clwg

16 ms·

151.
by clwg 3y ago
I run an overkill system - a dnsdist instance provides clients on my network with DoH and standard port 53 resolution. Dnsdist forwards to a PowerDNS recursor for resolving internet hosts with root hints. Additionally, the recursor uses a c
152.
by clwg 3y ago
You're absolutely correct. Identity and SSO are hard and require a high degree of competency to do well, and they're massively impactful when they go wrong. I think the problem is trust. So the question is, why would 1Password tru
153.
by clwg 3y ago
I have 25 years of experience in security, encompassing both product and I.T. security in technically focused IC roles. I find it incredibly unrewarding. On the front lines, most situations tend to be adversarial or highly stressful. This i
154.
FTX – The fraud was in the code(newsletter.mollywhite.net)
143 points by clwg 3y ago|95 comments
155.
by clwg 5y ago
You can get this functionality in Windows 10 using PowerToys https://github.com/microsoft/PowerToys
156.
by clwg 7y ago
The alternative to over reaction is under reaction. I'd rather take extreme precautions and deal with the economic fallout then under react and deal with the situation that italy is currently in. I think in this situation fear is good,
157.
by clwg 7y ago
You can use Citus(recently bought by Microsoft) to scale postgres https://www.citusdata.com/
158.
by clwg 7y ago
The simplest implementation of this would be to block all outbound traffic for all hosts by default, and allow only web traffic out through a proxy. Then for other specific services poke holes for specific src<->dst.
159.
by clwg 7y ago
Fundamentally I would say yes, however most of the countries that the US would likely do this to (Russia, Iran, China, Cuba) have contingencies in place through the implementation of country wide intranets[0][1]. Within those countries you
160.
by clwg 7y ago
He's the CEO
161.
by clwg 8y ago
Saudi's refer specifically to the House of Saud, which is the ruling family of Saudi Arabia, if another family was ruling it would be {insert family name here} Arabia
162.
by clwg 9y ago
I don't necessarily agree with serverless thwarting DoS attacks. While technically it makes it easy to scale to accommodate the increase load (in the same way that auto-scaling will). The denial of a service is the result of your inab
163.
by clwg 9y ago
I was a teenager throughout the 90's and was a bit of a bully from time to time, and I don't think bullying has changed much since then. If it wasn't a pen, it was the shoes, t-shirt, or the way someone pronounced a word. Bu
164.
by clwg 9y ago
It's called a DGA or domain generation algorithm, I believe Conficker was one of the first botnet's to use this approach about 10 years ago, it's pretty standard trade craft nowadays. https://en.wikipedia.org/
165.
by clwg 10y ago
Does this apply only to the first hop or to anyone that packets route through?
166.
by clwg 10y ago
It's a parliamentary system, so the party has to vote in a new leader. We've had similar situations in Canada where the party leader has stepped down, and the party votes in a new leader, who then automatically becomes the prime
167.
by clwg 10y ago
Here are the criteria for rating the risk of wildfires in Alberta http://wildfire.alberta.ca/fire-smart-landscapes/wildfire-th... The fire presented a risk right at the beginning and seemed to spread into populated are
168.
by clwg 11y ago
Those weird trusted root CA's are preloaded by Microsoft https://support.microsoft.com/en-us/kb/293781
169.
by clwg 11y ago
I was flying with a friend one time and he jokingly said "never hack the plane your flying on", while it was just joke, it's something I'd never actually considered although it's blatantly obvious. Sometimes people
170.
by clwg 11y ago
There's this https://github.com/hrbrmstr/pewpew it's as much a criticism of these sorts of security visualizations as it is a means to create them.
171.
by clwg 12y ago
This seems closer to Levenshtein distance than NLP classification. You could also get similar results from a soundex comparison against domain names (substituting numbers for letters when appropriate and breaking up/combining subdomai
172.
by clwg 12y ago
I used to work in security for one of the big OEM hardware vendors, Microsoft has been working with all vendors for years trying to secure the Window's ecosystem by extending out their SDLC and providing free security services and trai
173.
by clwg 13y ago
He's the main author of cryptocat, which in the past has gotten allot of flak for it's javascript/client side implementation of encryption.