mox1

30 ms·

241.
by mox1 6y ago
Yep, I have a friend who works there. Not looking good right now.
242.
by mox1 6y ago
Again, whats the point of "handing someone a CVE?" Literally just make a post somewhere on the internet and let people see it there. If a CVE shows up, add it to the top. If not, oh well. It should be 100% about getting the right
243.
by mox1 6y ago
Out of curiosity why would it matter if they "assign you" a CVE? If your intentions were purely altruistic then the CVE matters not. Just make a blog post with the details and link there. But if perhaps on some level you were afte
244.
by mox1 6y ago
this happened to me last night. I never asked to install Edge, it was part of some automatic windows update. Immediately after reboot, Edge goes fullscreen and pops up a unclosable modal window. It also puts an icon on the desktop and pinne
245.
by mox1 6y ago
Certificate pinning spoils that, no spoofing of certs with pinning. Cert (or hash of) delivered with app. If server cert doesn't match expected value coded into app, someone is messing with something, terminate connection.
246.
by mox1 6y ago
I mean you have more or less described a modern Cyber security Red Team.
247.
by mox1 6y ago
I suppose there is some theoretical upside to tiger attack insurance as well...doesn't mean my grandmother in Alaska should ever buy any.
248.
by mox1 6y ago
You say black hole, us security people call it a "hard problem". I mean lots of IT things are or end up being black holes. I will say though, usually, attitudes like yours end up causing more problems than they solve (casual dismi
249.
by mox1 6y ago
This is just not how corporations work, every corporation needs some type of secret sharing. CyberArk is a billion-dollar business. It includes an audit trail.
250.
by mox1 7y ago
I mean no BGP no global internet...just local lans and wans.
251.
by mox1 7y ago
And food banks tend to provide groceries, which is good for people with fridges and pantries..not as helpful for homeless or people living in their cars, friends couches, etc.
252.
by mox1 7y ago
So if they hadn't done these buybacks, they could have deployed the capital in a number of different areas, including paying down existing debt. They now could add additional debt (bonds, loans, etc) at good rates. In general in person
253.
by mox1 7y ago
Some parts. But for a car sold in all 50 states a general heat pump isn't going to work. Some areas can get down to -20F, even -40F in the winter and this is major metropolitan cities. Perhaps this is a new type of heat pump or it sour
254.
by mox1 7y ago
How do you E2E encrypt a video stream and still allow adaptive bit rates? If the server can't read (decrypt) the video, it cannot re-encode the video at different bitrates for different clients. Or the Zoom client has to encode multipl
255.
by mox1 7y ago
It's a overnight loan, backed by US Treasuries of some type (ie Bond's guaranteed by US Government). Bank gives Bond, Fed gives $$, swap back a few hours later. The closest analogy would be a homeowner offering their house as coll
256.
by mox1 7y ago
Some race cars [1] put fans under the cars, sucking upward. This effectively created a vacuum under the car and allowed it to stick to the road pretty well. It was more for cornering fast than straight-line acceleration. But modern race car
257.
by mox1 7y ago
What you are referring to is “timing the market”, which is a strategy I suppose. Just not one a lot of investors consider valid.
258.
by mox1 7y ago
So if you follow the AirBnB host forums at all, anything less than a five star(absolute best possible) review is considered bad. Hosts flip out all the time on 4-star reviews. They loose can "superhost" status and other such thing
259.
by mox1 7y ago
Perhaps you don't even need to convince Cisco. Just find some vulnerabilities in their OS, sit on them and pull them out when you need. I wonder what percentage of internet connections hops through a cisco device at some point...?
260.
by mox1 7y ago
I recently upgraded my home router to DNS over HTTP (pfSense now supports it pretty easily). I started with Quad9 (9.9.9.9) and Cloudflare as a backup (1.1.1.1). One thing I noticed right away was that my ping times to Cloudflare ended up b
261.
by mox1 7y ago
Ohh your very right. The sales team is very focused on "selling" to the CISO (rightly so I suppose). I was part of a team that got the big sales pitch. Little technical details, high on "let us handle this for you, we know ha
262.
by mox1 7y ago
I think its perfectly reasonable to do this. As someone who would love to be a remote worker as long as my total comp package is acceptable to me, I don't really give a crap if they are paying someone in SF 25% more. I would more look
263.
by mox1 7y ago
The NSA will pass information like this to the FBI as well (through the NCIJTF). They usually omit / redline enough information to make it Unclassified.
264.
by mox1 7y ago
Eh, while this happens its getting rarer and rarer. Execs know that if a cybersecurity issue is brought to them they kinda have to take it seriously (in 2020 anyways) or be the next Experian. Edit: whoops Equifax, not Experian
265.
by mox1 7y ago
I'm currently teaching a Bootcamp by one of the major players in this space. 100% in classroom. On week 12 of 24. It's a side / fun job for me. Not my day job. While I disagree they are "crap", it's definitely
266.
by mox1 7y ago
Is "T2D3" right for you!? Isn't that kinda like asking if you want to run a Billion dollar company? No shit, yes it is right for me! Sign me up, I'll T2D3 whatever ya got, worst case scenario I end up in a drinking grou
267.
by mox1 7y ago
Benefit to whom? There are at least 3 parties involved in every VC funded startup, the company, the investors and the customers. Growing as fast a possbile and becoming a market leader benefits 1 perhaps 2 of those. I would argue usually be
268.
by mox1 7y ago
+1 for @coleifer, peewee is an awesome ORM, he knows his DB stuff very well.
269.
by mox1 7y ago
So it's ok for police to guard a NFL game, but not the movement of millions of dollars of goods? How does the police draw the line on what work to accept?, do you apply and then a committee decides? Can a police officer do this after h
270.
by mox1 7y ago
There's a very long tail of used cars. When you are talking CPO (certified pre-owned), you are talking 0-3 years old, with perhaps 50,000 miles or less (15k-30k probably the sweet spot). Sometimes these can be a good deal, sometimes yo

More ›