g-clef

9 ms·

31.
by g-clef 8y ago
King & Union | 2 positions: Javascript/Front-end developer; Python/Back-end developer | Washington, DC | ONSITE FULL-TIME The point: We are an information security/threat intelligence company. Our goal is to make the thre
32.
by g-clef 8y ago
King & Union | Front-end developer and Python developer | Washington, DC | ONSITE FULL-TIME The point: We are an information security/threat intelligence company. Our goal is to make the threat intelligence process run more smoothl
33.
by g-clef 9y ago
Having worked defensive infosec for almost 2 decades, the privacy-invasion-leading-to-insecure-workarounds is not my experience. (US-based, I'll grant. I'm sure my experience would be different in Germany, for example.) As long as
34.
by g-clef 9y ago
Defensive infosec is mostly "liability and risk reduction." Why is "risk reduction" seen as a bad thing?
35.
by g-clef 9y ago
> I have a hard time to comprehend how this can be considered a reasonable security measure. OK, let's walk it through. Task: block access to "attacker.com" and all it's subdomains. Reason: Maybe it's a malware
36.
by g-clef 9y ago
I'm really struck by how hostile to enterprise security these proposals are. Yes, I know that the security folks will adapt (they'll have to), but it still feels like there's a lot of baby+bathwater throwing going on. DNS ove
37.
by g-clef 9y ago
You don't. You record it and replay it. You want the client to get the same packet 3 over and over.
38.
by g-clef 9y ago
Not quite: The attacker watches for the initial client->AP encryption negotiation (or forces it by forcing a disassociate), records one step of that negotiation and replays it to the client. That has the side-effect of causing the client
39.
by g-clef 9y ago
Those aren't drug dealers (I've met a few, they didn't act like that...either that or I only met the really boring drug dealers). The only place you see "drug dealers" acting like that is tv/movies. "Suspi
40.
by g-clef 9y ago
King & Union | Front-end developer | Washington, DC | ONSITE FULL-TIME The point: We are making the threat intelligence process run more smoothly and helping organizations share threat data better. Our solution pulls threat information
41.
by g-clef 9y ago
Thought 1: Correlation/causation. It's not clear if the house causes the higher likelihood of failure or if the folks who are more likely to fail are drawn to the house. I can see arguments for both. Thought 2: I don't think
42.
by g-clef 9y ago
From the article: The demise of Senior House is emblematic of a larger shift on campuses across the US. Last year my own alma mater, Wesleyan University, closed down its countercultural house Eclectic, which had existed for a century. A few
43.
by g-clef 9y ago
King & Union | Front-end developer | Washington, DC | ONSITE FULL-TIME The point: We are making the threat intelligence process run more smoothly and helping organizations share threat data better. Our solution pulls threat information
44.
by g-clef 9y ago
Everything you do is political in some way. Saying that you're worried about DNS becoming a political football implies it isn't already. It is. From ICANN's self-serving lunacy (don't lift that rock unless you have time
45.
by g-clef 9y ago
King & Union | Front-end developer | Washington, DC | ONSITE FULL-TIME The point: We are making the threat intelligence process run more smoothly and helping organizations share threat data better. Our solution pulls threat information
46.
by g-clef 9y ago
King & Union | Front-end developer | Washington, DC | ONSITE FULL-TIME K&U is a pre-A-round security startup. We are trying to make the threat intelligence process run more smoothly and help organizations share threat data better. W
47.
by g-clef 9y ago
The experts (no scare quotes needed, they really are experts) were commenting on the story's facts as presented. There was no need to read the source of whatsapp, as the facts as stated in the original article were overblown and based
48.
by g-clef 9y ago
I feel like the rule should be fairly simple: your organization should match the ethnic and gender breakdown of the area it's offices are in. So, for example, if Silicon Valley is 10% African Americans (I have no idea if that # if true
49.
by g-clef 9y ago
Not only is hacking them illegal, but trying to sell them services after that could easily be seen as an attempt at blackmail. It's a profoundly bad idea.
50.
by g-clef 10y ago
That was my first thought when I saw the headline "I bet it's lxml". I have lost count of the number of times I've had to do special nonsense to handle lxml's memory leaks. (I've even had to go so far as to lau
51.
by g-clef 11y ago
Yeah, I noticed this at the time when I was looking for users resolving recently-registered domains (to try to find hacked systems). One of my users resolved & then went to ahhhhhhhhh.com, which had only been registered a few weeks befo
52.
by g-clef 11y ago
I hear someone just released the full corpus of Reddit comments...
53.
by g-clef 11y ago
FYI, opennic is far more than just an alternative resolver to OpenDNS. OpenNIC is running an alternative set of roots, with TLDs that aren't agreed to by the regular DNS-managing bodies (like ICANN). That may be fine with you (opinion
54.
by g-clef 11y ago
you'd handle that in the same way you'd handle it in IPv4: either a static assignment & a tracking process to avoid collisions, or static assignments in DHCP. DHCP6 does exist, and static assignments within a DHCP scope is a v
55.
by g-clef 11y ago
Not necessarily. One of the interesting results from LADEE was that the measured lunar dust increased a few hours before the probe landed (attributed possibly to the geminid meteor shower). There's lots of stuff that can kick dust of
56.
by g-clef 11y ago
The moon is a pretty bad place for any long-term base...lunar dust is really hard on equipment. The l4/l5 points, though, are very interesting and there's a bunch of projects putting probes at the various l4/l5 points in the
57.
by g-clef 12y ago
True. What most people are complaining about is that it's dynamically typed, not weakly typed. That's where most of the confusion sets in.
58.
by g-clef 12y ago
All of the people the EFF says to tweet to are Democrats...in a Republican-controlled house. This seems like an ineffectual strategy. They should be trying to sway influential Republicans in the House, to make it clear that opposition to th