_8j50

63 ms·

811.
by _8j50 3y ago
I will keep saying this: whatever the government's true intent might be, this issue isn't going away. You can develop good/sound tech that either decincientivizes the extrems of platform abuse or detects such abuse while pres
812.
by _8j50 3y ago
First, I just don't get how after knowing about freud and his views anyone can trust freudian therapy. Second, I also don't get how people trust strangers with intimate details of their thought life. I suppose if being happy and f
813.
by _8j50 3y ago
> Milton Keynes tried separating pedestrians and cyclists, it is mostly considered a failure That's not what I was suggesting, I was suggesting restructuring cities so that pedestrians and cyclist have their own road network accessi
814.
by _8j50 3y ago
I like the idea but from a security perspective this has even more issues. Mobile devices get ratted all the time, even cheap and modest RATs just screenshot the whole screen frequently, how can the site enforce screenshot prevention? Assu
815.
by _8j50 3y ago
mtls solves the common redis abuses I know of, but still, don't presume a vuln in redis may not be discovered in the future. But if you are going out of your way to configure mtls the I am guessing you have a good reason to?
816.
by _8j50 3y ago
Is it possible to make "clean" cigarettes then? I wish it was possible to take out the nicotine and mix it with something you can smoke without harm.
817.
by _8j50 3y ago
The passenger list, security footage, passenger descriptions, blackbox all prove saudi nationals hijacked the planes. The burden of proof is on the person making the claim so the ball is in your court to disprove existing evidence and prove
818.
by _8j50 3y ago
If timing like this amuses you, consider the timeline of azuread's hack and MS renaming it to "entra id" lol
819.
by _8j50 3y ago
Perhaps they could be extended to do so? Because houses near them already list them as a feature to have near you.
820.
by _8j50 3y ago
I personally hate dubbing, i prefer to hear the original speake's tone of voice and pronounciation. Subtitles also help learn a language. But even in english I always turn them on, it really helps to see the spelling of words. Like I w
821.
by _8j50 3y ago
Don't expose your redis to the internet (please!). Don't whitelist large swathes of your cloud/hosting provider's subnets either. Of course redis isn't special, mongo, elastic, docker, k8s,etc... even if it is a tes
822.
by _8j50 3y ago
Interesting timing with the tetra protocol vuln disclosure.
823.
by _8j50 3y ago
Just throwing it out there but it would be nice if there were a lot more pesestrian and bike only roads built separate from car roads. Big cities already have recreational walking trails that typically follow some sort of a drainage or sewa
824.
by _8j50 3y ago
The one thing I dislike about matrix is how it has to use http. IRC is an escape from the web. The matrix api is simple enough to use a couple of curl commands for basic chat though. A simple "everything is a json schema" protocol
825.
by _8j50 3y ago
> Are you now telling me that this is beyond the capability of software engineering? If so, then we need to drop the word 'engineering' from 'software' and start completely a fresh. No. I am telling you that china sen
826.
by _8j50 3y ago
Oregon is the only state that was specifically created to keep people out based on ethnicity. Lookup the concept of sundown towns which still exist in the US ( i personally overheard about one in montana though, not oregon) and come to you
827.
by _8j50 3y ago
It is one thing to reject critical thinking, it is another level of "mindset" to ridicule those who refuse to part with it. Whether aliens with lasers blew up WTC or if the buildings didn't even exist to begin with or whatve
828.
by _8j50 3y ago
Thanks, that's pretty cool for it's time!
829.
by _8j50 3y ago
> There is no logical difference between the rules for cyber security and any other industry That's the problem with the way tech people who don't get infosec think. There is a huge difference! The entire purpose of cybersecuri
830.
by _8j50 3y ago
No, using azuread is storing your valuables in someone else's safety deposit box! The service exists not just for convenience because it is more secure than azure ad. 90%+ ransomwared orgs in my estimate are vicitims of onprem AD abuse
831.
by _8j50 3y ago
I recommend against using Tor, simply because of exit node hostility and targeted intrusions when you use Tor. Intel agencies also run the majority of relays last I heard of this subject. Perhaps if exit node operators were publicly listed
832.
by _8j50 3y ago
Dude, read what I said again. It is what happens leading up to that report that I have an issue with. No matter what, it will affect stock prices! Don't tell me there is no pressure to make presumptions or interpret incomplete data , t
833.
by _8j50 3y ago
If you think MS doesn't have bug bounties and more red teaming and appsec auditing than most orgs you'd be mistaken. The fact is, this is victim blaming plain and simple with a logic error (likely) in code that was exploited by a
834.
by _8j50 3y ago
No
835.
by _8j50 3y ago
They have sequestered environmentd for that, check out Fedramp. They basically have their own DC and security requirements met. Every cloud provider has a fedramp version of services. Even the CIA uses this. Cost-benefit analysis wins.
836.
by _8j50 3y ago
That is such a presumtive baseless statement, what data do you have to back that up? What would fines do? People don't use azure ad because it's optional, it's how most companies these days authenticate users instead of onpre
837.
by _8j50 3y ago
Size is the only difference to swimming in the ocean or a lake, unlike lakes though, rivers flow and move the trash away
838.
by _8j50 3y ago
They are already doing it with NIST CSF and most companies are following that framework because there is no better option. PCI and HIPPA are also a thing, this would be similar. > And what would be the criteria for “legitimizing” a piece
839.
by _8j50 3y ago
What exactly is "material", you scour pii to determine that. Malware infections are very common in big orgs, pii loss, secret data loss or service impact are the big ones to determine severity of an incident post compromise. If th
840.
by _8j50 3y ago
This isn't as good of a thing as you think. Instead of focusing on finding out the scope of the compromise and making sure the threat actors are contained and can't easily compromise again, incident responders will ger pressures t

More ›