Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
_8j50
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
60 ms
·
721.
▲
by
_8j50
3y ago
I had an askhn about a "linux internals" book (lookup "windows internals"), I would be glad to contribute to crowdfunding such an effort, but not strictly for the kernel but every major userspace subsystem as well. http
722.
▲
by
_8j50
3y ago
> True, however it was detailing criminal behaviour and projects that were designed with criminal intent. The Government was not allowed to be running those programs as dragnet surveillance is against the constitution The patriot act is
723.
▲
by
_8j50
3y ago
Another possible term for it: https://en.wikipedia.org/wiki/Parallel_construction
724.
▲
by
_8j50
3y ago
He leaked top secret information and fled to america's worst enemy Russia, where he enjoys a peaceful life now. His revelations are not as shocking to the public as they are to tech people. And the journalists he went to were not ameri
725.
▲
by
_8j50
3y ago
Thank you, that was the explanation I was looking for. > awareness of a risk—and even moreso “common knowledge”—is very far from enough to show specific intent (if it was a recklessness or criminal negligence standard, that'd be mor
726.
▲
by
_8j50
3y ago
Do you then think it is clearly prosecutable under this law if along with the doxxing, an encouragement to others is made to cause the victim harm (implied or otherwise) knowinf that could lead to violence? E.g. they doxx someone and post a
727.
▲
by
_8j50
3y ago
18 USC 19 has laws about conspiracy that might cover this: https://www.law.cornell.edu/uscode/text/18/373 It is common knowledge that stalking, harrasment and even violence (all criminal acts) can occur to so
728.
▲
by
_8j50
3y ago
I will forever be confounded by people that get free stuff and then try to find ways for it to cost them something. If you are literally handed stuff free of charge, like... keep it or sell it? This isn't finding a lost item, this is a
729.
▲
by
_8j50
3y ago
They scanned the internet, they were testing their exploit for 1-2yrs before "d-day". > you are getting well beyond normal civilian behavior That is precisely my point, the threat actors are not civilians, so you can't def
730.
▲
by
_8j50
3y ago
Are you arguing for the sake of it? I am so confused. What does CIS controls have to do with it(and I feel for you with all that box checking). > As part of C2 communication, attackers have tried to mimic SolarWinds communication method
731.
▲
by
_8j50
3y ago
I am guessing they have undisclosed private intel vendor telling them which domains are "malicious", or they are looking at compromises and auditing how malware domain is/isn't being blocked as part of their response.
732.
▲
by
_8j50
3y ago
Thanks, but can't get past captcha. 12ft.io blocked it and archive.ph doesn't work on my browser due ri ssl error. Anyone know other sites?
733.
▲
by
_8j50
3y ago
I am not suggesting the metrics are meaningless, I am suggesting everything else you need to do not covered under these or nist csf becomes lower priority or even seen as wasteful. In case you are not aware if it look up "mcnamara fall
734.
▲
by
_8j50
3y ago
A lot of companies use a product that uses kafka under the hoods. I was running graylog a few years ago for months before I knew kafka lay under the hoods. They have a list: https://kafka.apache.org/powered-by
735.
▲
by
_8j50
3y ago
> Drive implementation of measurably effective cybersecurity investments Metrics,metrics,metrics the usgov way. Much if actually effective security is not effective until you get attacked. Especially when it comes to APTs. A huge furstra
736.
▲
by
_8j50
3y ago
Going back to moveit as an example, they used a zeroday and mass-ransomed people. The cloud isn't an adequate defense, it is just better than the defense less resourced companies and people can put together. With APTs it is all a compe
737.
▲
by
_8j50
3y ago
Hurd is a microkernel so it is lean by design. I suspect that statement was a dig on perceived architectural flaw of Linux.
738.
▲
by
_8j50
3y ago
Do some research? I do this for a living. "digitally signed SolarWinds Orion network monitoring component" Do you even know what that is? It's a .net dll. It was absolutley self hosted. Updating the self-hosted software meant
739.
▲
by
_8j50
3y ago
A nation state compromises a cloud infra and that's your takeaway? Was your takeaway after solarwinds the opposite? To move it to the cloud? It's almost as if it is very easy to make reductionist statements without considering the
740.
▲
by
_8j50
3y ago
A) only a handful of companies can even afford to secure their infra as much as MS. Security is relative to threat actors, not absolute. One individual cannot defend themselves against an APT team (P=persistent). B)I don't know if you
741.
▲
by
_8j50
3y ago
Yes, in a properly run police department, rare as they may be.
742.
▲
by
_8j50
3y ago
If a cop keeps misidentifying black people's faces, they can be removed from their job or disciplined by the department.
743.
▲
by
_8j50
3y ago
You can inspect the design of a condo but ML models can't be examined, their training data is the only thing you can examine. It's like being able to inspect the raw materials but nothing else for the condo.
744.
▲
by
_8j50
3y ago
Don't use this, it has a lot of riskware as part of the toolset. Win10/11 has ok-ish backup/restore with a nice UI. Better to use that than shove all this mess in there. FYI: if you insist, use MRT not any of these risky secu
745.
▲
by
_8j50
3y ago
Why do you and others on the thread keep asking that. If a human made a mistake he or she is held accountable individually and punished. The software cannot be punished, it does not have the ability to fear punishment and be perfectly caref
746.
▲
by
_8j50
3y ago
You know, even with Google amd Bing, search terms are extremely (even politically) censored depending on where you search from. It's not like Chinese users can search the same thing fine on Google.
747.
▲
by
_8j50
3y ago
It would be expenses and profit, the remaining traffic keeps users coming.
748.
▲
by
_8j50
3y ago
You and others replying to GP keep suggesting google users who are the product not the actual customee would be restricted when in fact it would be the real customers: people wanting to place ads on google that would be restricted. The amou
749.
▲
by
_8j50
3y ago
People can use google all they want, the restriction would be on how much ad can be sold by Google.
750.
▲
by
_8j50
3y ago
Your suggestions don't work well at scale and when restricted to specific firewalls and other infra, especially at large orgs.
More ›