January 2018 Archives

Wed Jan 10 15:41:19 EET 2018

Nearly social, on Linkedin

I am getting nearly social on Linkedin.

Name:  Georgi Guninski
URL: https://www.linkedin.com/in/georgi-guninski-b0069a156

Posted by oo | Permanent link

Tue Jan 9 12:26:53 EET 2018

Own on install. How grave it is?

This is well known, haven't seen it discussed.

In short doing clean install (factory defaults) has a window of
opportunity when the device is vulnerable to a known network attack.

It used to be common sense to reinstall after compromise (probably
doesn't apply to the windows world where the antivirus takes care).

All versions of windoze are affected by the SMB bug to my knowledge.
Debian jessie (old stable) is vulnerable to malicious mirror attack.

More of interest to me are devices where the installation media is
fixed and can't be changed.

This includes smartphones and wireless routers.

Some smartphones might be vulnerable to wifi RCE (found by google?).
Some wireless routers might be vulnerable to wifi RCE or
default admin password attack over wifi.

Internet of Things will make things worse (some NAS devices are
affected).

Shielding the device might not be solution since updates must be
applied.

Are the above concerns real?

Have this been studied systematically?



Posted by 00t | Permanent link

Mon Jan 8 15:41:16 EET 2018

Some predictions for 2018

Some predictions for 2018:

1. Major malware(s) spreading via Intel ME and the like.
Significantly worse than wannacry.
Possibly hard to clean, requiring reprogramming chip on external
device.

2. Major Android malware(s).

3. m$ windows will suck so much, computer illiterate people will be
ready to pay for just literally "uninstalling windows"

4. bitcoin will at least temporary lose the first place on
https://coinmarketcap.com (this is not rigorous metric)

Posted by nearly a time machine | Permanent link

Mon Jan 1 09:04:46 EET 2018

Чecтитa нoвa гoдинa / Happy New Year

Чecтитa нoвa гoдинa / Happy New Year

Posted by ЧНГ | Permanent link