• Activity
  • Votes
  • Comments
  • New
  • All activity
  • Showing only topics with the tag "security.cyber". Back to normal view
    1. Help me ditch Chrome's password manager!

      I've been trying to reduce my reliance on all things Google, and one of the big ones is password management. I've tried several times to make the jump, but every time I start researching options...

      I've been trying to reduce my reliance on all things Google, and one of the big ones is password management. I've tried several times to make the jump, but every time I start researching options I'm overwhelmed by the selection. There are a lot of popular options out there, and I really don't have the time/energy to endure a misstep. So without a clear idea of which manager will check all of my boxes, I end up bailing on the process and keep using chrome's built in option.

      So to start, here's what I like about Chrome:

      • Automatically offers to store passwords without extra clicks
      • Autofills automatically where it can, and gives me an easy choice when it can't
      • Works everywhere I need passwords. (basically everywhere I browse the internet since chrome works everywhere)
      • Minimal overhead. This is hard to beat since Chrome just includes it, so I'm fine with a little extra setup if necessary.

      I used to use keepass portable on a thumb drive (I want to say circa ~2009ish), but it became really inconvenient as my usage shifted more to mobile devices.

      I see this as a first step to also reducing my reliance on Chrome so I can start to consider other browsers. Right now I feel locked in to Google's ecosystem, but I know I can break it up if I don't get too bogged down by choice. Much appreciate any help. :)

      34 votes
    2. Immersive Labs "Haunted Halloween" Challenges 2023

      Hey everyone! Just wanted to share that Immersive Labs has rolled out their "Haunted Halloween" challenges for 2023. For those unfamiliar, Immersive Labs offers a platform for interactive,...

      Hey everyone! Just wanted to share that Immersive Labs has rolled out their "Haunted Halloween" challenges for 2023. For those unfamiliar, Immersive Labs offers a platform for interactive, gamified learning in the realm of cybersecurity. They've been known to host challenges that test and enhance cyber skills.

      You can sign up for free using code HAUNTEDHOLLOW to try it out hubs.ly/Q026LTZV0.

      Now, I'm not posting this solely out of altruism. I could use some help on the 'Mirrored Mayhem' task.

      Spoiler Alert: Details about the challenge below I've managed to get the RCE. I've crafted a PNG and successfully executed remote code. However, I'm only able to find the 'webapp-token'. I'm at a loss when it comes to the 'user-token' or 'root-token'. The 'whats in the mirror?' file isn't giving me any leads either. I've also got a username/password from it but can't figure out where to use them.

      Would appreciate any pointers or hints from anyone who's tackled this challenge. Thanks in advance!

      4 votes
    3. NewsBlur Mongo database deleted in ransom attack (and restored)

      NewsBlur was down yesterday evening due to its Mongo database getting attacked by a hacker and held for ransom. It’s restored from backup, but there are privacy implications for anyone who had...

      NewsBlur was down yesterday evening due to its Mongo database getting attacked by a hacker and held for ransom. It’s restored from backup, but there are privacy implications for anyone who had sensitive private data there. We will likely find out more after the maintainer recovers from a busy night.

      There are no good links for this, but it’s being discussed on Hacker News. Since it’s open source, someone described what’s being kept in that database.

      (I use NewsBlur, but I don’t think my RSS reading habits are all that sensitive. Others might be in a different situation, though.)

      6 votes
    4. New South Wales government was the target of major cyber attack operation linked to China

      Article: New South Wales government was the target of major cyber attack operation linked to China Also: 'Cyber attacks' point to China's spy agency, Ministry of State Security, as Huawei payback,...

      Article: New South Wales government was the target of major cyber attack operation linked to China

      Also: 'Cyber attacks' point to China's spy agency, Ministry of State Security, as Huawei payback, say former Australian officials


      This is a follow-up to these articles posted yesterday:

      8 votes