LinuxBender

1061 ms·

1. 17131.▲
   Hackers peddle thousands of air miles on the Dark Web for pocket money(zdnet.com)

   1 points by LinuxBender 8y ago|0 comments
2. 17132.▲
   Credential stuffing attacks cause heartache for the financial sector(zdnet.com)

   1 points by LinuxBender 8y ago|0 comments
3. 17133.▲
   MongoDB server leaks 11M user records from e-marketing service(zdnet.com)

   8 points by LinuxBender 8y ago|2 comments
4. 17134.▲
   by LinuxBender 8y ago

   The first thing I do on any server is mask firewalld and enable the legacy iptables service. Servers do not need firewalld and many other laptop features implemented under systemd.
5. 17135.▲
   by LinuxBender 8y ago

   Apparently there were no Federation regulations against this. [1] [1] - https://scifi.stackexchange.com/questions/141670/what-are-th...
6. 17136.▲
   by LinuxBender 8y ago

   I could imagine HPUX 10.x not allowing that. They followed all manor of optional RFC's, then later added options to disable the checks for some of them. Somewhat related, I used to blackhole 169.254/16 (zeroconf) on our linux ima
7. 17137.▲
   by LinuxBender 8y ago

   I have multiple .us domains. The only difference is that most registrars that follow the rules may not use whois privacy services for that TLD. I don't have a reference handy for that rule.
8. 17138.▲
   by LinuxBender 8y ago

   For sure, people may have to configure systems and routers to allow this. People would also have to ensure they don't accidentally leak routes for this. That happens from time to time. I'm just saying it would be fine to use t
9. 17139.▲
   by LinuxBender 8y ago

   240/4 is not globally reachable, so you can certainly use it in your org if you are not already using it for any multicast applications. [1] This could vary wildly from company to company so there is not a universally correct answer he
10. 17140.▲
    by LinuxBender 8y ago

    Agreed. I believe that as companies get bigger, this behavior narrows down to specific orgs in the company. Dev teams and operations teams will each have their own filtered set of personalities too. Even then, I know I am over simplifyin
11. 17141.▲
    by LinuxBender 8y ago

    Could a feature request be submitted that would allow tagging specific pieces of data for a cron job to secure wipe in the background along with a manifest that shows the data wiped with time-stamps? Is that even feasible?
12. 17142.▲
    by LinuxBender 8y ago

    This has been possible since at least the mid 90's. We used to update the firmware over the air. We could change any settings on the phone, but would only do so when required to keep the phone operational. Anything beyond that riske
13. 17143.▲
    by LinuxBender 8y ago

    Fair enough :-) Would it be feasible to add something in the module that could optionally send a string to the user to say that some portion of a hash of their pw will be verified against that API? I am thinking of the cases where a securi
14. 17144.▲
    by LinuxBender 8y ago

    So anyone that uses sudo on the box it is installed on will be sending a hash of their password to an API? What warning will users receive before putting in their pw?
15. 17145.▲
    by LinuxBender 8y ago

    I personally like calm, rational logical inspirational leaders. I would like the fictional Captain Picard! Those are very hard to find. In my humble opinion, I believe you will find a lot of disagreement on methodologies throughout this t
16. 17146.▲
    by LinuxBender 8y ago

    This is sortof true for search engines, but HN is hit by a myriad of bots and scrapers non stop. There is no telling what they will choose to do with the data. I still get hits on my domains for URL's that ceased to exist 20 years ag
17. 17147.▲
    by LinuxBender 8y ago

    Social Engineering is in scope for Security Penetration Testing
18. 17148.▲
    by LinuxBender 8y ago

    Good on them for fighting this. For those that wish to reduce risk of drama, register multiple domains, set up wildcards and use whatever "A" record you want. i.e. f---whoever.domain.tld. LetsEncrypt supports wildcards now.
19. 17149.▲
    by LinuxBender 8y ago

    Comodo most certainly had copies of everything on their forum servers. They had to be revoked. Yes, some time later they started using HSM's. Too little, too late. They lost a lot of trust after those incidents.
20. 17150.▲
    by LinuxBender 8y ago

    I had a similar experience. I had serious gut issues and Kaiser poked my belly, then said "It's a virus. It will clear up". Even after I told them this had been going on for a month. I had to research this myself and it t
21. 17151.▲
    by LinuxBender 8y ago

    Comodo has had their signing keys compromised multiple times. I can probably dig up the old ZeroForce (ZF0) chat logs that show them poking around their forum servers that had copies of the signing certs. I am not even kidding. They had
22. 17152.▲
    by LinuxBender 8y ago

    Is this by chance playing on people's laziness to allow a universal centralized backdoor into applications? Will phones also use this for the screen lock?
23. 17153.▲
    US F-22 fighter jets intercept Russian bombers near Alaska(lite.cnn.io)

    7 points by LinuxBender 8y ago|13 comments
24. 17154.▲
    Linux Dmesg Arbitrary Kernel Read(packetstormsecurity.com)

    1 points by LinuxBender 8y ago|0 comments
25. 17155.▲
    Tor Browser Deanonymization with SMB(packetstormsecurity.com)

    1 points by LinuxBender 8y ago|0 comments
26. 17156.▲
    Is hiring a hacker ever a good idea?(zdnet.com)

    1 points by LinuxBender 8y ago|0 comments
27. 17157.▲
    Government mass surveillance breached human rights, says European court(zdnet.com)

    2 points by LinuxBender 8y ago|0 comments
28. 17158.▲
    Kernel exploit discovered in macOS Webroot SecureAnywhere antivirus software(zdnet.com)

    2 points by LinuxBender 8y ago|0 comments
29. 17159.▲
    State Department shamed for poor adoption of multi-factor authentication(zdnet.com)

    2 points by LinuxBender 8y ago|0 comments
30. 17160.▲
    Russian man pleads guilty, admits he ran notorious Kelihos botnet(arstechnica.com)

    1 points by LinuxBender 8y ago|0 comments