image thumb 34 1

Hacking and Security

If you own a D-Link router, stomp it, burn it, and never buy D-Link again

by geekslopSeptember 30, 20160 comment

Maybe other router manufacturers are as magnificently dumb as D-Link but regardless, get rid of all D-Link routers and vow to never buy another D-Link product for a long as your lungs suck in air. The security vulnerabilities present in their devices, especially the DWR-932B router, are so far beyond stupid, well, you’d swear the Chinese company purposely allowed them as a joke on Americans…

image thumb 33 1

Hacking and Security

Well, that didn’t last long – DDoS record broken again with 990Gbps flood

by geekslopSeptember 28, 20160 comment

Just a week after Brian Krebs was hit with a 620Gbps IoT attack, reports are hitting the wires that OVH has been hit with an even larger attack – two simultaneous barrages of 799Gbps and 191Gbps for a whopping 990Gbps total. And this may only be the beginning...

image thumb 31 1

Hacking and Security

Akamai’s decision to drop Krebs’ DDoS protection wasn’t an infrastructure thing – yeah, right

by geekslopSeptember 26, 20160 comment

I wasn’t too happy to hear that Akamai dropped security researcher/writer Brian Krebs last week after Kreb’s website sustained the largest-ever DDoS attack. In short, they basically offered Krebs protection from DDoS attacks until, well, they said they couldn’t. Then they dropped him leaving Krebs to fend for himself.

image thumb 29 1

Hacking and Security

Security researcher Brian Krebs’ website hit with largest ever DDoS attack – 665 Gbps!

by geekslopSeptember 21, 20160 comment

Security researcher Brian Krebs of KrebsOnSecurity reported today that his site was hit with a walloping 665 Gbps DDoS attack. The attack included SYN and HTTP floods and peaked at 153 Mpps (million packets per second). Krebs' site remained online, the attack mitigated by Akami's DDoS protection service.

image thumb 28 1

Hacking and Security

How to tell if you’re on a government watchlist (and how to get on and off the wild ride)

by geekslopSeptember 21, 20160 comment

People often wonder if their names have somehow made it to the “the list”, that watchlist of US citizens whom the government suspects may be up to something. I would venture to say, the best way to know if you’re on the watchlist would be to recognize how often you find yourself forced into unique situations that fall far beyond the norm.

image thumb 14 1

Hacking and Security

A day in the life of a Bug Bounty hunter – demo of productive hacking session against Yelp

by geekslopSeptember 9, 20160 comment

Offering bounties worth thousands, even millions of dollars, bug bounties pay hackers to report vulnerabilities. The process is pretty simple. The hacker sends the vulnerability report to the company, the company patches the vulnerably, the bounty paid, and finally, the vulnerability disclosed. Everyone wins. Usually.

image thumb 10 1

Hacking and Security

Who’s really behind the DNC/NSA hacks? Russia, Snowden, independent hacker, or hybrid of all three?

by geekslopAugust 17, 20160 comment

Regardless of whether you consider Edward Snowden’s leaks of classified information to be self-sacrificial acts of patriotism or the deeds of a traitor, the recent DNC data dump and NSA cyber weapons malware (milware?) code drops have all the markings of a Snowden escapade. If you disagree, consider the timing of the code drop and who has the most to gain.

image thumb 4 1

Hacking and Security

Windows Subsystem for Linux (WSL) – how to create a Linux hacking toolkit that runs on Windows 10

by geekslopAugust 6, 20160 comment

Forget running Kali in a virtual machine (well, at least put it aside for a while). The Windows 10 Anniversary Update includes a whack new feature - Windows Subsystem for Linux or WSL. Using the new LxssManager service, WSL lets you run a full-featured Ubuntu Linux subsystem on Windows 10.

image thumb 2

Hacking and Security

Poodlecorp DDoS attack brings down Blizzard’s battle.net servers

by geekslopAugust 2, 20160 comment

I tweeted a few hours ago about a DDoS attack hammering Blizzard's game servers. Around 7:00 PM Central Time, players in the game began noticing severe lagging. Within 30 minutes, the Battle.net servers were completely offline and unavailable for game play.

