commandersaki

Just to clarify that no actual PoC was published, just a demonstration video was floating about.

Love both.

Why are jobs on the line in the first place, is this some kind of layoff?

While the assessment can be gamed, you must overcome the exam which are written and reviewed outside of the university, so the lecturer doesn't know what is on the exam, and the questions and exam papers are never returned.

Doing this I remember my undergrad and masters felt like I was coddled as there was a bunch of fluff grades in doing assignments and just turning up to class. The grade inflation was a farce as well.

I have had this take but for things like exploiting with a DRAM interposer ala Battering RAM. They say it's a low cost attack, but the amount of obstacles you need to overcome (including having root on the system and physical access) is intractable to virtually everyone, and a nation state wouldn't go to that kind of gymnastics when it is more than likely there is a quicker and easier way in.

But this? I doubt any high value targets will be exploited in the wild since news travelled fast and from what I can see pretty much most took preventative action. Looks like pretty much everyone heeded the warning and suggestions. It'll mostly be a nothing burger like Heartbleed. There'll be of course low hanging fruit of unpatched servers out there, but anything of importance would have already had active maintenance and patching.

Now that Calif has released the details, I'm sure there'll be a contingent that can actively and easily exploit this, either now or very soon, with or without the guidance of LLMs.

But yeah if someone said Battering RAM, I would say fuggedabout it, but if someone said PHP vulnerability with a CVE of 9.2, I would say patch it ASAP or bring the servers down until you can.

https://github.com/google/paranoid_crypto/blob/main/paranoid...

https://ianix.com/pub/dnssec-outages.html

When it goes offline I get the following error on the Flint 3:

    # dmesg | grep -i '54:EF:44:5C:BC:B1' | grep kicked
    [3356208.016938] wlan: [0:I:ANY] [INACT] vap-0(wlan0): [54:ef:44:5c:bc:b1]station kicked out due to excessive retries associd 4 (from target) reason 1
    [3363271.980807] wlan: [0:I:ANY] [INACT] vap-0(wlan0): [54:ef:44:5c:bc:b1]station kicked out due to excessive retries associd 4 (from target) reason 1

But what really shocked me is how amazing GL.Inet support is. I think they're probably the best support people I've come across, helping me track down an issue I've had for months with an Aqara doorbell that intermittently goes offline, suggesting configuration changes, even logging into my router (with my permission) to diagnose things. Don't have to register an account in any support system or forum either, can do everything over email. Complete opposite to pretty much every networking vendor I've encountered both low end and enterprise.