konceptz

9 ms·

31.
API Security vs. Web Application Security Part 1: A Brief History(medium.com)
1 points by konceptz 8y ago|0 comments
32.
SunTrust warns ex-employee may have shared info on 1.5M clients(cnbc.com)
2 points by konceptz 8y ago|0 comments
33.
by konceptz 8y ago
Thanks to both of you for the details.
34.
by konceptz 8y ago
I’ve always been told that transmission of electricity is hard or inefficient. What is HVDC and why is it better?
35.
by konceptz 9y ago
Do you have a source for these statistics? You put merit in quotes and then stated percentages plus the claim that there is a growth in similar IQ partnering.
36.
by konceptz 9y ago
In many states (all of them?) landlords are specifically not legally allowed to “just pop in” without reasonable cause or sufficient notice. So yes I agree with your statement but in this example it’s already a law.
37.
by konceptz 9y ago
This made me think of the article a while back about the mattress blogger who got sued. https://www.fastcompany.com/3065928/sleepopolis-casper-blogg...
38.
by konceptz 9y ago
Before we just jump on Apple we should probably see if we can recreate the issue. The article stated that another user could not replicate this issue and the original researcher was also unable to replicate after a possible stealth update.
39.
by konceptz 9y ago
The next thing people will check may be insider trading: https://www.nasdaq.com/symbol/ua/insider-trades Can anyone more versed in this do a quick look for abnormal behavior?
40.
by konceptz 9y ago
Or one attacker with (intentionally) multiple intents.
41.
by konceptz 9y ago
One area to explore is the editor listed as David Paulk. https://www.linkedin.com/in/davidpaulk/ https://twitter.com/davidpaulk At first glance his twitter feed looks pretty normal for a journalis
42.
by konceptz 9y ago
>Do you think it's a coincidence that a stereotypical Asian American is reserved, disciplined, and good at math, and that Asian Americans in America make considerably more than any other race[1]? You are stating a set of what you be
43.
by konceptz 9y ago
It shouldn’t be hard for Apple to “prove” that there are benefits, outside of maxing profit, to having a sealed battery.
44.
by konceptz 9y ago
I’m reading these comments particularly for the “niche audience” reactions. It’s one of my many valued information gathering destinations on the road to forming an opinion.
45.
by konceptz 9y ago
I’ve seen one case, not saying the generic model is not an issue, where this was particularly bad. In a thick client built on web, there was absolutely no indication of redirection because the app’s window showed only content. Plus it was s
46.
by konceptz 9y ago
"I’m used to writing in dynamic programming languages, which definitely do not process 1GB files in 0.25 seconds. Fun!" 1GB in .25 seconds = 4GB in 1 second. Kind of a simplistic takeaway considering the article's title.
47.
by konceptz 9y ago
The interesting issue I find in this post is that nextdoor stated that this is a “private network”. While probably not using a technical definition, it still seems to overreach quite a bit. I haven’t heard of a forum claiming to be this bef
48.
Equifax Breach Caused by Lone Employee’s Error, Former C.E.O. Says(mobile.nytimes.com)
1 points by konceptz 9y ago|0 comments
49.
by konceptz 9y ago
#2 is more than just production scanning. Open source vulnerability management is a technology process that has levels of maturity. That being said, a freeware tool could have spotted this right away.
50.
by konceptz 9y ago
“cybersecurity experts from the law firm King & Spalding“ Did it strike anyone as disheartening that legal was the first call?
51.
by konceptz 9y ago
Encrypted communication of sensitive materials is certainly a mitigation. But I ask you this, are you required to PGP internal conversation about clients?
52.
by konceptz 9y ago
Right. Consider the consulting costs, billed internally, to do all the things. It would destroy margin to spend the same on yourself as your largest clients spend on you.
53.
by konceptz 9y ago
A breach of emails at a cyber security consulting firm (among other things) is very serious. It gives an attacker (consider a criminal organization) a look at a large number of private firms. On the non technical side is may disclose cybe
54.
by konceptz 9y ago
Apple is not just a vendor of hardware. Would it be less tricky if it was an operating system vendor? If one of the Linux distros packages a default browser with this block would you say the same?
55.
S.E.C. Says It Was a Victim of Computer Hacking Last Year(mobile.nytimes.com)
3 points by konceptz 9y ago|0 comments
56.
Equifax’s security chief had some problems, but being a music major wasn’t one(washingtonpost.com)
20 points by konceptz 9y ago|10 comments
57.
by konceptz 9y ago
"The vulnerability provided full RCE, and I know of no info-sec magic that inoculates you against that." Not really accurate because the exploit name, especially as generic as RCE, does not tell you how it was done. RCE can be a n
58.
by konceptz 9y ago
So the company stated that they (3 of them) did not know about the breach. I'm interested in what it takes to begin an investigation?
59.
by konceptz 9y ago
Good points. You say an order of magnitude, do you have any information about generational increases? Like was last generation an order of magnitude worse than what you worked on?
60.
by konceptz 9y ago
I have the same quandary while traveling abroad. Giving your fingerprints while entering a country means you're giving the country your passwords.

More ›