image thumb161

Hacking and Security

The United States is outsourcing its Cyberspace (Cyber Command) Operations – really?

by geekslopNovember 16, 20150 comment

It’s a draft title Task Order Request for Cyberspace Operations Support Services in support of United States Cyber Command (USCYBERCOM). Oh, brother. That means the U.S. has bungled their cybersecurity so badly they’re now willing to outsource, and trust, this critical national security task to an outside contractor. Even a partner outside of the U.S. if they’re trusted status.

image thumb91

Hacking and Security

Probe finds that contractors working on military code outsourced some tasks to Russian coders

by geekslopNovember 6, 20150 comment

After conclusion of a four-year probe, contractors who worked on U.S. military code are being fined a combined $12.75 million. As it turns out, some contractors outsourced coding tasks to Russian. No words can convey the level of stupidity here (hey, let's get Al-Qaeda to build US airplanes!).

image thumb141

Hacking and Security

Interesting geographic attack vector from a Russian launched cyber counter-attack

by geekslopJuly 14, 20150 comment

I love the Russians. I know, strange to hear that from an American in modern day with a new “cold war” (seemingly) beginning to gain steam. Let’s say, I respect them. Their hackers in particular. Their response to a cyberattack is to launch a full-on offensive attack against the attacker, quite a different response from the Chinese who tend to just block attackers, or the Americans, who never even notice an attack is taking place.

Hacking and Security

Ouch – US-CERT advisory for this week deals a sharp slap in the face to Adobe

by geekslopJuly 13, 20150 comment

On the heels of the Hacking Team dump, this week’s US-CERT advisory, a cyber-security bulletin which provides a summary of new security vulnerabilities, was about twice its usual size with all the Adobe Level 10 alerts included in the report. Remind me – why are these products still around?

image thumb91

Hacking and Security

Are Wild Neutron’s latest attacks related to the zero-day exploit(s) in Hacking Team’s drop?

by geekslopJuly 10, 20150 comment

Both Kaspersky and Symantec released reports this week pointing out the increase in attacks by Wild Neutron (aka Jripbot, Morpho, or Butterfly). WN had gone mostly dormant (or undetected?) since 2013 after hitting Apple, Facebook, Twitter, and Microsoft using zero-day Java exploits (seeded in the hacked forums of various websites) and the OSX/Pintsized Mac OS X or Windows Jiripbot backdoor.

image thumb6

Hacking and Security

14 days running a secret Dark Web pedophile honeypot (and why I now think Tor is the devil)

by geekslopJuly 7, 201515 Comments

Before discoursing the lengthy analysis of the Dark Web honeypot (the pedophile honeypot in particular), let’s answer the question that is surely on everyone’s mind – did the honeypot allow me to reveal the true identity of the person visiting the site?

image thumb631

Hacking and Security

Imagine if we couldn’t report the news. Better yet, imagine you are Barrett Brown.

by geekslopJanuary 23, 20150 comment

Imagine a cybercrime has occurred. 200 gigabytes of data have been stolen and posted on a remote site. The remote site is public, easily accessible to all. An experienced journalist (Barrett Brown) reports the location of the stolen data.

1
2
3
…
12

In the know

Sign up for our newsletter

GEEK SHOP

Geek slop

For geeks and other superheroe types

Contact info

Company

Useful

Warrant Canary/Transparency Report

Transparency Report

Last updated: May 25, 2020

Requests for access to user data: As of May 25, 2020, Geek Slop has received:

0 requests to access user data

0 requests have been granted

0 requests were denied

0 requests have been legally binding

0 requests to insert backdoors or malicious code into our software or hardware

Transparency Report updates will be published here. Geek Slop intends to update the Transparency Report approximately once every three (3) months. Publishing in GitHub is intended to preserve a record of past reports and modifications for public viewing.

© Geek Slop