Cybersecurity

8025 readers

62 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social

185

Hackers Went Looking for a Backdoor in High-Security Safes—and Now Can Open Them in Seconds (www.wired.com)

submitted 2 days ago* (last edited 2 days ago) by floofloof@lemmy.ca to c/cybersecurity@sh.itjust.works

27 comments fedilink hide all child comments

https://archive.is/1NWAe

Omo and Rowley say they informed Securam about both their safe-opening techniques in spring of last year, but have until now kept their existence secret because of legal threats from the company. “We will refer this matter to our counsel for trade libel if you choose the route of public announcement or disclosure,” a Securam representative wrote to the two researchers ahead of last year's Defcon, where they first planned to present their research.

Only after obtaining pro bono legal representation from the Electronic Frontier Foundation's Coders’ Rights Project did the pair decide to follow through with their plan to speak about Securam's vulnerabilities at Defcon.

you are viewing a single comment's thread
view the rest of the comments

[–] ThatGuyNamedZeus@feddit.org 8 points 2 days ago (2 children)

An insider threat was basically the only kind possible, but the only “hacked” output would just be a failed “off” state, which wouls be replaced.

Exactly, the computers that used to control our nukes were so old and so simple that they literally can't do anything but what they were designed to do, they require physically inserting old floppy disks and manually entering codes to access, no network access, no ability to multitask, so malware can't run in parallel with the other process...singular for the word "process" because those old computers can't multitask

now they're using modern computers that just recently got hacked with a sharepoint vulnerability...by the way, a whitelisting application that indiscriminately blocks everything that hasn't already been allowed to run would've blocked the processes of that exploit and prevented anything from happening...I actually use something like that on my windows PCs

All those prehistoric old farts in our government thought that would be an "upgrade" and then they probably just used norton to secure it because they're too stupid to research anything that might be better

[–] fibojoly@sh.itjust.works 5 points 2 days ago (1 children)

If you think software devs are any better... The more complex our systems become, the more it becomes someone else's problem. The shit I hear coming out of some of my younger colleagues is just embarrassing sometimes. And they just don't care. They couldn't be arsed doing a quick search for a solution, trying to understand things from the other side's perspective, nothing.
And then they wonder if AI gonna replace them? If you ain't using your brain, what are you there for?

[–] ThatGuyNamedZeus@feddit.org 2 points 1 day ago

I'll give you that, but I blame the public schools for conditioning kids into not using their brains

[–] floofloof@lemmy.ca 4 points 2 days ago

All those prehistoric old farts in our government thought that would be an “upgrade”

Even younger politicians can't be expected to have a clue about this kind of security. And younger tech people might not remember how it used to be done. You need some prehistoric tech farts to tell the prehistoric political farts what's what.