Cary

Software Engineering student at UNSW

[CryptoInsane @CryptoInsane]

Microsoft GitHub account reportedly suffered a Cyberattack; Over 500 GB Data Stolen 😱☁️🖥️📡

[Cary @rollthestack]

Actually pretty impressed at how well they cc’d some official looking emails to make people mistakenly think they are the real amazon

[Matthew Robbins @matthewrdev]

The #covidsafe app is now available in Australia 😷

However, it's a shame that they have decided not to release the source code for full transparency.

Luckily, I'm a curious chap and also a professional mobile developer.

[Cary @rollthestack]

https://t.co/38lRBNKd09 Since they can install viruses without needing the target to open their mail, can this be extended to more malicoous software such as rootkits? How can something like this be prevented. Im thinking by preventing background downloading.

[Cary @rollthestack]

@Shell1nTheGhost My goodness, didnt realise they handled anti-cheat using root kits. Guess i’m not downloading the game. Weighing up a bit of fun against the risks makes it seem not worth it. Not good at fps games anyways :/

[Cary @rollthestack]

Im guessing 80% of the security course plays some sort of game, and 80% of those know of Riot Games’ new game Valorant. Time for you to flex your security skills and earn yourself $100,000!!https://t.co/sK4FLwQp5e

[Arnab Ray @greatbong]

My daughter made a password generator.

[Cary @rollthestack]

@ProfBuckland This could he us!!

[Cary @rollthestack]

To all my quarantined friends, be careful when signing up for products and check for any history of security leaks. The below image is not mine, came from Zoom memes for Quaranteens

[Cary @rollthestack]

https://t.co/kQ8V6kpcRV All the more reason to
1. Not have IOT/smart devices
2. Store credit card details on devices

[Cary @rollthestack]

Due to lockdowns, many large companies are giving out free online lessons and certification. Here are some security related ones!
https://t.co/GR96Nbj7KJ
https://t.co/6B0CAEZzAp
https://t.co/yuUEJk7Wqk

[Cary @rollthestack]

https://t.co/ZbIbZ3dcMI. Interesting that we discussed the trolley problem in a tutorial, wondering what a real business would choose to do.

[Cary @rollthestack]

https://t.co/F8zUKCFMvT While not security related, in my AI course I asked if AI can go against what its programmed to do in favour of a more logical action, and voila this article pops up a few weeks later.

[Cary @rollthestack]

@em_washer A student defeats a $1000 security system with 5c of equipment. Security expertd hate then. Click here to learn how

[Cary @rollthestack]

So in our iphone leak tutorial, someone pointed out that a leak is inevitable, all we can do is minimise the impact. Guess he was right!
https://t.co/EElypSkGaM

[Cary @rollthestack]

This is why security questions are bad!!

[Cary @rollthestack]

Story time:
Launched spotify for the first time in a year, and it turns out someone has managed to hack into my account and change the associated email so now i can’t even do a password reset

[Cary @rollthestack]

@SubjctToChnge Thats a very valid point, although i think the real reason in this instance is that the company was just reusing their components, the message looks like a prewritten message with the input box name as a variable

[Cary @rollthestack]

Would there be any security reason to disable profanity in security questions? Most of the time the answer isnt seen by human eyes since theyre hidden behind dots.

[Cary @rollthestack]

@Shell1nTheGhost Also, knowing they have a problem with leap years, get your attacker mindset ready for 2100, which looks like it should be a leap year because its divisible by 4, but is actually not because its divisible by 100.

[Cary @rollthestack]

@Shell1nTheGhost I guess this is why you implement the calender through a library rather than letting an intern code it himself