csears

15 ms·

121.
by csears 13y ago
Why would he go to jail? The guy's friend asked for the pentest. There was no "unauthorized access" involved here.
122.
by csears 13y ago
The normal Microsoft service provider license agreement (SPLA) forces you to buy subscriber access licenses (SALs) on a monthly basis. Amazon may have a custom deal with MS for hourly Windows pricing on EC2 that wasn't extended to Offi
123.
by csears 13y ago
SSE is listed as "under construction" on the IE roadmap: http://status.modern.ie/serversenteventseventsource
124.
by csears 13y ago
Not to make light of the situation, but that sketched smiley face does work well as a meme/icon for the NSA's hubris in all this. Also makes for a subtly humorous t-shirt... http://teespring.com/nsaface Happy to s
125.
by csears 13y ago
Installed. Tried it. Uninstalled. Interesting, but unless you're designing ads, this release is probably not worth your time.
126.
by csears 13y ago
Yubico makes a couple products that might fit your requirements. The YubiHSM [1] ($500) is a USB HSM designed to be connected to server. Yubikey Neo [2] ($50) is does end-user authentication (OTP, CCID, SE, JavaCard) over NFC or USB. They c
127.
by csears 13y ago
Anyone notice "Writing I-Ds using HTML" was in the header of each page? I assume the author reused something from his other RFC by that name [1] and forgot to update the page header. [1]: http://tools.ietf.org/html
128.
by csears 13y ago
> For example, what benefit is there in creating a new user with sudo privileges instead of using root directly? Also, when a group of people all need access to the same servers, you don't want everyone SSHing in as root. It's
129.
by csears 13y ago
I wouldn't expect Windows support anytime soon, especially Windows containers running in a Linux host using LXC as the "hypervisor". Windows containers running in a Windows host is much more likely. Commercial solutions like
130.
by csears 13y ago
Regarding who is supposed to use it... If you like deploying your apps to a Platform-as-a-Service (PaaS) like Heroku, Google AppEngine, or DotCloud, but wanted to run it on your own infrastructure, then Docker could be for you! It's de
131.
by csears 13y ago
Neat concept, but I don't see a VirtualBox-based implementation ever becoming mainstream... not that it needs to be mainstream to be useful. It seems like full blown x86 PC hardware emulation is overkill for what you're doing. As
132.
by csears 13y ago
There's also the an opportunity cost to consider if your actual demand turns out to be higher than projected and you're not able to scale up to meet it. I think we'll see more companies using a hybrid model where you can run
133.
NSA and DoD lawyers, Jane Harmon, Anthony Romero (ACLU) debate national security(youtube.com)
1 points by csears 13y ago|1 comments
134.
by csears 13y ago
Looks nice, but do you think there's a business model for something this simple/light? Unless you were dealing with a project that had dozens or hundreds of users/clients interested in tracking the status, it seems like sendi
135.
by csears 13y ago
This seems ok if you have a tech-savvy user base that understands how to re-add a root certificate if they later hit a legitimate site using one of the removed root certs. If you user base isn't that savvy, I'm afraid you would ju
136.
by csears 13y ago
Do you chalk it up to a failure of execution? Or was the core concept not viable? I've always thought some kind of OkCupid approach to matching job seekers and employers would be very useful. GroupTalent seems to be doing something sim
137.
by csears 13y ago
True, but this is still very much worth paying attention to, even if it's not NSA-proof today. If we are ever going to get to a future where self-hosted solutions gain widespread adoption, it will be enabled by projects like Kolab maki
138.
by csears 13y ago
I seem to recall a Glacier discussion from a while back suggesting that the recovery fees might be covered by insurance (homeowners, loss of business, etc). If you're primarily concerned about doing a restore after a fire, theft, or na
139.
by csears 13y ago
I think there is significant demand for a good Windows solutions in this space. Chef and Puppet have Windows support, but I don't see much community momentum around it. Powershell is the obvious choice, and, as of v3, I think it would
140.
by csears 13y ago
Can I ask why you chose GPL for Ansible? This makes it more challenging to integrate or embed Ansible in many types of commercial or non-GPL projects. Chef [1] and Puppet [2] both chose the Apache license. Salt did as well. If you were worr
141.
by csears 13y ago
Can Packer build Windows images?
142.
by csears 13y ago
They've announced [1] that RHEL 7 will be based on Fedora 18. Based on the package updates list for mongodb [2], it looks like it will using MongoDB version around 2.2.4. The source should be available via Fedora's normal repos. [
143.
by csears 13y ago
True, but that still leaves other search engines in the dark about which links should be ignored. I thought disavow.txt might be a better solution to help us avoid The Destruction of the Web.
144.
by csears 13y ago
What about something like a disavow.txt file that site owners could use to list domains or URLs with unwanted inbound links. It would be similar to the Google Disavow Links tool, but more open and standardized. We could write a simple spec
145.
by csears 13y ago
So could we spoof bogus metadata to hide Paul Revere? In other words, if a large enough number of people started start calling and texting random Verizon customers, tweeting with random people from the middle east, inviting random people w
146.
by csears 13y ago
Edward, if you happen to be reading this, I just wanted to say "thanks"
147.
by csears 13y ago
Now that PRISM has been exposed, the NSA should consider outsourcing data collection to China. They already have a huge team of elite hackers with a proven track record of breaking into top tech companies. Chances are, the Chinese hackers a
148.
by csears 13y ago
I agree that the law should be more clear, but I also think a lot of people are overreacting to this case and not applying a consistant standard of privacy outrage. Google constantly reads my email to display ads in GMail. That's a tra
149.
by csears 13y ago
The real question is: When do you have a reasonable expectation of privacy, either online or IRL? Yes, I have curtains, but unless I close them, I don't expect privacy. If I'm using mainstream social media sites, I don't expe
150.
by csears 13y ago
Also, they appear to be redirecting all HTTPS requests to HTTP. Try it: https://www.nsa.gov/public_info/foia/submit_foia_request/foi... Configuration mistake or force of habit?

More ›