|
Zerologon lets anyone with a network toehold obtain domain-controller password. Beware of hackers already in your system
|
|
|
|
|
Kent Sharkey wrote: Beware of hackers already in your system
Quote: Exploits require that an attacker already have a foothold inside a targeted network, either as an unprivileged insider or through the compromise of a connected device.
A bit of social engineering, a bit of blackmailing, a bit of greed of a unhappy / upset employee...
Actually not that difficult to get the first step.
Quote: “It basically allows any attacker on the local network (such as a malicious insider or someone who simply plugged in a device to an on-premise network port) to completely compromise the Windows domain. The attack is completely unauthenticated: the attacker does not need any user credentials.”
And again... Everytime you think it could not be worst... Microsoft does a great job showing us how far from right we are...  
Quote: they aren’t releasing it until they’re confident Microsoft’s patch has been widely installed on vulnerable servers.
Then... probably never, because there are a lot of lazy admins or admins buried in corporated crap that can't really do things without getting approval from 3 comitees, 4 CEx and a disclaimer selling them half soul
Quote: The researchers, however, warned that it’s not hard to use Microsoft’s patch to work backwards and develop an exploit.
So... if that was not noticed yet... it is going to be really nasty soon enough
Quote: Meanwhile, separate researchers from other security firms have published their own proofs-of-concept attack code here, here, and here.
Perfect... Hackers not even need to work, these "researchers" are doing the difficult part for them, they just have to cook popcorn and wait.
Quote: The release and description of exploit code quickly caught the attention of the US Cybersecurity and Infrastructure Security Agency, which works to improve cybersecurity across all levels of government.
And I suppose that the other acronim agencies have not been "heads up" by it, because they are so nice and would never misuse such a nasty bug.
As Phill Collins said:
Quote: Oh, think twice, 'cause it's another day for you and me in paradise
M.D.V. 
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
Java 15 offers users fourteen main enhancements/changes, including one incubator module, three preview features, two deprecated features, and two removals. For those who want a fresh cup of joe
Sorry, but I basically stopped following Java around 2003. This is good though, yeah?
I know it's basically a press release, but yeesh. That article is corporatese.
|
|
|
|
|
The list of native executables in Windows that can download or run malicious code keeps growing as another one has been reported recently. So be careful when giving others the finger
|
|
|
|
|
Kent Sharkey wrote: Windows that can download or run malicious code keeps growing as another one has been reported recently.
I thought that keeping windows 7 was going to be more insecure, but you (or better said Microsoft) continue trying to confirm just the opposite
M.D.V.
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
On a second thought...
Kent Sharkey wrote: So be careful when giving others the finger
Do you mean your finger?[^] of
my finger?[^]
M.D.V.
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
We’re excited to release this new tool called Project OneFuzz, an extensible fuzz testing framework for Azure. Fuzzy Wuzzy wuz a fuzzer. Fuzzy Wuzzy found the bugs.
I was going to go with Kipling, but I figured it might not go over well.
|
|
|
|
|
Microsoft is pushing new Microsoft Edge to Windows 10 devices running versions 2004, 1909, 1903, and 1809 with update KB4576754. The update will be automatically installed on systems that were running Classic Edge. "It's part of the operating system" worked last time
|
|
|
|
|
I don't see anything justifying outrage over this. If you don't want to use it, don't use it.
As long as it functions well enough to download Chrome or Firefox, it's OK.
The difficult we do right away...
...the impossible takes slightly longer.
|
|
|
|
|
Today, Firefox updated itself without giving me the option to keep the old version. I was shocked!
|
|
|
|
|
Research from digital transformation firm BoxBoat suggests that around one in four people spent time learning coding languages during the lockdown. It's a pandemic of programmers!
|
|
|
|
|
"Learnt the basics"
As someone who doing development for over 20 years, I don't feel threatened. A few months of tutorials doesn't impress me a bit, nor a byte.
Even better; the code they write is storing passwords in plain text. I will ask a ransom to fix it.
Bastard Programmer from Hell 
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
One in four?! Maybe a ton of folks took "Learn to code!" to heart.
But I call sheer and utter bollocks. Who did they survey, entry-level programmers?
|
|
|
|
|
A historic flood in QA...
I think 'learnt' is a bit large, if you really mean the 25%...
"The only place where Success comes before Work is in the dictionary." Vidal Sassoon, 1928 - 2012
|
|
|
|
|
The Visual C++ team is happy to announce that C11 and C17 are becoming supported language versions in the MSVC compiler toolset starting with version 16.8 Preview 3! Maybe the standard team should have said they were required icons instead?
|
|
|
|
|
But are they supporting all of the C Standard Library?
Standard headers such as <thread.h> and <atomic.h> are essential for high-performance programs these days.
Freedom is the freedom to say that two plus two make four. If that is granted, all else follows.
-- 6079 Smith W.
|
|
|
|
|
 Atomic and threading support are on our roadmap.
TTFN - Kent
|
|
|
|
|
|
Here’s a counter-intuitive fact: Chances are all those features you’ve been adding to your design are hurting your user experience. Best not to put in any features to be safe
|
|
|
|
|
Yes, we hear it all the time: Photoshop is too powerful! But we never hear any complaints about their subscription model. /s
|
|
|
|
|
While there is some truth in what the author wrote, he forgets that what 10 features I need are not the same 10 features the person next to me needs.
|
|
|
|
|
Confusing experience with UI design; and clearly did not read the Ux guidelines.
It’s not only the external user experience that suffers from the rot incurred by the slow addition of features.A bullshit story if I ever read one. As if progress induces rot. If the latter is your story, then stop the VB6 development, or rot away as you deserve.
Bastard Programmer from Hell 
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
The National Cyber Security Centre (NCSC) in the U.K. has released a guideline to help companies implement a vulnerability disclosure process or improve it if one is already set up. Finger-pointing available separately
|
|
|
|
|
DeepMind's researchers are letting AlphaZero play with different rules to find out how to improve the game. Replace all the pawns with horsies!
I don't care what the rules call them, they're horsies!
|
|
|
|
|
Not being consequent and changing the rules too often...
I hope they don't fail and the machine ends learning that rules don't matter.
M.D.V. 
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
