jfrunyon

70 ms·

781.
by jfrunyon 6y ago
I think it's more that companies who did not previously offer 2FA, are offering only SMS-based 2FA. Not that companies who previously offered TOTP 2FA are now only offering SMS-based 2FA.
782.
by jfrunyon 6y ago
> Then it resorts to suggesting I try passwords I remember using on this account. I don't know what happens if I give it a password I haven't used for a few years I can't say what it does currently but it used to say somet
783.
by jfrunyon 6y ago
Note that it sends a code to your phone which is logged into your Google account , via a (presumably/allegedly, but at least it's not SMS) secure channel. (Actually, it doesn't send a code to your phone. It either sends a pr
784.
by jfrunyon 6y ago
> SMS is a great recovery factor No. Send me an email, let me upload my ID, anything but SMS. SMS is completely insecure. Not only can it be passively sniffed along the way, not only can malicious actors intercept it without access, no
785.
by jfrunyon 6y ago
More and more services are supporting - or worse, requiring - SMS-based or phone-based 2FA. Moreover, people frequently do not "have it in their power" not to use a particular service. For example, I decided to log in to Fidelit
786.
by jfrunyon 6y ago
Reminder: SMS 2FA adds only a negligible amount of security, if your company does 2FA via SMS you're doing nothing more than lulling your users into a false sense of security. Don't do it. Support proper 2FA. (And while you'r
787.
by jfrunyon 6y ago
Cloudflare publicly states that they use a zero trust networking model. So, you can disagree with the facts all you want, but it won't change them. BTW, the central controller for these cameras is "in the cloud". That's
788.
by jfrunyon 6y ago
He does indeed mention that. However, as he is not Google, I'm not sure how he could possibly know that.
789.
by jfrunyon 6y ago
https://en.wikipedia.org/wiki/Modular_data_center Container DCs were a big thing for a while. Even Google did a whole PR thing about how they used them.
790.
by jfrunyon 6y ago
IMHO, the part they had no plan for was being unable to just require their employees to come in anyway...
791.
by jfrunyon 6y ago
They're waiting an awful long time to do the one at BHS-7 if so: 14 days from now?
792.
by jfrunyon 6y ago
Servers are at a mix of "cloud" providers, and on-site. Most data (including system configs!) is backed up on-site nightly, and to B2 nightly with historical copies - and critical data is also live-replicated to our international
793.
by jfrunyon 6y ago
It's very interesting that both Cloudflare and Tesla have the exact same disk setup on such important systems on their corporate networks, down to the numerous strangely small partitions on MMC. Oh, wait, neither Cloudflare nor Okta we
794.
by jfrunyon 6y ago
With proper security policies in place, creating a flawed key would also "not be as trivial as some people would imagine". The issue which you claimed is that one can not determine whether or not the other party is following prope
795.
by jfrunyon 6y ago
Git: Malicious repositories can execute remote code while cloning on a case-insensitive filesystem with symlinks FTFY
796.
by jfrunyon 6y ago
Clearly someone didn't read enough science fiction to know injectable robots ALWAYS ends up destroying the world. I sure hope this works!
797.
by jfrunyon 6y ago
More like "well tuned JS will be nearly as fast as poorly tuned C code"...
798.
by jfrunyon 6y ago
Welcome to JavaScript.
799.
by jfrunyon 6y ago
I'm not sure why you think that it being an island has anything to do with anything. It doesn't. Yes, the fact that they LOCKED DOWN had a lot to do with why their infection rate is so low. That is exactly my point; thank you for
800.
by jfrunyon 6y ago
Again, no matter how secure you make the cryptography, the weakpoint is the key. Why would someone "tweak" a key, provide it to a "big commercial company" (who for some reason doesn't generate their own key?), inste
801.
by jfrunyon 6y ago
Why would someone backdoor their own key when they could instead just mirror the data or something? Yes, the person you are encrypting something towards is responsible for ensuring that encryption is secure. No matter how secure you make th
802.
by jfrunyon 6y ago
Nobody has tried to claim that at any point in this thread. You are the only one trying to reduce this to a two-sided issue, which it's not.
803.
by jfrunyon 6y ago
No. First, how do YOU explain Australia having 900 deaths for 25m people, and the US having OVER FIVE HUNDRED TIMES THAT (499k) for 328m?
804.
by jfrunyon 6y ago
Why not simply use an off-the-shelf frame? As others have already said, the bezel is very big compared to the whole product. I'm sure you could find something that would look nice enough, and cost you far less than any custom-made wood
805.
by jfrunyon 6y ago
Both of my corrections are right, but thanks for doubling down on something that's false with no evidence. - Charity vs non-profit: https://www.irs.gov/charities-non-profits/charitable-organiz... > To be tax-ex
806.
by jfrunyon 6y ago
"You have to pay us in some cases" is not the same as "free", no matter how you try to weasel it.
807.
by jfrunyon 6y ago
> As rudimentary as it may seem now — both users needed a machine to type messages back and forth on what was called TTY, Telecommunications Device for the Deaf "TTY" and "TDD" are not the same thing > "My fat
808.
by jfrunyon 6y ago
There's a userscript manager built into your browser: it's called "extensions". No, I'm serious. Yes, extensions come with extra complexity, but that's because they have things like permissions, so that you don
809.
by jfrunyon 6y ago
TTY has been around since the 1800s. He did not invent the TTY. He invented the TDD.
810.
by jfrunyon 6y ago
"We give it free!" "... for a percentage of their revenue"

More ›