« first day (1185 days earlier)      last day (3988 days later) » 

22:09
"Hmm. I'll have to see. I technically didn't hack it. Used my existing credentials to snoop around and get root." that is consider "hacking" at least in the US
you don't have to use any malicious tools or anything. You simply have to use some system in some way that you were not intended to by the system owner.
look up "weev at&t ipad" ;-)
there was a public facing at&t web service that accepted MEID #s and returned the email address associated with that meid if it had one. He wrote a script to spoof the MEIDs and collect the results
@RaghavSood and I agree with nil mostly. Either don't report it, or if you absolutely think you must then take percaution to report it anonymously through some channel other than using it yourself i.e. make a throw away email address and send a message from somewhere off compass
user457812
I can't remember if the media tried to pin that one on Apple or AT&T
user457812
Probably Apple.
user457812
Stories generate more ad impressions when you have Apple and some sort of controversy, regardless of validity.
22:16
should be 100% on at&t, it was their web service and it did not attempt to thwart or throttle automated requests
thats true
I definitely recall reading about a US university student that tried to report a security hole and ended up getting fucked over by the school for it.
user457812
It's actually happened a number of times
This is ridiculous >.< You get screwed for helping out
user457812
Basically, if it's anything to do with the school's systems or network, they hate you and don't care about the public response
I completely agree with the ridiculousness
maybe (hopefully) it is different elsewhere in the world
What if I got the school to sign a bunch of papers saying they won't go after me for this?
user457812
22:19
They won't agree to sign them.
If they do?
Also, anybody know how to clear ubuntu logs?
I took care of the bash history
If you feel like you must report it do so anonymously and leave no way for them to contact you back. IMO
if you can't do so anonymously(i.e. you are one of very few with the read access that you'd need to find it) then don't bother
user457812
Might be possible to wipe /var/log, but that'd seem kind of suspicious
There's over a thousand students who can find the same stuff, and a lot of their passwords are defaults
Anybody could walk in
Yeah, I have root access, so I can wipe it, but I'd rather avoid wiping everything
user457812
22:22
My school required password changes every 3 months or so
My school sets everyone's password to the same thing and never bothers about it
user457812
Which was annoying, since it's an attempt to solve the problem but their password system was terrible so it was solving the wrong problem
And, old students who've left still have accounts
user457812
For example, you couldn't have the % character in your password.
@RaghavSood It only maintain the history of commands executed on the bash shell and some web logs of http also and mysql etc if you done anything in those.
user457812
22:23
Which means one of two things: 1) they don't escape their strings or 2) they're stupid
Ours can be anything >= 8 characters
user457812
And neither are good
I know cause I'm reading the password config files
user457812
We also couldn't have more than 20 characters, I think
user457812
Meanwhile, my twitter password is over 100 characters long.
user457812
22:24
And randomly generated.
My laptop's 59 characters
user457812
So yeah, that ain't getting brute-forced.
But I leave everything else logged in
If you get through that, you basically own me
user457812
My laptop password is pretty short since I figure if you've got my device, you could skip logging in, boot from a USB key, and access my junk that way since it's not an encrypted filesystem.
I don't care about the data, as such. More about various accounts logged in online
Nothing sensitive is stored on the laptop as such
I don't write down passwords ever
So that's not getting stolen
user457812
22:26
I just use a password manager.
^ +1
I used one, but I forgot its password.
OI Safe
Phone gets formatted at the drop of a hat
will look into that foamy
user457812
22:28
I use 1Password since it works on everything and doesn't have an associated online service.
user457812
I'm very distrustful of password managers that sync using their own service.
user457812
Instead, I prefer the kind that just encrypts the everloving hell out of their data.
1Password
Hey, wrong tab, I'm not supposed to be here at this very late hour ! Bye !
lmao ocus
get out
22:39
who here does fun things with facebook
user457812
Nobody.
Okay. I cleared the logs and the bash history and left
Didn't alter any files
Only cleared the access logs though
So it won't raise too much suspicion
user457812
Probably wasn't necessary considering their idea of security is to put a root password in a world-readable PHP file.
Well... They're not the brightest we have
The entire site is basically one moodle and 7 wordpress installations
23:36
Weird thing when device not detecting in the Android Studio. Even Installed the Samsung Kies, restarted my Sony laptop and device many times..
USB debugging is also enabled
does adb see it if you use the cmd prompt?
and has it ever worked before?
Yeah it was working well last night but today its not showing
Device is simply charging when I plug into my laptop
using the same cord and USB port?
I find some devices (looking at you samsung) don't like to let debug mode work unless you use their cord >,<
does adb see it?
23:43
No
I'm using the same cord which I got from the Samsung when I brought the phone
I'm reinstalling the driver might it solve my issue

« first day (1185 days earlier)      last day (3988 days later) »