5 ms·

I've never heard of this guy at all. Does he have any credibility at all?

by dgrin91 3y ago

amelius 3y ago
It's some guy who has his head in the clouds.
christkv 3y ago
[flagged]
- danielbln 3y ago
  Not that I follow the original reasoning, but the slippery slope of Eugenics starts _way_ before we end up at "breeding houses", no?
- raesene9 3y ago
  Got any links there? My googling didn't turn up anything like that (albeit I didn't get too many pages in).
- nobody9999 3y ago
  >I searched him seems on a personal quest to get Musk. Tons of articles all going after Musk. Seems like another partisan hack. Out of morbid curiosity, where did you find those "[t]ons of articles all going after Musk"? Perhaps my DDG-fu is inferior, but searches for both "Dick Morrell" and "Cloudguy" showed a bunch of IT/infosec blogs/articles and articles flogging his technology bona fides. What am I missing here?
raesene9 3y ago
Looks like it's this person https://diveintotheclouds.wordpress.com/about/ https://diveintotheclouds.wordpress.com/about/ If so, founder of smoothwall, history in the UK security scene. Not to say that means that what's happening here is as serious as what's being alluded to, but has some background in the area.
boynamedsue 3y ago
The person who touts himself as a security expert should have SSL implemented on his personal website? http://dickmorrell.com http://dickmorrell.com
- rideontime 3y ago
  Why?
  - nathanaldensr 3y ago
    How many times must this question be answered? TLS is a requirement because otherwise nodes between your device and the server can easily modify the HTTP requests and responses to inject malicious code. Your traffic is also trivially tracked.
  - zamnos 3y ago
    Because it's a security liability not to have it enabled, so if he's going to complain about others security problems, the least he could do is put his metaphorical pants on first. He could be forgiven for not having it locked down to an few specialist cyphers he personally believes are resilient to attack, but to not even have it enabled is on the level of not putting your pants on before leaving the house.
    - ukuina 3y ago
      I have not understood the need to force SSL on content that needs no verification.
      - 1letterunixname 3y ago
        Yes and no. It's more like flossing than wearing a seatbelt. The html tags won't fall out if you use http:// http:// over port 80. It's not nice to end users in that it permits eavesdropping and content modification of website traffic in the clear by anyone in the network path. The assumption of http:// http:// is that "pamphlets for the public" don't require privacy, confidentiality, and nonrepudiation for other users such as downloading software sources &| binaries or exchanging secret PII. The post-Snowden/-PRISM world opted to deploy https:// https:// ubiquitously as both a virtue signal and technical defense to various problems inherent to using port 80.

I've never heard of this guy at all. Does he have any credibility at all?

amelius 3y ago

It's some guy who has his head in the clouds.

christkv 3y ago

[flagged]

danielbln 3y ago
Not that I follow the original reasoning, but the slippery slope of Eugenics starts _way_ before we end up at "breeding houses", no?
raesene9 3y ago
Got any links there? My googling didn't turn up anything like that (albeit I didn't get too many pages in).
nobody9999 3y ago
>I searched him seems on a personal quest to get Musk. Tons of articles all going after Musk. Seems like another partisan hack. Out of morbid curiosity, where did you find those "[t]ons of articles all going after Musk"? Perhaps my DDG-fu is inferior, but searches for both "Dick Morrell" and "Cloudguy" showed a bunch of IT/infosec blogs/articles and articles flogging his technology bona fides. What am I missing here?

raesene9 3y ago

Looks like it's this person https://diveintotheclouds.wordpress.com/about/ https://diveintotheclouds.wordpress.com/about/ If so, founder of smoothwall, history in the UK security scene. Not to say that means that what's happening here is as serious as what's being alluded to, but has some background in the area.

boynamedsue 3y ago

The person who touts himself as a security expert should have SSL implemented on his personal website? http://dickmorrell.com http://dickmorrell.com

rideontime 3y ago
Why?
- nathanaldensr 3y ago
  How many times must this question be answered? TLS is a requirement because otherwise nodes between your device and the server can easily modify the HTTP requests and responses to inject malicious code. Your traffic is also trivially tracked.
- zamnos 3y ago
  Because it's a security liability not to have it enabled, so if he's going to complain about others security problems, the least he could do is put his metaphorical pants on first. He could be forgiven for not having it locked down to an few specialist cyphers he personally believes are resilient to attack, but to not even have it enabled is on the level of not putting your pants on before leaving the house.
  - ukuina 3y ago
    I have not understood the need to force SSL on content that needs no verification.
    - 1letterunixname 3y ago
      Yes and no. It's more like flossing than wearing a seatbelt. The html tags won't fall out if you use http:// http:// over port 80. It's not nice to end users in that it permits eavesdropping and content modification of website traffic in the clear by anyone in the network path. The assumption of http:// http:// is that "pamphlets for the public" don't require privacy, confidentiality, and nonrepudiation for other users such as downloading software sources &| binaries or exchanging secret PII. The post-Snowden/-PRISM world opted to deploy https:// https:// ubiquitously as both a virtue signal and technical defense to various problems inherent to using port 80.