gepeto42

10 ms·

61.
by gepeto42 5y ago
Thanks. There is no need to keep most security controls for common tools secret, and the more organisations discussing how they do it the better. For example, a small org with no security people or a non-profit could be made much more secur
62.
by gepeto42 5y ago
This is how we secure Workspace here at Fleet. We figured the guide could be useful to companies of a similar size. The next step would be to enable Endpoint Verification to control access to specific apps such as Drive so it could only be
63.
A practical guide to securing Google Workspace for a startup(fleetdm.com)
261 points by gepeto42 5y ago|62 comments
64.
Security talent in non-US locations like Montreal(linkedin.com)
2 points by gepeto42 5y ago|0 comments
65.
by gepeto42 5y ago
It depends what you’re allowing it for. For most companies, letting people use gmail with strong authentication and short sessions on personal computers that are patched, encrypted and up to date is a very small risk compared to the product
66.
Apply BYOD to soothe supply chain pain(blog.fleetdm.com)
5 points by gepeto42 5y ago|3 comments
67.
by gepeto42 8y ago
Reminds me of the old plastic iBooks (white ones) which would either snag the cables in the housing, or have the backlight power lines crack in the logic board.
68.
by gepeto42 8y ago
Define "evidence".
69.
by gepeto42 8y ago
I found that the easiest way to do it on Mac is to download the Chrome Enterprise bundle, edit the .plist and convert it to a profile with McxToProfile, to get something like this: https://twitter.com/gepeto42/status&#x
70.
by gepeto42 8y ago
And yet, it does not mean you would not re-run queries to confirm even if you did. I have encountered very few (not saying it's good, just that's how it is) companies with detailed database query+results logging that was stored fo
71.
by gepeto42 8y ago
Could it be that waking up the discrete GPU, on laptops that in some cases disable it by default on battery power, takes more juice than rendering in software on the CPU? Though I wonder how many MBPs in circulation have the dual-GPU confi
72.
by gepeto42 8y ago
It was about timeeeeeeeeeee
73.
by gepeto42 8y ago
Of course this is not to address the case where the recipient would take a screenshot. I still find disappearing messages useful to reduce attack surface if say, the phone gets taken away and unlocked by someone else, or a backup of it is f
74.
by gepeto42 8y ago
But they are not updating it. It would be better to kill it than to make us believe an update is coming. To be clear: I WANT a USB-C Mac Mini. Basically there's 5 ways Apple could get me to spend on new Mac hardware and none of them
75.
by gepeto42 8y ago
They should kill the Mac Mini. Until they do, I'll keep waiting and hoping for a Mac Mini with USB-C that can drive external monitors well. The iMac Pro is awesome, but the lack of target display mode makes it use a lot of space that c
76.
by gepeto42 8y ago
You're right, I think the last time the delay was this long was exactly that. Better (?) than the times Apple self-dropped 0day on themselves by disclosing Safari bugs that were not fixed on the other platforms I guess.
77.
by gepeto42 8y ago
I have seen this many times.
78.
by gepeto42 8y ago
Yes, and that is great, because iCloud backups are not. So I assume (TBD) that if you enable iMessages in iCloud, they do not need to be backed up as a part of the end to end encrypted iCloud backups, which would increase security for anyon
79.
by gepeto42 8y ago
There is always a delay. Usually the e-mail distribution goes out an hour or two after the update itself is released, and the support page gets updated a little bit after that.
80.
by gepeto42 8y ago
The state of SOHO router security is pretty sad. Sure, most of those infected were probably unpatched, possibly had remote-admin pages enabled, or were using default credentials but... why is it even possible to open the remote admin interf
81.
by gepeto42 8y ago
Not sure who said it first, but cryptocurrency truly is the Internet-wide bug bounty.
82.
by gepeto42 8y ago
That is exactly what I was hoping for. Too bad it'll take forever before iOS can use it, because the current state of VPN on Wi-Fi is terrible (I understand that is not the first thing WireGuard is looking to solve, but it'll be g
83.
by gepeto42 8y ago
I have not tried WireGuard yet. Is it more reliable than existing methods over "bad Wi-Fi"? I find that one of the best ways to make bad hotel or plane Wi-Fi completely unusable is to use a VPN, and having something more reliable
84.
by gepeto42 8y ago
Encryption plugins on top of other mail clients has always been a recipe for disaster. That being said, why would EFF tell people to completely uninstall it? When I hear that, I think "There is a crazy, in the wild, no user interaction
85.
by gepeto42 8y ago
The BSSID can be read too, so I don't think it's worth trying to figure out ways to add some obscurity to the SSID (no matter what downsides would come with that).
86.
by gepeto42 8y ago
Yeah, it was supposed to be - https://developer.apple.com/documentation/networkextension/n... Around iOS 9, Apple deprecated some of the Captive Portal APIs, then re-instated them, a lot of changes that went back
87.
by gepeto42 8y ago
They need to be much more aggressive towards apps that request access to the SSID of the current network. This is supposed to be limited, but in my experience, apps you would not expect to be doing that are doing it, and it's basically
88.
by gepeto42 8y ago
Yes, it would be better if those businesses had systems/APIs for those transactions to be done, but we still live in a world where scanning a sheet of paper that was printed and mailed to you with a phone often reduces friction on the
89.
by gepeto42 8y ago
Yes. This is a very old article I had written back in the iOS 9 days, it still mostly applies. A few warnings: 1 - Changing an iOS device to "Supervised" will wipe it (so you can't supervise someone else's device and dat
90.
by gepeto42 8y ago
Or, you could make your device supervised via MDM or Apple Device Configurator, and disable "Allow devices to pair with other computers". This will generate a keypair on the machine running Device Configurator + the iPhone, and no

More ›