arkadiyt

22 ms·

271.
by arkadiyt 4y ago
> “The chief concern,” Google’s liaison in the military warned the leaders of the repository, “is keeping this out of the press.” Just once it would be nice if companies were actually held accountable.
272.
by arkadiyt 4y ago
For assuming one role it can be up to 12 hours. If you're doing role chaining like the parent mentioned (where the 1st assumed role then assumes a 2nd role) then the maximum session duration is 1 hour. AWS has this documented here: ht
273.
by arkadiyt 4y ago
To assume a role with OIDC you'd need to do it from the context of a specific CircleCI job run - getting access to the secrets of a particular CircleCI account alone would not be enough to authenticate to AWS (unlike when you use IAM u
274.
by arkadiyt 4y ago
Great reminder for folks to switch any AWS actions you perform from CI/CD to use OIDC role assumption instead of static IAM user credentials. Then even if an attacker stole all your secrets they can't do anything in your AWS accou
275.
JPSO used facial recognition technology to arrest a man. The tech was wrong(nola.com)
72 points by arkadiyt 4y ago|31 comments
276.
End of Year Pay Report 2022(levels.fyi)
4 points by arkadiyt 4y ago|0 comments
277.
by arkadiyt 4y ago
Looks neat. Just a reminder for folks that some states (like California) are Two Party Consent states, meaning it is a crime to record the call unless all parties consent to it.
278.
Washington moved fast on TikTok but has made little progress with Big Tech(cnn.com)
6 points by arkadiyt 4y ago|2 comments
279.
A New Chat Bot Is a ‘Code Red’ for Google’s Search Business(nytimes.com)
4 points by arkadiyt 4y ago|0 comments
280.
The death of the line of death(emilymstark.com)
60 points by arkadiyt 4y ago|14 comments
281.
IRS accidentally releases taxpayers’ private data again(news.bloombergtax.com)
265 points by arkadiyt 4y ago|63 comments
282.
Senator seeks FTC probe of data sales to U.S. government agencies(washingtonpost.com)
2 points by arkadiyt 4y ago|0 comments
283.
An Intel analyst tried to prevent the Jan. 6 attack – but DHS failed to act(news.yahoo.com)
5 points by arkadiyt 4y ago|2 comments
284.
Former Twitter Employee Sentenced to 42 Months for Acting as a Foreign Agent(justice.gov)
108 points by arkadiyt 4y ago|10 comments
285.
Dozens of Telehealth Startups Sent Health Information to Big Tech Companies(themarkup.org)
2 points by arkadiyt 4y ago|0 comments
286.
Unusual Cache Poisoning Between Akamai and S3 Buckets(spyclub.tech)
2 points by arkadiyt 4y ago|0 comments
287.
No, Google did not hike the price of a .dev domain from $12 to $850(agwa.name)
339 points by arkadiyt 4y ago|130 comments
288.
AWS ECR Public Vulnerability(blog.lightspin.io)
25 points by arkadiyt 4y ago|0 comments
289.
Xnspy stalkerware spied on thousands of iPhones and Android devices(techcrunch.com)
3 points by arkadiyt 4y ago|0 comments
290.
Florida state tax website bug exposed filers’ data(techcrunch.com)
5 points by arkadiyt 4y ago|0 comments
291.
Platform certificates used to sign malware(bugs.chromium.org)
684 points by arkadiyt 4y ago|234 comments
292.
Making Unphishable 2FA Phishable(mjg59.dreamwidth.org)
1 points by arkadiyt 4y ago|0 comments
293.
Mozilla, Microsoft yank TrustCor's root certificate authority(washingtonpost.com)
434 points by arkadiyt 4y ago|354 comments
294.
Notice of Recent Security Incident(blog.lastpass.com)
6 points by arkadiyt 4y ago|1 comments
295.
New details on commercial spyware vendor Variston(blog.google)
1 points by arkadiyt 4y ago|0 comments
296.
by arkadiyt 4y ago
Heads up this is vulnerable to cross site scripting [1]. If someone submits a link like: https://example.com"><script>alert(1)</script> Then simply viewing the hackernews index page with this exte
297.
Amazon Verified Permissions (Preview)(aws.amazon.com)
3 points by arkadiyt 4y ago|0 comments
298.
AWS releases Wickr, its encrypted messaging service for enterprises(computerworld.com)
1 points by arkadiyt 4y ago|0 comments
299.
When the NYPD Gets Desperate(thenation.com)
1 points by arkadiyt 4y ago|0 comments
300.
Facebook Parent Meta Links Influence Campaign to US Military(securityweek.com)
3 points by arkadiyt 4y ago|1 comments

More ›