icecap12

15 ms·

31.
by icecap12 5y ago
Nowadays, I tell developers and product owners around me that cybersecurity is basically about 'doing IT well.' There tends to be this attitude at my $BIGCORP that its a box you tick or its something you do to get done - when in
32.
by icecap12 5y ago
The key difference is that it's a conscious choice on the part of the parents to invest in the child's education. But there are other factors. For example, most private education at the gradeschool level requires heavy parent in
33.
by icecap12 5y ago
This is no shock if you are friends with any teachers or have kids of school age. My wife and I have 5 close friends who are all public school teachers (2 of the 5 are a married couple). 4 of the 5 send their kids to private schools. I t
34.
by icecap12 5y ago
Are you me? I bought mine in about 2006 or so, and in early December 2021, I had to take it apart to remove a child's sock that had been sucked into the pump. Youtube and a couple hours on a Saturday afternoon got it done, my wife wa
35.
by icecap12 5y ago
OpenWRT is definitely the single best option, however there is very limited support for the WiFi6 routers. If you're upgrading to 6 or 6E, as I was this last month, I found few options for OpenWRT. However, I already operate OPNSense
36.
by icecap12 5y ago
At a minimum, I got a good solid laugh out of this, and enjoyed the read. That helped distract me from the log4shell life.
37.
by icecap12 5y ago
I have an acquaintance that's a mid-to-high level FBI agent. In casual conversation, he's eluded on more than one occasion that the government is able to track people using TOR. I believe his exact words were "we've go
38.
by icecap12 5y ago
I remember my reaction the first time I looked at some code produced by FrontPage: "what the fuck?" Like others have mentioned, the volume of useless code produced by those visually-driven HTML editors was ridiculous. Took forev
39.
by icecap12 5y ago
Wow - amazing link. Thanks!
40.
by icecap12 5y ago
> The difference is when it's an institution (private versus public schools for example), that's pretty easy to disagree over. One side does not believe the other is inherently evil and a 'lesser' person. When it&#x27
41.
by icecap12 5y ago
I'm guilty of effectively ending friendships after seeing things former-friends have posted or stated online. In most cases, their posts or social media content revealed fundamental hypocrisy in what they said versus how they lived, o
42.
by icecap12 5y ago
A WAF is obviously not a control designed to be a full-scale replacement for good input validation and development best practices. So yes, its inherent that there are fundamental weaknesses to WAFs. However, there are still benefits. You
43.
by icecap12 5y ago
Agreed, Terminal is pretty nice for casual use.
44.
by icecap12 5y ago
Huhn. My wife's Pixel 3 broke just days before the 5a was released (this happened just a few weeks ago). Her LTE radio seemed to be having problems. It wouldn't connect to the cell tower, even after a factory reset. Sometimes,
45.
by icecap12 5y ago
Wiz is definitely trying to drum up some excitement around their new business with all these recent disclosures. Related but slightly off topic, we pay an industry analyst for high level market research and he's been screaming from th
46.
by icecap12 5y ago
The comment on "complexity-as-a-service" resonates. IMHO, it's primarily because they want to make a product out of everything, including stuff companies build to manage their own AWS implementations. Instead of a simple li
47.
by icecap12 5y ago
Nice tool. Reminds me a bit of amiunique.org, which provides similar browser diversity and fingerprinting details.
48.
by icecap12 5y ago
Just a guess, but I think some of this is because they want to present the story at a big security conference.
49.
by icecap12 5y ago
Feels like a nation-state response. US Cyber Command? Either way, a chilling warning to organized hacking groups.
50.
by icecap12 5y ago
I guess I was hacking at a young age then. Obtaining the pak1.pak file from a friend who had the CD automatically turned the freeware version into the full version of the game. The tough part was transferring it over a 28.8 baud modem. T
51.
by icecap12 5y ago
opnsense is where it's at. Alot of pfsense users have been migrating off pfsense lately because of all the Netgate shenanigans.
52.
by icecap12 6y ago
Agreed - there are entire industries that simply have not caught up with secure management of paperwork, PII and financial information. To be frank, I'm not sure how that's possible with all the regulation. The mortgage industry
53.
by icecap12 6y ago
I recommend your site to my junior AppSec folks, and I used your Capital One walkthrough two years ago to explain the hack to our business. Well done, really love the site.
54.
by icecap12 6y ago
Nice write-up, I'm happy to hear it was only stage 2! Colon cancer runs rampant in my family. My dad was a stage 3 survivor (it's now been 12+ years), however his younger sister (my aunt) just died about 6 weeks ago after an 18 m
55.
by icecap12 6y ago
As others have said, there are plenty of useful aspects to WAF technology. For my organization in particular, we have a lot of legacy junk floating around, and the WAF is an easy way to add a layer of protection to stuff nobody is working
56.
by icecap12 6y ago
I guess you never saw the superbowl ads of years past.
57.
by icecap12 7y ago
Kudos to BHIS for the post and detail. I've been seeing these pop into my Google Calendar randomly for the past few weeks; obvious phishing attacks. You can easily delete them of course, but definitely an annoyance.