bifrost

87 ms·

871.
by bifrost 8y ago
If you click through to the GH Issues I linked to there are some pretty good data points as to what happened. I didn't feel the need to copypasta. But yes, publicly exposed jenkins and repos lead to the compromise, not an uncommon stor
872.
by bifrost 8y ago
Hardware tokens are great but most people don't know how to use them, so they don't.
873.
by bifrost 8y ago
SSH tunneling is handy but if you want to push anything else over it, its a pain for the "layperson". You're not going to have a great time supporting people with it. I've done it, it sucks. Scripts and special SSH confi
874.
by bifrost 8y ago
I can tell you, this is not something that is rare (humans in prod). Ansible often enables this behavior rather than removes it.
875.
by bifrost 8y ago
Yep! Or worse if you're in a VM/Container...
876.
by bifrost 8y ago
This might work: https://medium.com/@tomsparks/what-can-we-learn-from-the-mat...
877.
by bifrost 8y ago
Very true, however I'd rather have that problem than an ever multiplying number of user accounts on systems that can su/sudo.
878.
by bifrost 8y ago
The attacker still would have gotten their key in. TBH if you kill the agent people are just going to copy their keys with no passphrases around. Ask me how I know...
879.
by bifrost 8y ago
The TLDR here is that Chinese Intelligence agencies have backdoors into Huawei products. This creates a security threat to all Huawei product users since the backdoor could be exploited by third parties and also renders people in other coun
880.
CIA Shows Proof of Chinese Intelligence Involvement with Huawei(forbes.com)
5 points by bifrost 8y ago|4 comments
881.
by bifrost 8y ago
As a native San Franciscan I can truthfully say that this is a problem of our own making. We continually support failed policies, terrible politicians and awful city planning. We've got a 40 year backlog of housing that needs to be fil
882.
by bifrost 8y ago
I'm not terribly surprised that this is the suspected reason for termination, but if its true, what were the workers looking to gain?
883.
The Secret Order of Sacred Clowns(medium.com)
2 points by bifrost 8y ago|0 comments
884.
by bifrost 8y ago
Why is this a surprise? Its part of the reason it was even invented in the first place...
885.
by bifrost 8y ago
Exactly right. The default behavior has to change, but thats probably going to be an uphill battle. Its easier to protect users from their own mistakes than to change years of habits though.
886.
by bifrost 8y ago
If you read through the issues, you'll find they made some pretty basic mistakes. 1) They checked credentials into public GitHub 2) They left their perimiter unguarded and the hackers leveraged their CI system. 3) Hackers leveraged the
887.
Matrix.org hacked, hacker posts helpful issues in their GitHub(github.com)
4 points by bifrost 8y ago|1 comments
888.
by bifrost 8y ago
If its harder than putting something in a file, people usually don't use it...
889.
by bifrost 8y ago
I loved the Sparcbook I used, it was great! This reminds me that I should probably fire up my Sparc LX with its whopping 64MB of ram...
890.
by bifrost 8y ago
Shocking that investors are... getting a return on their investment. Now that they got some cash out of it, they'll go and invest in other stuff again, thats how this works.
891.
by bifrost 8y ago
I posted something related to this a couple weeks ago. Chase banned my web client because its not Windows/OSX. It works fine if I change my user agent... FWIW the RV series is the ex-linksys stuff so it should all be thrown in the tras
892.
by bifrost 8y ago
Honestly, if you have a $GENERIC_SYSTEM that you deploy your code to, you don't need the wasteful overhead. If you need to (vs want to) rebuild your OS/Environment regularly, you're doing it wrong. IE: PaaS is for you. That s
893.
by bifrost 8y ago
I'm very much in the camp of "Kubernetes is a problem factory". Personally, I've found very few problems that it solves and more problems that it creates. That said, its probably a great time to be a Kube consultant!
894.
by bifrost 8y ago
They've proven many times that they're not. Read through slashdot and google for "linode bitcoin stolen"
895.
by bifrost 8y ago
FWIW Cloudflare is fairly forthcoming so I'd expect something. "Cache is broken!" sounds like a fairly generic claim...
896.
by bifrost 8y ago
Any more notes about this? I couldn't find much info about it.
897.
by bifrost 8y ago
I recently got to know NIX, it seems pretty neat although getting it to work multiuser is annoying, in addition to installing it on Ubuntu via any sort of automation being a pain. Would be cool to see an RPM/DEB. I didn't even try
898.
by bifrost 8y ago
likely.
899.
by bifrost 8y ago
The title was changed; I can't fault the HN Mod team since they were my coworkers and they're a very solid bunch.
900.
by bifrost 8y ago
yep, I posted with a different one.

More ›