Re: [FD] Skype Debian package: allows complete machine takeover for Microsoft

2018-10-16 Thread coderaptor
me, I disallow both Google and Microsoft to insert their repo.. Thanks. -coderaptor On Fri, Oct 5, 2018 at 10:18 AM Michael Lazin wrote: > > While things like this have appeared in the news, > http://www.securitynewspaper.com/2018/07/14/malicious-software-packages-at-linux-repositories/, &

Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe

2014-05-22 Thread coderaptor
eport was far more important for the customer than listening to reason. We did a class-fix across the entire product line. It did not take a lot of time, frankly - which is where my argument came from. Where perception plays an important role, I find it much easy to fix something if it is trivially f

Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe

2014-05-21 Thread coderaptor
r, which quickly explodes into upper two or even three digit numbers. -coderaptor On Wed, May 21, 2014 at 6:57 AM, Tavis Ormandy wrote: > On 21 May 2014 02:13, Project Un1c0rn wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> I really don't get tho

Re: [FD] heartbleed OpenSSL bug CVE-2014-0160

2014-04-09 Thread Coderaptor
You should read https://www.peereboom.us/assl/assl/html/openssl.html (OpenSSL is written by monkeys). That partially explains why the stream of heartbleeds won't go away any soon. -coderaptor -- sent via 100% recycled electrons from my mobile command center. > On Apr 9, 2014, at

Re: [FD] Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction

2014-04-01 Thread coderaptor
Apparently, this issue was discovered earlier... http://flagdefenders.blogspot.com/2013/10/facebook-image-privacy-keep-calm-and-be.html -coderaptor On Tue, Apr 1, 2014 at 1:23 PM, Ron wrote: > By that same token, passwords, private keys, and any sort of signatures > should also be cons