kiallmacinnes

12 ms·

61.
by kiallmacinnes 7y ago
> I guess the issue is that very little discovered internally will ever be publicly disclosed. It feels like a tactic to make themselves look more secure than others when that is not likely the case. Agreed, and I don't think for a
62.
by kiallmacinnes 7y ago
Power? I don't see much power being granted here. And if you rule out "all companies like Google", you've basically ruled out everyone with enough capital to donate to research, depending on your definition of "like
63.
by kiallmacinnes 7y ago
I suspect it's large companies, given the names provided. Really, I don't get peoples hatred for Project Zero. Sure, hate the companies, but can you seriously argue that companies spending money on security research is a bad thing
64.
by kiallmacinnes 7y ago
I think you misunderstood the parent comment :) Regardless of where the cert store is, it came with some CA certs "in the box". Pinning applies to these CAs. Any CA's added by the end user (aka person at the keyboard, or ente
65.
by kiallmacinnes 7y ago
Microsoft employs many contractors, we tend to call them "vendor staff" internally. More often than not these people will come from external companies who supply the staff, but they will be based on-site and embedded onto a team f
66.
by kiallmacinnes 7y ago
I believe it does use MAC addresses, just obviously the link layer is different. I'm not 100% certain though as I haven't gone deep into 4G!
67.
by kiallmacinnes 7y ago
> AFAIK this wouldn't work because MAC addresses don't get forwarded to the next network segment Finally! I was scrolling down the comments, starting to think nobody on HN knew networking enough to notice this. MAC addresses ne
68.
by kiallmacinnes 7y ago
Does this change anything though? The internet has many of these SPOF services. And even more AS's who through malice or fluke can take trigger a failure of those SPOFs + more. At the end of the day, that sounds like a massive pile of
69.
by kiallmacinnes 7y ago
My understanding, and I could be wrong, is that the breach started 2 years prior to acquisition, and continued to be exploited until sometime in 2018 - several years after the acquisition. And, regardless, if a company violates the GDPR the
70.
by kiallmacinnes 7y ago
To play devils advocate.. is this really true? Or do we just only hear about bans/reinstatements from people who are "able to attract attention"?
71.
by kiallmacinnes 7y ago
Well, kinda! Just look at this recent CloudFlare blog post[1]. It's true, theres no Single Point of Failure - there are MANY points of failure ;) [1]: https://blog.cloudflare.com/how-verizon-and-a-bgp-optimizer-...
72.
by kiallmacinnes 7y ago
> The potential for some form of organization to be run under the auspices of the Linux Foundation is also among the options. That's one of the potential outcomes discussed in the article...
73.
by kiallmacinnes 7y ago
> If I were them, I would be looking for an opportunity to arrange to have at least one non-Googler on the core Go team, for the same reasons. That's how I read the 50 or so out of 100 approvers as being Google. That means 50 (or so
74.
by kiallmacinnes 7y ago
> All the IBM Cloud core engineering teams are based in the US which I strongly agree with. Have a nice day! All US based really is not a selling point. As a European, I wouldn't bet my company (if I had one ;)) on a provider who&#x
75.
by kiallmacinnes 7y ago
What if I accidentally contributed a little bit too much code to the Linux kernel? What if that code had been in the last 10 releases? What about the users and distributions running those versions? I'm not sure the answer is, or should
76.
by kiallmacinnes 7y ago
Most phones use Assisted GPS. It's a combination of cell tower triangulation and GPS. You'll get a potentially inaccurate "GPS" location based on the cell towers and signals you can see, and this will eventually turn i
77.
by kiallmacinnes 7y ago
If all you care about is your SSH key not being stolen, then you can very easily use a YubiKey (or other smartcard..) with SSH via either GPG or PKCS11. Both will mean your key never leaves your YubiKey (or other smartcard...). This doesn&#
78.
by kiallmacinnes 7y ago
To be fair, the WiFi connection is off, it's just the radio is not... It's not so much a lie, rather it's an implementation that covers the average persons expectations 100%, but keeps something they might not want , but wer
79.
by kiallmacinnes 8y ago
Another few possibilities for this which were not mentioned in the article: * Check that all your APs are broadcasting the same name. No devices I know of will naturally roam to an AP with a different name. * Check that all your APs are bro
80.
by kiallmacinnes 8y ago
You're right in that, your neighbours likely won't do the same thing... But you loose nothing by turning the AP power down to a level that covers the necessary area... In a sense, it's lose-lose, but you can choose the higher
81.
by kiallmacinnes 8y ago
You're of course right, that page is serving HTML/CSS/JS - but that's kinda nitpicking. It roughly akin to me saying "my Golang on Linux program is 100% C code free - no C is used in the execution of my code!"
82.
by kiallmacinnes 8y ago
I think the intent is that, there is no web UI for the product itself. The UI for product itself is a terminal program, accessed via either SSH, or a web based terminal client. The product UI has zero HTML/CSS/etc.
83.
by kiallmacinnes 8y ago
Is that ran by SalesForce? If so, could they be subsidising it?
84.
by kiallmacinnes 8y ago
It asked how many possible choices are there, 000 through 999 is 1000 choices, just as there are 10 numbers between 0 and 9 inclusive. (Yes, the Q also said each digit must be unique, hence the real answer is 720). Anyway - IMO this is a te
85.
by kiallmacinnes 8y ago
Oh, well that's totally different then. Still feels weird to "consume" other potential model numbers like that though :)
86.
by kiallmacinnes 8y ago
That's just awful practice! It's got a name, use it! (Yes, that sorta stuff annoys me ;) e.g. people talking about v2.04 of $project, when they really mean v0.204 - sure, I get it, but at some point the searchability for issues on
87.
by kiallmacinnes 8y ago
I'd be very curious what the timelines between each step looks like.. any insight?
88.
by kiallmacinnes 8y ago
"Normal" people don't know that kinda stuff.. Let's be honest, they make many of their assumptions from TV and Movies - and often those disaster movies focus on the world grinding to a halt because "the satellite ne
89.
by kiallmacinnes 8y ago
Honestly, I'm not so sure. Emacs isn't known to be user friendly, I can easily imagine many non-techies simply refusing (consciously or, more likely, unconsciously..) to learn it.
90.
by kiallmacinnes 8y ago
There is a downside to this though .. For this bakery, if you hire someone, theres a reasonable chance they can use a spreadsheet (maybe not add new recipes etc, but use..). I'd bet is very unlikely the same will be true of SQL and ema

More ›