genmud

40 ms·

451.
by genmud 5y ago
I’m gonna be honest, having worked in infosec for nearly 2 decades, I don’t trust programmers unless there is extensive testing and almost all inputs are controlled. I would be all for having separate lanes where autonomous vehicles could d
452.
by genmud 5y ago
> Kaseya’s VSA product has unfortunately been the victim of a sophisticated cyberattack. Due to our teams’ fast response, we believe that this has been localized to a very small number of on-premises customers only. Great job patting y
453.
by genmud 5y ago
One thing that you learn quickly when traveling the world is how easily one can go from having a good time with your friends, to being in a shitty prison without food, running water or a phone to let your family know if you are dead or aliv
454.
by genmud 5y ago
Nobody is saying you should go to jail or get fined for getting owned by a 0day. I don't think that it is unreasonable to say that someone is negligent in having a CVE from 2014 unpatched, which then allows your customers to get compro
455.
by genmud 5y ago
How is this comment shocking to you? I actually was using the stock price and public information on their earnings to make a point. The point being that no, these companies aren't losing customers in droves and if you look at their per
456.
by genmud 5y ago
Uh... maybe Russia has a bad rap: By providing cybercriminals a safe harbor to carry out their attacks. By refusing to cooperate with foreign LE unless they have targeted RU citizens. By using the LE/MLAT requests that are sent to them
457.
by genmud 5y ago
If I am being frank, based on anecdotes I have heard, Equifax had their heads so far up their asses that they basically had to rebuild their entire infrastructure because it was an unmitigated disaster. This was a conscious business decisio
458.
by genmud 5y ago
> You have no clue how businesses work if you seriously think that an additional, unexpected $400 million in expenses (almost 50% of their yearly net profits) "isn't a huge impact to them". That's really all that has
459.
by genmud 5y ago
On one hand, JFC... on the other hand, at least they noticed, notified and rotated the keys. So many companies are like "oh, we didn't expose it to anyone, so we don't need to roll them". They then proceed to break their
460.
by genmud 5y ago
If you compare year over year, many of the things they attribute to the breach are actually just IT/overhead costs they were able to shift to a loss. If you look at their EBITDA, everything is essentially static. In the grand scheme of
461.
by genmud 5y ago
Dude, if you look at Equifaxes and Solarwinds EBITDA/earnings statements following their respective breaches, you will clearly see that there has been no major impact to their bottom line. Sure, expenses rise a bit for a short period
462.
by genmud 5y ago
After the Equifax breach, everyone learned that until there are actual repercussions for cyber attacks (like fines and people going to jail for negligence), if you can weather the storm, over the course of a year or two, there is effectivel
463.
by genmud 5y ago
Depends on what you are looking for and what your lifestyle is. For me, in PHX moving from a 3200 sqft place to a place in SF that was a 30-40 minutes commute (3bd, 1500sqft) would have changed my mortgage by at least 4k/month. But rea
464.
by genmud 5y ago
This is not good for Intel, though I will say that this is likely not anything that is within Gelsingers direct control. Likely years of poor decisions, middle management rot and other factors led to this. If I was an Intel investor, there
465.
by genmud 5y ago
This is one of my favorite spy devices ever. One of these days I want to create a replica using a wood CNC and use it as a demo, that would be so friggin cool.
466.
by genmud 5y ago
This brings back memories of one time being told by a Cisco engineer in the late 90's or early 2000's that a buffer overflow wasn't a critical issue because it only impacted the control plane of a router. Oh and I also found
467.
by genmud 5y ago
How important it is to read employment offers from a worst case perspective and redline shit that isn't defined, even if you have a verbal agreement on what something means. Am currently dealing with my (soon to be former) company tryi
468.
by genmud 5y ago
Is it though? If you have 7 users Monday, make a big change on Tuesday and now on Wednesday have 4 users, which then stays the same count for years. Is that really better for your community? To stay static and not grow, as every other socia
469.
by genmud 5y ago
Surely you jest.
470.
by genmud 5y ago
3. Branding I think one of the big things as well that propelled Git to win was the fact that it was "made by the guy who does linux", easy to remember and later GitHub/GitLab reinforced that branding. I was a huge mercurial
471.
by genmud 5y ago
Unfortunately, that is incorrect understanding. In the context of stuff like this, "untrusted code" can be so many different things, it isn't just being able to run an executable... The issue with these vulnerabilities is the
472.
by genmud 5y ago
Yea, but it was a huge amount of their traffic [1] and they never have recovered [2]. Even during the pandemic, while people were spending more time online, tumblrs usage has been lackluster, while other sites like fb have had consistent gr
473.
by genmud 5y ago
> Sure, but which technology should USA reproduce. Just chips, and then be late on everything else? For ICs: Design, Fabs and Packaging should all be looked at from a national security standpoint. IMHO it needs to be viable to compete wi
474.
by genmud 5y ago
The problem with spectre/meltdown is they don't use standard calls to ask for memory of other processes... that is the vulnerability. If you were do to do per process mitigation it would need to prevent certain process execution f
475.
by genmud 5y ago
Async communication requires an intentional approach to be successful. If you treat slack like an office cooler or a replacement for meetings, then of course it’s going to feel synchronous. The authors assertion that the tool isn’t async be
476.
by genmud 5y ago
The only thing that surprises me is that this isn't a bigger number. Doing a quick google, there are over 1.4 million active duty people in the US military. Over 10 years, losing only ~2000 guns is actually not that many, lets say ~200
477.
by genmud 5y ago
Not saying it is related to Taiwan, but having planes up in the air before shit hits the fan is probably a wise move. Even if something happens really far away, its best to have patrols just in case.
478.
by genmud 5y ago
I didn't even realize I needed this in my life.
479.
by genmud 5y ago
Unfortunately there isn't. Dropbox/GSuite are going to be your best bet... The problem is that binary files are hard to version control. I have found that using google drive/gsuite folders to work well for templated things an
480.
by genmud 5y ago
It also had a much bigger user base.

More ›