IgorBog61650384

5 ms·

1.
by IgorBog61650384 6y ago
Hi, author of the blog post. This is correct - keeping PII protected has always been their concern, but recent breaches in thier's and other industries (including some they heard of and were not publicized) made them even more concerne
2.
by IgorBog61650384 6y ago
Yep!
3.
Length's malware writers will go through to get PII(igor-blue.github.io)
3 points by IgorBog61650384 6y ago|2 comments
4.
Security of the Intel Graphics Stack – Part 2 – FW GuC(igor-blue.github.io)
2 points by IgorBog61650384 6y ago|0 comments
5.
by IgorBog61650384 6y ago
Thanks, fixed it
6.
by IgorBog61650384 6y ago
The SolarWinds incident was detect because of bad opsec by the operators who performed the FireEye op. I would image the capability was developed by an expert group in some intelligence agency, and then used as an entry point by a different
7.
by IgorBog61650384 6y ago
You're right, as long as the hardware switch is really hardware and not fake-hardware-implemented-in-software like many vendors.
8.
by IgorBog61650384 6y ago
I love the idea but is scaring me a bit security wise. This can be a really hidden persistence method for malware. Imagine the following scenario - memory only malware lands on my computers, identifies the keyboard, uploads a malicious firm
9.
by IgorBog61650384 6y ago
Nice article, thanks for the tips at the end! Personal perspective: I've been trying intermittent fasting for about four years, and found it helped a little in the beginning but then petered out. What happened was I did not eat until
10.
by IgorBog61650384 6y ago
Exploits are possible even without DMA. Windows had a slew of USB stack exploits, ranging from the serial and modem drivers to HID device and more. There have also been in the past (and probably still exist) exploits over serial lines, over
11.
Security of the Intel Graphics Stack – Part 1 – Introduction(igor-blue.github.io)
2 points by IgorBog61650384 6y ago|0 comments
12.
by IgorBog61650384 6y ago
I love hearing great news about the space industry, that the way to get us humans into outer space. Can any one a little more knowledgeable explain the difference between this 3d printed engine and RocketLab's one? Thanks!
13.
by IgorBog61650384 6y ago
I don't think this should surprise anyone. The FBI has multiple methods for accessing locked phones: using physical exploits like those provided by Cellbrite, or through baseband attacks - i.e. first attacking the cellular modem and f
14.
by IgorBog61650384 6y ago
Love the post, good luck! Re “Productivity equiation” from Ali Abdaal: Productivity = Useful output / time x f (where f is the ‘fun factor’), but treating f as constant is wrong - even fun projects can get tiresome . A good measure m
15.
by IgorBog61650384 6y ago
The only reason this was detected was very overt behavior - opening AD popups. So I guesstimate for each one of these we have 10 that go undetected. This means the whole ecosystem is broken, as there is no reason this will happen only for
16.
by IgorBog61650384 6y ago
How do you decide when it is safe to update?
17.
by IgorBog61650384 6y ago
Russia has a long history of GPS jamming for security reasons. A friend serving in the russian forces in Syria says that GPS accuracy in the country varies dramatically with Russian military activity in the region. About two years ago there
18.
by IgorBog61650384 6y ago
I get that breaking packages is a bad user experience, but the Linux community at large should start paying more notice to security-first software engineering. Learn a little bit from Microsoft's experience - they made 100% backward co
19.
by IgorBog61650384 6y ago
People need to understand that stopping Covid will take much more then a year, and can easily extend for 2-3 years. 24% of the USA population is under 18 (from google). The article states that at least 75% of the population must be vaccinat
20.
by IgorBog61650384 6y ago
Really nice and clear. One addition: the final example uses ProxyCommand, I find ProxyJump much more useful: you can specify multiple hops clearly and even specify different private keys for each hop.
21.
by IgorBog61650384 6y ago
I think this approach might backfire: If purpose of the question is to test the candidate's knowledge of common libraries, then it probably is way to easy to be indicative, this kind of knowledge should be tested for something the can
22.
by IgorBog61650384 6y ago
Two books I that were instrumental for me to learn how to explain the architecture of my software clearly to other people were "The Architecture of Open Source Applications" Volumes I and II ( http://aosabook.org/en