akerl_

31 ms·

601.
by akerl_ 1y ago
> As for current NFA items holder, the constitution requires them to be compensated fair value if they are to be confiscated. Where is that in the constitution?
602.
by akerl_ 1y ago
I’m curious about basically all of it. It seems like such a powerful tool. I seem to have irritated the parallel commenters tremendously by asking, but it seemed implausible I’d understand the design considerations by just skimming the CI c
603.
by akerl_ 1y ago
Did I express outright incredulity about logging failed attempts? If you’re a company trying to meet a compliance regime and you don’t already have a central IDP, that’s step zero. None of the NIST requirements say “you must have an IDP”, b
604.
by akerl_ 1y ago
> Let's try with a company that has your data and see how correct "the market" is. What do you mean? Tons of companies with my data have been breached.
605.
by akerl_ 1y ago
A random plug for https://hamstudy.org/ The US ham test question pools are fully public. Your test will be a mixture of questions from the pool. HamStudy basically lets you churn the question pool, and then will offer expla
606.
by akerl_ 1y ago
Wow. What a rude way to answer.
607.
by akerl_ 1y ago
Looks like it? https://developers.google.com/safe-browsing/reference/URLs.a...
608.
by akerl_ 1y ago
Tangential to the flagging issue, but is there any documentation on how Immich is doing the PR site generation feature? That seems pretty cool, and I'd be curious to learn more.
609.
by akerl_ 1y ago
> I suspect my flagging was the result of failing to use a large email provider. This seems like the flagging was a result of the same login page detection that the Immich blog post is referencing? What makes you think it's tied to
610.
by akerl_ 1y ago
That’s almost always going to be a setting in your IDP, not based on log capture/retention. The IDP will have some settings for max fails before lockout, and apply it by counting.
611.
by akerl_ 1y ago
It’s not nothing: it’s one more thing that can break or eat resources or have a vuln. And it’s not improving the thread model. It’s net negative.
612.
by akerl_ 1y ago
You're just sort of loosely interweaving unrelated comments? You're back on prevention instead of detection, but also no: an attacker with valid creds isn't going to run other checks first before using them. And yes: by volum
613.
by akerl_ 1y ago
The point being made is that unless "what you want to achieve" is "run a tool that isn't improving your security posture", port knocking isn't providing value to the security model. Hence the cargo cult.
614.
by akerl_ 1y ago
> To balance monitoring and auditing requirements with other system needs, event logging requires identifying the subset of event types that are logged at a given point in time. For example, organizations may determine that systems need
615.
by akerl_ 1y ago
I feel like this kind of justification comes up every time this topic is on HN: that the reason companies aren't being organically penalized for bad IT/infosec/privacy behavior is because the average person doesn't have
616.
by akerl_ 1y ago
WireGuard is sort of a VPN, but really its core is peer to peer links with simple, footgun-resistant configs. The most mundane setup is two peers with each other’s public keys that let each peer talk to the other via the WireGuard link.
617.
by akerl_ 1y ago
I'd probably look at https://libsodium.gitbook.io/doc/bindings_for_other_language... or https://nacl.cr.yp.to/box.html
618.
by akerl_ 1y ago
Why? Why is it inherently desirable that society penalize companies that get hacked above and beyond people choosing not to use their services, or selling off their shares, etc?
619.
by akerl_ 1y ago
You're (thankfully) never going to get a legal framework that allows "white hats" to test another person's computer without their permission. There's a reason Good Samaritan laws are built around rendering aid to in
620.
by akerl_ 1y ago
Just to clarify: if Bob in Finance doesn't have phishing-resistant MFA, that's an organizational failure that's squarely homed in the IT and Infosec world.
621.
by akerl_ 1y ago
It's weird to assign them comparatively like that but also, what does that have to do with fail2ban? The roving spam it blocks are not threats, and stolen credentials aren't going to be detected by it.
622.
by akerl_ 1y ago
Eh. I've used OpenVPN over many years for many kinds of problems. I'm hesitant to call it perfectly reasonable even for the most mundane use case of "running an entirely vanilla virtual private network". For the use case
623.
by akerl_ 1y ago
What language today still doesn't have a de facto simplified toolbox for wrapping crypto operations? If you're a developer, and you start trying to perform crypto operations for your service and the library you chose is making you
624.
by akerl_ 1y ago
I’d wager that something like 90% of developers who look at that page should close the tab instead of reading any of it. If you’re building a system and need crypto… pick the canonical library for the ecosystem or language you’re working in
625.
by akerl_ 1y ago
If somebody has a stolen credential, they aren’t going to be brute forcing at all. Likewise that CVE wouldn’t be attacked by a brute force attack. But I see you’ve backpedaled to this being about log noise, not security.
626.
by akerl_ 1y ago
If a slow brute force attack is working on your system, all the port knocking and tripwires and whatever are just gimmicks. Don’t waste resources putting lipstick on the pig.
627.
by akerl_ 1y ago
In fairness, most of the fervor for these kind of knock-based flows predate Wireguard existing. They come from the era where OpenVPN and friends were the common practice in that space, and I would not have considered "add OpenVPN"
628.
by akerl_ 1y ago
I definitely wasn’t grokking that, because the prior commenter never mentioned AWS Identity Center, and instead linked to STS, which works how I described (you can’t use FIDO MFA for the authentication of the call that gives you your short-
629.
by akerl_ 1y ago
If my swap is on my disk, what good is storing file cache there, next to the files?
630.
by akerl_ 1y ago
Thanks <3

More ›