Damus

Recent Notes

Bill · 1w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqlvv7n293zx576n3ay7xt47s7fu32l6np5wtp8a9d8jxk42hw4c4qftmex9 How about the UK Government passing a law requiring parents to parent?
VessOnSecurity profile picture
I am working on an SMB honeypot (because I don't like Dionaea). It kinda works but unlike Dionaea (which catches about a dozen WannaCry samples every day) it doesn't seem to catch any malware samples.

What is the simplest way of testing that it works correctly? I've scanned it with nmap, and the latter says that the simulated system is vulnerable to ms17-010. I guess I could use Metasploit, exploit it, and upload some file, but that strikes me as a big of overkill. Is there a simpler approach?
stf · 2w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqlvv7n293zx576n3ay7xt47s7fu32l6np5wtp8a9d8jxk42hw4c4qftmex9 i don't want to spoil too much, but John Scalzi's Starter Villain is very very relevant and one of the most funny books i read in years....
note1zdfak...
VessOnSecurity profile picture
@nprofile1q... The second sentence is misrepresenting the real threat.

The problem isn't that SpaceX could get billions of dollars from passive investors. The problem is that if it joins the index, due to the company's huge valuation, the index would have to be re-ballanced, meaning the percentage participation of other companies - reduced. Which would have meant huge amounts of selling of the stocks of those companies by passive funds that track the index. Which, on its turn would have screwed up the investors in these companies.

And, sadly, while SpaceX won't become part of S&P-500 or DJI soon, it can still become part of Nasdaq-100, Russel-2000, etc., which will have a similar effect. So, only one part of the problem was averted.