Mostly done with my #log4shell range - Terraform and Ansible deploy it to AWS so you can play around with log4shell.
Great little short. #dust
I35 in Kansas miles 40-60 always fly past. In either direction you come out of hours of placid plains into comparably dazzling suburbia of Wichita. I can't help but look around almost in wonder, my mind soaking in the distraction. By the time I catch my bearings we're out the other side driving through the fields again.
I spent way too long on Elastic given that their docs say it isn't exploitable due to mitigations... Oh well.
Spent a few hours last night trying to get #log4j RCE on fresh ElasticSearch, Jetty, and Solr (not enough time on this one) installs. But no luck.
finity -> infosec.exchange
boosted
"Can you find the optimal route for the trolly?"
submitted by mstjepan
Support #EFF this week, and your donation will pack double the punch with an automatic 2X match... https://eff.org/power-up
US Pol (Roe v Wade)
Supreme court might eliminate RvW? Make it a law. That's the right way to do these things anyway. (I understand the complication around this, but if it's ever gonna happen this is the best time I've seen so far)
finity -> infosec.exchange
boosted
CQ CQ CQ Want to learn CW. I do have a straight key and want to use it on Linux.
How can I physically connect it ? Do I just treat it as a switch and implement hardware debounce ? Or use a GPIO on a pi(w), or hacking a old mouse to replace right click, a ESPxx with a HID interface ?
Advice on this would be appreciated ?
@ken_fallon this answer recommends the mouse hack because then it'll work easily with existing software.
https://ham.stackexchange.com/questions/1256/using-a-morse-code-key-with-a-computer
I was gonna recommend something like the Sega Genesis joypad driver, or DB9 joystick driver. I messed with that years ago and the electrical connections are simple and translate easily to the driver, and the driver was easy to modify to have the button behavior be different. I'm not sure that type of setup would work with whatever software you want to use though.
https://lobste.rs/s/waahpl/jumping_air_gap_15_years_nation_state
ESET looks at #malware that jumps the air gap - how the samples they know about work, and general #defense measures.
@izaya plus the Kerbals have a planetary success and lack of care approaching Wall-E human levels.
@izaya yeah! The Kerbals themselves don't seem like they're flying or anything... It's weird that the person who steers the agency also does the hiring, designs the rockets, and flies them remotely...
