By reading from the actual memory address, yes. Defeating kASLR with side channels is meh. Reading from actual addresses is a different matter entirely.
Seeing this at 11 is honestly what made me interested in computers and pushed me towards my current career, so seeing that it is 20 years old is sort of a shock.
I can also certainly can relate to the portion of the audience that found phreaking much more interesting than hacking and the fact that the phreaking scene is all but dead is pretty sad.
I tend to agree with most points. I always credit my undergraduate CS education with teaching me about how to think about a variety of computational problems using a variety of languages as lenses. I actually think that is why I've been able to succeed in a number of different development roles (Web Developer, Mobile Developer, Reverse Engineer). If I had had multiple semesters of learning only language/framework-X features, I think I would have been worse off for it.
That being said, it did take me a while to appreciate that this was what my education gave me and obviously, no approach works for everyone.
For now. Reading into it, it seems like they found one of the useful UAFs that facilitates a memory write instead of your less useful CALL virt_func. Flash is just a means to create an infoleak by over-wrting the vector length, it is likely that you could do the same without any dependencies by just targeting IE itself.
This is actually one of the reasons I do what is now called "Intermittent Fasting". I found in my teens that I was much, much more focused and alert on an empty stomach. I've always assumed it had to do my insulin response to meals as low-carb diets had a similar effect but not eating during the day was just easier.
Agreed, don't run AV at all. It is always fun to take something from metasploit, see that is detected by most AVs - change one or two strings that are obvious choices for signatures and watch detection rates drop to close to 0. Even behavioral or heuristic detection is absurd sometimes (IE is writing into the process memory of notepad? Probably fine). It is a really tough problem to solve, to be fair to AV vendors.
I would be interested to see what the blood levels of EPA/DHA were in the patients studied, the article isn't really helpful in that respect and it may be important.
Burnout in tech circles is like Depression in the population in general. 90% of people who say they have it really don't and the people who say it doesn't exist have no idea what in the world they are talking about. But for those who have it, it is un-mistakenly terrible.
I put in 80+ hour work weeks for 4 years straight at my last job and it got to a point where I was physically breaking down and developed a slew of transient (but terrifying) neurological problems. It got so bad I actually saw a neurologist who basically said that I was seeing the manifestation of extreme stress and had to stop (He actually pushed me to find a new job, interestingly.)
To your point, it never dawned on me that I was working too much. I had various problems that needed solutions and I was much too engulfed in the pursuit of their solution to really see what was happening until it became impossible to ignore. I'd venture to say most people with burnout are not driven there by someone or something but by themselves.
2 is particularly relevant and more than solid grasp of CS is required depending on what you choose to do within the field. Malware Analysis for example can require understanding data structures, calling conventions, x86, compiler internals, etc.
Security is actually one of the few fields where I think you see a really interesting mix of theoretical and applied CS. Things like complexity theory, formal program analysis, etc pop up quite often.
Frankly, this is a bigger problem that isn't nationally recognized. The mayor is under federal investigation for his campaign and I've lost count of how many officials have been arrested or investigated at the federal level.
Living near the district, I'm shocked daily by how nobody seems to care that the corruption is so widespread.
I couldn't agree with you more. I actually said this at my last job interview when asked why I was leaving. I've learned more in the last 6 months being surrounded by much smarter people than the 6 years of being "the smart one".
I won't lie though, the ego-hit of being "the dumb one" when surrounded by truly brilliant people is hard - 100% worth it - but hard.
So we're back to this. First the "Snowden had a Hacker Certification" nonsense (ignoring that CEHs are required by DoD for OPS jobs and aren't exactly high-quality to begin with) and now deleting log files equaling "hacking". I guess it is easier to make him seem like some super skilled hacker than admit that oversight and access controls were probably non existent.
Selfishly, I really don't even care about Snowden at this point but I do fear that the trend developing is to paint him as a "Hacker" putting security researchers as the next major "threat".
Not a Snowden fan in the least but ignoring the fact that CEH certification is "highly valued" for quite a few DoD jobs (http://www.eccouncil.org/Support/dod-8570), this reeks of attempting to write off terrible access controls and oversight on whatever network he had access to by pinning it on those terrible "hackers".
I am sure these hackers are going to need to be dealt with using new invasive legislation, right? So frustrating.
Exploits or vulnerabilities? If they are handing out fully built exploits, I have a problem with it. If they are just vulns then yeah, it is probably MAPP which isn't news really.
I've been reading far too much about the downsides lately when trying to decide if I want to do it, so this was a fun diversion. I'm 28, fresh out of a CS MS program, work full time at a job doing computer security 'research' and really still feel like I don't know as much I as I want too.
Interesting, the question about family/friends is what peaked my interest. My girlfriend of 10 years is about ready to kill me if I commit 4-6 more years.
This hits home as I just finished a very well known part-time course-work only (with a pseudo-thesis option) program.
I actually have a little different opinion - what's killing the value of an MS in CS is the fact that CS curriculum is becoming Software Engineering under a different name. Let me be clear - there is NOTHING wrong with Software Engineering but as someone who is more interested in NP completeness, computability, static analysis, machine learning, etc - much of what passes for CS cirriculum in course-work only programs simply isn't.
I wish more universities taught courses along the lines of real 'hacking', or at least close to it. I just finished a course about Malware and Vulnerability Analysis/Reverse Engineering as part of my MS and it was fascinating. What is also interesting is that you actually have a fair bit of traditional computer science topics mixed in (SAT solving, algorithm analysis, compiler design, etc) but in a way that is so much more interesting than they are formally taught.
I'm not opposed to this at all but I question how exactly enforcement would/can work. We don't know with 100% accuracy who was responsible for Stuxnet, Flame, Operation Aurora, etc and especially with code, it is going to be exceedingly difficult in most cases to get evidence such that blame can be leveled with any certainty.