Thorrez

53 ms·

841.
by Thorrez 2y ago
Hmm, interesting. I wonder why the article doesn't mention that possibility.
842.
by Thorrez 2y ago
"Industry speak" sounds like it's just a debate about terminology. But I'm not simply suggesting changing the terminology, I'm suggesting actually measuring something else.
843.
by Thorrez 2y ago
I would think there would be a lot of variables that could be tweaked, such as shape, composition of the filament, gas, glass, filament support parts, thickness of the filament, shape of the filament, temperature that the filament was treat
844.
by Thorrez 2y ago
The red team would beach them then wait years before telling them? The goal the the red team should be to increase security. Waiting years before telling them means there's a years-long delay before security can be improved. That goes
845.
by Thorrez 2y ago
If the goal of the fine was to make sure power efficiency was good, they should have made a fine for having bad power efficiency, not a fine for lasting too long.
846.
by Thorrez 2y ago
This new treatment disables a gene that creates prions. It doesn't help you against prions from the environment.
847.
by Thorrez 2y ago
Oh, I didn't think of that. But I don't think that's really true either. There seem to be ads on the homepage before Chrome: Google News: https://web.archive.org/web/20021001073516/http://w
848.
by Thorrez 2y ago
There were ads on google.com since at least 2000[1]. Chrome wasn't announced until 2008. Disclosure: I work at Google but not on ads or Chrome. [1] https://googlepress.blogspot.com/2000/10/google-launches-sel.
849.
by Thorrez 2y ago
I think that was the entrypoint. But I think the ProPublica article wants more research into the weakness in Microsoft's default (at the time) Active Directory settings that allowed lateral movement, as described in https://
850.
by Thorrez 2y ago
Increasing speed increases the chance that someone will die in a crash if it happens, and also increases the chance that a crash will happen. Check out these graphs: https://safety.fhwa.dot.gov/speedmgt/ref_mats/fh
851.
by Thorrez 2y ago
Then what is the last year of the first century BC? 2 BC? Now there's an off-by-2!
852.
by Thorrez 2y ago
I'm not trying to argue. I'm just saying that it's strange.
853.
by Thorrez 2y ago
Huh, TOTP and HOTP are pretty technical terms, and I generally don't hear them in places meant for general consumers to read (e.g. even Google Authenticator, which does TOTP and HOTP, doesn't say TOTP or HOTP). The general term, O
854.
by Thorrez 2y ago
If they're texting you it, it's almost certainly not TOTP.
855.
by Thorrez 2y ago
Is this pushing a stack element for every loop iteration before starting the loop execution? If there are a ton of iterations, won't the stack overflow?
856.
by Thorrez 2y ago
> two companies making water cooled beds Sleep Number aren't water cooled I don't think.
857.
by Thorrez 2y ago
>but we're talking about the dispatch of armed agents of the state who are permitted to use violence in the discharge of their duties. You could say the same thing about a police officer being sent to direct traffic at a busy inters
858.
by Thorrez 2y ago
>Is it even possible to have cheaper first character SHA256 algorithm? What would be the goal of that? Do you want a cryptographic hash function, or do you want something else?
859.
by Thorrez 2y ago
It's not a random sysadmin. It's a sysadmin of a travel insurance company.
860.
by Thorrez 2y ago
>this seems like something that doesn't need to be advised, because it is so trivial According to the article, that's not the reason Microsoft gave for not advising it. The reasons they gave were (1) it would make governments s
861.
by Thorrez 2y ago
Does Recall work locally? If so, why would it send data to the cloud?
862.
by Thorrez 2y ago
I think those things the article is advising are the same things Andrew Harris wanted to advise customers to do 3 years prior, but Microsoft didn't want to, because it would make the default configuration sound insecure (it kind of was
863.
by Thorrez 2y ago
There isn't necessarily an OAuth signing key. The OAuth tokens might not be signed. They might be random values, which act like a password, with a hash of them stored in a database so they can't even be stolen from the database. E
864.
by Thorrez 2y ago
If all those other solutions are better, why does the article say this: >In the immediate aftermath of the attack, Microsoft advised customers of Microsoft 365 to disable seamless SSO in AD FS and similar products — the solution that Har
865.
by Thorrez 2y ago
The article says Andrew Harris worked with the NYPD to disable it for their setup. And Microsoft themselves advised customers to disable it after Solarwinds.
866.
by Thorrez 2y ago
>legitimate website with a malicious owner. The situation is this: You go to some web store. You click "Sign In With Microsoft" (or Google, or Facebook, etc.). You expect the site to be able to know your Microsoft/Google&#
867.
by Thorrez 2y ago
>he was actually the person responsible for translating between security researchers and the upper management: According to the article, the group in charge of taking input from security researchers and deciding which vulnerabilities nee
868.
by Thorrez 2y ago
>Stealing an OAuth key is just as bad What is an "OAuth key"? Do you mean an OAuth token? No, Golden SAML is worse than stealing an OAuth token, because an OAuth token is valid for 1 user, but Golden SAML can be used to imperso
869.
by Thorrez 2y ago
>And yet here you are, worrying that you'll end up only slightly richer than people earning ~$1M per year. onlyrealcuzzo is comparing 2 things: * Being a founder and working mega hours and having no life (e.g. no spouse or kids) and
870.
by Thorrez 2y ago
>while your peers are all making ~$1M per year working 6 hour days at FAANG I highly doubt ALL your peers are making that much. And I think the people making $1M per year at FAANG tend to work much more than 6 hour days. You have to be v

More ›