/comments/pu7se4/disclosure_of_three_0day_ios_vulnerabilities_and/
netsec reddit imported september 2021
✭
I was asked to crosspost this here. I’m an OS developer learning about OS security by breaking into my own OS!
january 2020
From Reddit saved post — r/netsec, u/SerenityOS, Jan 29 2020
https://www.reddit.com/r/netsec/comments/evinrg/i_was_asked_to_crosspost_this_here_im_an_os/
netsec reddit imported january 2020
✭
Comment on: How to hack the upcoming Dutch elections – and how hackers could have hacked all Dutch elections since 2009
february 2017
From Reddit saved comment — r/netsec, u/marcan42, Feb 02 2017
https://www.reddit.com/r/netsec/comments/5ri5mo/how_to_hack_the_upcoming_dutch_elections_and_how/dd89nmc/
Comment on: How to hack the upcoming Dutch elections – and how hackers could have hacked all Dutch elections since 2009
> When you encrypt a file, and only the authorized personnel has the key to decrypt and re-encrypt, that does stop people from editing a file if they don't have the key. How else are you going to do authentication on an XML file?
No, it doesn't. You're a software developer, and you're writing election software. You decide to encrypt the results for maximum security. You choose AES-128-CTR with a salted passphrase, which is a secure encryption algorithm.
Here's your results XML file:
<state code="CA">
<total cand="Clinton">8753788</total>
<total cand="Trump">4483810</total>
</state>
Encrypt it:
openssl enc -aes-128-ctr -k "s3cr3tp4ssw0rd" -in votes.xml -out votes.xml.bin
And here is the encrypted result, which is of course *totally* secure and nobody would ever be able to tamper with it:
$ hexdump -vC votes.xml.bin
00000000 53 61 6c 74 65 64 5f 5f 7d 58 a7 90 ce 4c a7 66 |Salted__}X...L.f|
00000010 4c 51 91 8c a0 d1 57 f8 6b dc 9d b5 42 a7 28 20 |LQ....W.k...B.( |
00000020 d4 32 f5 92 c1 f9 aa a5 3b bc 15 a5 47 74 e2 5e |.2......;...Gt.^|
00000030 d5 84 1c 9d ad 14 c2 ae 67 03 20 4f f8 fa 39 f1 |........g. O..9.|
00000040 32 94 ba 0c 28 b7 1a cb 88 5b 72 5c 19 bb 5e 08 |2...(....[r\..^.|
00000050 ca da 90 34 6f b9 3d 5d 10 fa cb 90 ea 73 06 5c |...4o.=].....s.\|
00000060 9c 05 09 2e cf 68 e0 7c 6b 33 f2 02 e6 2f 8c fc |.....h.|k3.../..|
00000070 c1 4c bb 27 42 c8 9b |.L.'B..|
00000077
Now Putin comes along, without knowing the passphrase, and flips four bits (see if you can spot them!):
00000000 53 61 6c 74 65 64 5f 5f 7d 58 a7 90 ce 4c a7 66 |Salted__}X...L.f|
00000010 4c 51 91 8c a0 d1 57 f8 6b dc 9d b5 42 a7 28 20 |LQ....W.k...B.( |
00000020 d4 32 f5 92 c1 f9 aa a5 3b bc 15 a5 47 74 e2 5e |.2......;...Gt.^|
00000030 d5 84 1c 9d ad 14 c2 ae 67 0f 20 4f f8 fa 39 f1 |........g. O..9.|
00000040 32 94 ba 0c 28 b7 1a cb 88 5b 72 5c 19 bb 5e 08 |2...(....[r\..^.|
00000050 ca da 90 34 6f b9 3d 5d 10 fa cb 90 ea 73 0a 5c |...4o.=].....s.\|
00000060 9c 05 09 2e cf 68 e0 7c 6b 33 f2 02 e6 2f 8c fc |.....h.|k3.../..|
00000070 c1 4c bb 27 42 c8 9b |.L.'B..|
00000077
And the election officials use your software to access the election results:
openssl enc -d -aes-128-ctr -k "s3cr3tp4ssw0rd" -in votes.xml.bin -out votes.xml
And look at what they get:
<state code="CA">
<total cand="Clinton">4753788</total>
<total cand="Trump">8483810</total>
</state>
Now Trump won California, and it's all your fault. Good job.
Try a hash, a MAC, or a signature next time.
$ sha1sum votes.xml.bin
b6a95430bf363d8217e0af1b6daa5824d603e7ba votes.xml.bin
vs.
$ sha1sum votes.xml.bin
cfde07d5105db75ad0c2692f221d3830fe6ba9b0 votes.xml.bin
netsec reddit reddit-comment imported february 2017
*bookmark *download *tobuy *tofollow 2d 360 3d 3dprinting 3g abandonware actionscript air algorithm android animation api app apple appstore arcade arduino art article askreddit asm audio automation backlight backup bambulab bbs berlin bitcoin blipfm blipster blog bluetooth book bookmark bootcamp brasil brazil bug buildapc business c c# c++ carro casa chiptune citypop claudeai cliq cocoa cocoa-touch code collection component controller cooking crt css database debug demoscene design deutschland dev diy dns doc dos dosbox dotnet download electronics emu emudev emulation emulator engine example famicom feedbin fix flash flex fluorine forum freeware gadget game gameboy gameboy-pocket gamecollecting gamedev games germany git GoogleReader hack hacks hamburg hardware home home-automation homeassistant homebrew honda howto html htpc http IFTTT image imported indie inspiration insteon ios iosprogramming ipad iphone iso itunes jailbreak japan japantravel java javascript job lcd lib library linux live localization mac mame math mce media mediacenter megadrive memory-management midi mod movie mp3 mpd music mythtv nas nes network objective-c opengl opensource osx pc piracy plex plugin Pocket programming project ps1 ps2 ps3 ps4 pvr python raspberrypi recalbox recipe reddit reddit-comment reddit-post region remote repro resource retrogaming retropc retropie rgb roms rubyonrails saopaulo scart sdk server shmups shop shopping sim sms snes software sound soundblaster source spotify star steamdeck svn swift synology synth tax terminal three20 tips tool toread torrent tracker travel tutorial twitter twitter-post ubuntu ui uitableview unix unlock veralite viagem video vista vita vpn vps walkthrough warez web2.0 webservices wifi wii windows wishlist wordpress xbmc xbox xcode xml xna z-wave z80