kerng

45 ms·

541.
by kerng 6y ago
Yes, those are great features for compliance. But you seem to believe that your AWS instance is indeed yours. IAM is a concept built on top of lower level primitives that you do not control, but Amazon does. I'm not talking about Amazo
542.
by kerng 6y ago
Missing the point here. What does not wanting to reimburse alcohol in this case have to do with politics? Can you maybe share more context? Is the idea because people get drunk and talk politics?
543.
by kerng 6y ago
This is incorrect, at least from a logical POV and why it's hard to trust what cloud vendors say. A statement like this is either naive (most likely) or actively attempting to mislead. Technically, its absolutely possible. Most likely
544.
by kerng 6y ago
As a startup, if a company is serious in investing or buying they will make an offer. It's a common mistake to be lured into talks that drag out for weeks and months. If they are serious it will start with an offer.
545.
by kerng 6y ago
Gmail is by far not the best mail system - in enterprise settings it's possible the worst actually. Its cluttered, threads are unreadable, tiny window by default to write a message... maybe it was hip 16 years ago, but that's p
546.
by kerng 6y ago
When U2F is widely used, there will be more social engineering tricks - like, visit this attacker website or download this tool/browser extension, put cursor in box, now please touch your key to verify your identity. Countless creative
547.
by kerng 6y ago
What caught my attention is that if Facebook bans an account, you lose access to all other platforms that you used your FB account as identity - no way to appeal even appeal it seems. That can be quite intense if someone uses it a lot.
548.
Tech Lead got banned from Facebook (as a millionaire)(m.youtube.com)
5 points by kerng 6y ago|1 comments
549.
by kerng 6y ago
The best part are breakglass keys or certs! Who rotates them when someone who had access to one leaves the org? :)
550.
by kerng 6y ago
Yep, I'm actually not saying that VPNs are the right or only (no way) solution I just wanted to highlight that auth is complex and there are often loopholes.
551.
by kerng 6y ago
The better answer/question is maybe more about what kind of auth?
552.
by kerng 6y ago
My knowledge with Windows is a few years outdated but the way I recall it is that basically every DC by default is a DNS server (or at least the first DC that gets created) - because you need a name service if you want a useful Intranet. So
553.
by kerng 6y ago
Many startups and hip companies don't do VPNs anymore - unfortunately they also dont do Zero Trust (which would require machine certs for everything and be enforced) - so stuff is often available over Internet with password auth + mayb
554.
by kerng 6y ago
That's a good question - there was a time, not too long ago where every single tweet of Musk was spammed with BTC giveaways.
555.
by kerng 6y ago
I'd assume one closer to crypto, probably Elon Musk or Coinbase. Because the audience needs to know how to quickly send BTC. In addition, it's a running joke on Elon Musk's feed anyway where people constantly to do this using
556.
by kerng 6y ago
There is actually a post on Twitter from a bounty hunter who got awarded $7000 dollars or so from Twitter for ATO, and he puts that in relation now to what the adversaries are getting by exploiting things. The point is that bounty value of
557.
by kerng 6y ago
Maybe a front end/OAuth issue - those are not uncommon either. Will be interesting to learn more. Also begs the question, who is liable in such cases....
558.
by kerng 6y ago
This post requires a lot of context to make sense out of. Unless you are in the security space and familiar with what happened last 36 hours, it probably won't make much sense quickly. 1) Microsoft has a critical flaw in DNS server 2)
559.
by kerng 6y ago
I always thought I really disliked Outlook ( because of so many issues) until I worked for this well known startup and started using Gmail. Man, how I miss all the Outlook issues... at least it was good for reading/writing email. Disli
560.
by kerng 6y ago
Not really, most questions have answers and discussion threads - during an interview you can see people just writing up solutions flawlessly - they just memorised them. I have interviewed 100+ people. I don't think regular coding quest
561.
by kerng 6y ago
Just two weeks ago I moved to Matomo from Google Analytics- it works great, and it feels like a tiny little contribution to make the world a better place.
562.
by kerng 6y ago
This is what unconcious bias is in action, I guess. Statement was likely not intended to be harmful, rather to sound witty when making a point - but it is indeed offending if you think about the problem of age discrimination (especially in
563.
by kerng 6y ago
Also, goes the other way round.
564.
by kerng 6y ago
Assuming you get somehow reimbursed, like some companies that dont have corp issued phones?
565.
by kerng 6y ago
Interesting, but why is this possible in the first place on Android?
566.
by kerng 6y ago
This is especially true for reflected attacks, besides doing target spear phishing via email or messenger apps it won't be succesful. For persistent attacks, its mostly just sit and wait for an attacker - they don't really control
567.
by kerng 6y ago
The amount of ads I'm seeing on YouTube is pretty insane recently. Google must be under quite some pressure to make money.
568.
by kerng 6y ago
Microsoft will come to the rescue
569.
by kerng 6y ago
Article also states trust was lost with China (similar percentage numbers). Russia stayed about the same.
570.
by kerng 6y ago
>>Privacy is at the heart of everything we do What an opening statement. An ingenuine statement (not to call it a lie) like this actually prevented me to read further. Maybe a more genuine statement, like "Privacy is important to

More ›