clwg

10 ms·

31.
by clwg 2y ago
It's not just about security; it's about how democracy, in certain forms (i.e. canton type voting, certain diaspora communities, etc.) is implemented[0]. I'm not advocating for any anarchist ideals, and I believe cryptocurren
32.
by clwg 2y ago
The author’s premise brings me to a different conclusion. First, they detail Big Data, then the building of infrastructure to support it. New technology was then developed to harness insights from Big Data, and along the way, blockchain and
33.
by clwg 2y ago
Except for oil, the Middle East produces allot of oil and has for quite some time.
34.
by clwg 2y ago
I'm sorry, but that is incredibly prejudiced. Are Western companies such as Boeing and FTX more truthful?
35.
by clwg 2y ago
Piling on a bit, but it was also the first video they played when they launched MTV Europe. https://direstraitsblog.com/blog/30-years-ago-money-nothing-...
36.
by clwg 2y ago
Here is the reasoning they gave at the time. "So why the change? AWS and Amazon Elasticsearch Service. They have been doing things that we think are just NOT OK since 2015 and it has only gotten worse. If we don’t stand up to them now,
37.
Peloton to charge secondhand market a $95 'used equipment activation fee'(engadget.com)
11 points by clwg 2y ago|1 comments
38.
by clwg 2y ago
It seems to have been Dark Tangent[0] (aka Jeff Moss), the creator and organizer of Blackhat and Defcon. https://x.com/dmitrygr/status/1822126826606739678
39.
Warner Bros. Scrubs Cartoon Network Website, Erasing Years of History(gizmodo.com)
49 points by clwg 2y ago|28 comments
40.
by clwg 2y ago
The functionality does seem intriguing, that doesn't change it's security profile which was poorly thought out and implemented.
41.
by clwg 2y ago
First thing that comes to mind is that Recall stuff from a month ago, they also release updates[0] that crash machines. [0] https://www.tomsguide.com/news/windows-11-update-causing-blu...
42.
by clwg 2y ago
As a Canadian, this is utterly embarrassing. I can't believe it was happening for years, even at the under-16 level, and was common knowledge. I think they should withdraw from the Olympics voluntarily. I get that it sucks for the athl
43.
by clwg 2y ago
You should run both. Consider Cloudflare (and large scale infrastructure providers like TLD operators) point of view on the traffic: If your private resolver is using root hints, it's IP is now correlated with the lookup of that domain
44.
by clwg 2y ago
A bit of a tangent, but something like PowerDNS authoritative server comes with an API[0] that can be leveraged for similar functionality to what Cloudflare provides. Decentralization of the internet has to start with Authoritative DNS. I k
45.
Microsoft blames EU rules for its inability to lock down Windows(techradar.com)
4 points by clwg 2y ago|3 comments
46.
by clwg 2y ago
No big company is going to agree to the terms and conditions that are listed on their website, they'll have their own schedules for indemnification that CS would agree to, not the other way around. Those 300 of the Fortune 500 compani
47.
by clwg 2y ago
Not just QA; security assurance, code reviews, static and dynamic testing, threat surface analysis, unit testing, and pentesting either didn’t exist or weren’t sufficiently applied. I have to imagine that this bug has existed for quite some
48.
Trusted Computer System Evaluation Criteria (1985) [pdf](csrc.nist.gov)
2 points by clwg 2y ago|0 comments
49.
CrowdStrike vs. Cylance in Brutal Battle to Knock Hackers Out (2016)(forbes.com)
1 points by clwg 2y ago|0 comments
50.
CrowdStrike's terms and conditions say most customers would just get a refund(businessinsider.com)
2 points by clwg 2y ago|0 comments
51.
by clwg 2y ago
I clicked hoping to see Smoke on the Water mentioned, and there it was right at the start.
52.
by clwg 2y ago
I'm always curious on how security software can provide a ROI. I had McAfee tell me one time that the hackersafe logo on our website would increase sales by 10%, this was at a Fortune 50 doing billions in sales online every year. I was
53.
by clwg 2y ago
This makes me sad, I haven't thought about Bob Newhart in years, he was a ever present fixture on TV my entire youth. As soon as I saw the headline, the only thing that popped into my head was, "Hi, I'm Larry, this is my brot
54.
Kaspersky gives US customers six months of free updates as a parting gift(theregister.com)
20 points by clwg 2y ago|4 comments
55.
by clwg 2y ago
Yeah, that’s an incredibly short timeframe, done on a Friday with what looks like an 8-hour time difference. Back before bug bounties, the industry mostly coalesced around RFPolicy[0] in terms of security notification and response timelines
56.
by clwg 2y ago
Good IT security isn't invisible; it's there to prevent people from deploying poorly designed applications that require unfettered open outbound access to the internet. It's there to champion MFA and work with stakeholders fr
57.
by clwg 2y ago
In response to your last point, Image Line has has had lifetime updates for FL Studio for over 25 years[0]. They even changed the name of the product but kept the lifetime updates in place. https://www.image-line.com/fl-stud
58.
DoD Trusted Computer System Evaluation Criteria (1985)(csrc.nist.gov)
2 points by clwg 2y ago|0 comments
59.
by clwg 2y ago
My next sentence is really a comment on that step. I generally find that working incrementally alongside the teams provides better outcomes. This is not to say you can't use black-box testing or perform unscoped testing, but collaborat
60.
by clwg 2y ago
I'm not a huge fan of how red teaming is generally conducted. It's sometimes necessary, but the CISA report seems to indicate that the organization wasn't responding to their requests the way they wanted, leading to a communi

More ›