-
Random Movie/TV Thoughts and Reviews (January 2021)
[A summary of my movie and TV reviews from last month, posted to Attrition.org, mixed in with other reviews.] Soul (2020)Medium: Movie (Disney)Rating: 5/5 movie and music magicReference(s): IMDB Listing || DisneyDisney knows how to do modern cartoons and this is no exception. The story follows Joe, a school band teacher who seems to have…
-
The Misery (Index) Data
The Misery Index is a game on TBS hosted by Jameela Jamil, starring The Tenderloins, better known as the Impractical Jokers (Joe Gatto, Brian Quinn, James Murray, Sal Vulcano). You can read more about the format and style of the game on its Wikipedia page. They bring humor to the game to augment the humor…
-
A critique of the summary of “Latent Feature Vulnerability Rankings of CVSS Vectors”
Update: Corren McCoy has written a wonderful response to this blog where she goes into more detail about her conclusions as well as citing more portions of the original research that led to her conclusions. As she notes, there are several layers of condensing the original research at play here, which can dilute and distort…
-
Search Speak for Automaton
Alternate titles for this blog could be “Doodle Transition for Machina” perhaps! For at least a decade I have thought about just such an application and today I have Google Translate for Android. Load, aim, and it will process the text and translate on screen for you. Given the state of technology you would think…
-
Commentary on Radware’s Top Web Exploits of 2020
At the close of each year we see at least one article covering the top vulnerabilities / exploits from the prior year. This is usually written on the back of having large detection networks across the Internet that get a comprehensive view of exploitation. It’s a great way to get real intelligence for criminal hacking…
-
Random Movie/TV Thoughts and Reviews (December 2020)
[A summary of my movie and TV reviews from last month, posted to Attrition.org, mixed in with other reviews.] The Queen’s Gambit (2020)Rating: 5/5 check it out mateReference(s): IMDB Listing || NetflixThis miniseries, based on a 1983 book with the same name, is a fictional story about a chess prodigy turned master. It has the…
-
Five Dollar Security; You Get What You Pay For
The old phrase “If it looks too good to be true, it probably is” is very common, and usually well founded. After seeing an offer for a $5 “security status” of a website, we just had to test it out. Since the service is being offered by a Certified Ethical Hacker (C|EH) with 13 years…
-
Dystopia Arrives
The dystopia genre has enjoyed a lot of attention the last decade with hits like The Hunger Games, Blade Runner 2049, and Automata as a few examples. To me, a dystopian film is set in the near future with a focus on society more than technology. In my late teens and early 20s I loved…
-
Box of Shit: The Kat Variance
For those who know about the sordid history of the Box of Shit, you know where the name comes from. While some may have thoughtful touches and some personalized items, they are generally fun junk. Behold, the Kat variance! After sending a true box of shit to her, a couple months pass and I get…
-
Sitting on Undisclosed Vulnerabilities (e.g. SolarWinds Stragglers)
The company SolarWinds is in the news, victims of an attack that compromised their Orion Platform software by inserting a backdoor into it, allowing for remote code execution. Like most big breaches, we hear the term “sophisticated” used for the attack. And like many breaches, we quickly learn that it might not have been so…