naturalmovement

8 ms·

91.
by naturalmovement 4mo ago
> In the future I'm going to add a local battery backed alarm Wait, you have an office full of expensive equipment but decided to half-ass DIY the security? No wonder you were targeted. A proper monitored alarm system would have pre
92.
by naturalmovement 4mo ago
I'm having flashbacks from the late 90s/ early 00s when your company would hire a "Linux guy" that would force a large scale migration to some open source stack no one heard of, then only later worry about if any existin
93.
by naturalmovement 4mo ago
Some banks still use IIS. Every large company big enough to host an intranet is running IIS somewhere, possibly everywhere. It integrates well with AD so some really complex tasks become stupid simple. It's seeing less and less usage a
94.
by naturalmovement 4mo ago
I front all my honeypots with the IIS landing page precisely because it attracts black hat jagoffs. Nothing makes me happier than knowing I've wasted hours of their time chasing their own tails.
95.
by naturalmovement 4mo ago
There's a lot of collateral damage that could have been avoided if millions weren't being squandered on dubious "science" like studying grooming habits of trans aboriginals in the Central African Republic (a made-up scen
96.
by naturalmovement 4mo ago
> selling ads to scammers to prey on the elderly I thought that was YouTube's business model. Now if you'll excuse me I need to purchase some phony dick pills and diabetes snake oil to go with my fake NASA-designed air conditio
97.
by naturalmovement 4mo ago
Both can be true. There could be people fleeing that have lived there for some time, while being supplanted with newcomers. That would have a net zero effect.
98.
by naturalmovement 4mo ago
No wonder people are fleeing California in droves. There is absolutely no justification for a bill that high other than malfeasance or gross mismanagement. That is straight-up theft of your money. For comparison, I have double that plus ele
99.
by naturalmovement 4mo ago
I do, because YouTube mobile is now an atrocious SPA where you cannot copy the video URL from the browser anymore.
100.
by naturalmovement 4mo ago
It can honestly be annoying, if you're not privvy to it. I remember years ago needing urgent support for some bespoke European hardware we were developing software for. When we called support, we were greeted with a phone message stati
101.
by naturalmovement 4mo ago
Bruh it's one line in nginx config. > that no other website in the world does That you know of. Anywhere with stringent security it's everywhere.
102.
by naturalmovement 4mo ago
That's literally how client certificates work. It's not attempting to "read" anything, nor is it the least bit suspicious or malicious. Your browser was asked if it would like to present a certificate to authenticate, an
103.
by naturalmovement 4mo ago
Having rented a car and seeing 80 variations of "Ben's iPhone" in the Bluetooth pairing list leads me to believe 99.99% of society isn't worried about this. Another thing to consider is Honda may have signed these packag
104.
Tribblix: The retro Illumos distribution(tribblix.org)
86 points by naturalmovement 4mo ago|29 comments
105.
by naturalmovement 4mo ago
If I'm reading the room, the sentiment is Honda is incompetent and their cars are security holes on wheels. But if the opposite happened, they would be technofascists locking us out of our own cars, a 30 post sub-thread "this is w
106.
by naturalmovement 4mo ago
[flagged]
107.
by naturalmovement 4mo ago
Using x86 in embedded products is not new, especially older ones from the 90s, it was extremely common actually to run DOS or VXworks or QNX. It's all over industrial products. In fact Intel still shipped 386 CPUs until a few years ago
108.
by naturalmovement 4mo ago
> AUR isn't a package repo. What does the 'R' in AUR stand for? Rutabaga?
109.
by naturalmovement 4mo ago
The BSDs prevent this by never having allowed random jamokes to upload Makefiles into the ports system.
110.
by naturalmovement 4mo ago
Uh but this isn't random git repos these are packages available through the OS's repos. Why does the AUR even exist if not for malware distribution? It's an uncontrolled free-for-all disguised as a watering hole. If they can&
111.
by naturalmovement 4mo ago
They have a hard enough time managing the relatively few certificates for secure boot. You want me to believe all the various BIOS manufacturers are going to competently manage a WebPKI root certificate program?
112.
by naturalmovement 4mo ago
> where companies that bribe government officials get preferred treatment Do you think lobbying did not exist prior to two years ago?
113.
by naturalmovement 4mo ago
Security is a bit different. Today it's an industry driven by unscrupulous clout-chasers and a commitment to quantity over quality. There is a difference between going through patches and pull requests vs. the endless stream of LLM-ass
114.
by naturalmovement 4mo ago
Are you saying everyone is failing to recognize the AI revolution is entirely built atop the Terry Davises of the world?
115.
by naturalmovement 4mo ago
I have numerous examples of security researchers being hostile and impossible to work with (but cannot share them unfortunately).
116.
by naturalmovement 4mo ago
Brilliant analogy https://www.youtube.com/watch?v=DAuG7_acmdA
117.
by naturalmovement 4mo ago
> AI slop is a real problem and annoying. Just because it exists does not mean every vulnerability report is AI slop. Ok but who is going to sift through it all to triage the good bits when you're working on something for free? >
118.
by naturalmovement 4mo ago
[flagged]
119.
by naturalmovement 4mo ago
Ok, but so what? You guys are out here protecting against ghosts but at the same time making the really important stuff 10x harder and more vulnerable to bugs.
120.
by naturalmovement 4mo ago
I can guarantee you with nearly 100% certainty that UEFI TLS clients are bound to be buggy garbage broken in not-insignificant ways.

More ›