noinsight

14 ms·

91.
by noinsight 9y ago
Doesn’t Japan fingerprint people at immigration ? (And maybe take their picture?)
92.
by noinsight 9y ago
.test is an official IANA reserved special-use domain name that will never be delegated out. Use it. Problem solved. I don't know why people thought they could start using random TLD's on their own, there was always the risk they
93.
by noinsight 9y ago
Microsoft is also experimenting with IPv6-only networks internally: https://blog.apnic.net/2017/01/19/ipv6-only-at-microsoft/
94.
IPv6-only at Microsoft(blog.apnic.net)
3 points by noinsight 9y ago|0 comments
95.
by noinsight 9y ago
In Finland they all do. Before mobile apps, they mailed you cards with one time passwords in them, every time you logged in you had to provide your account number and OTP. Also, every time you confirmed a payment, you had to use a random se
96.
by noinsight 9y ago
What issues have you run into? I haven't encountered any problems. Admittedly I mostly use it for logging into servers with AD accounts (it will autocreate homedirs too!) and access controls via AD groups. You can permit SSH/sudo
97.
by noinsight 9y ago
> how would a Linux box join AD domain? By using Red Hat's sssd which handles it pretty much seamlessly. You get fully working Kerberos with that which should work with SQL server probably.
98.
by noinsight 9y ago
Definitely. I made the mistake of buying an UltraSharp U2713HM which actually buzzed with lots of text on the screen (apparently it's a feature, just google the model). I tried swapping my new display and they sent me a refurbished o
99.
by noinsight 9y ago
Sure, NTLM relaying is standard pentest/attacker tooling and just this month Microsoft addressed two issues where NTLM vulnerabilities can lead to full domain compromise (in the worst case). See: https://blog.preempt.com&#x2
100.
by noinsight 9y ago
I get the feeling that the author doesn't actually have much experience with production enterprise networks (where this issue occurs and is relevant). It really isn't as simple as just flipping a switch and disabling NTLM: > Mi
101.
by noinsight 9y ago
> You have to specifically enable it on newest Windows platforms, because afaik it has been disabled by default for some 5+ years now. No you don't have to specifically enable it, it's still enabled (by default). Completely dis
102.
by noinsight 9y ago
That would probably help. Not sure what Linux LUKS supports specifically, but it's testable via "cryptsetup benchmark".
103.
by noinsight 9y ago
> NVMe Even there the CPU can be the bottleneck. I have a Samsung 960 Pro that's theoretically capable of 3GB/s reads but when you use disk encryption even with AES-NI the processor can only do ~2GB/s.
104.
Securing Browsers Through Isolation versus Mitigation(medium.com)
2 points by noinsight 9y ago|2 comments
105.
Tales from the MSRC: from pixels to POC(blogs.technet.microsoft.com)
3 points by noinsight 9y ago|0 comments
106.
by noinsight 9y ago
> winbindd ... I recently noticed that SSSD is available on rather a lot of Linux distros and is well respected. Must have a look. Yeah definitely ditch winbindd and use SSSD. SSSD makes doing this really easy and works really well.
107.
by noinsight 9y ago
I looked it up: https://en.wikipedia.org/wiki/Right_to_silence#Norway As a third party witness it is different, at least in Norway. > In general, anyone is required to appear before the courts and give testimony, ex
108.
by noinsight 9y ago
> When someone gets questioned by the police, you expect the person to tell the truth. If the police gets a hint that your smartphone might have significant evidence of some sort of crime, isn't it reasonable to comply with the requ
109.
by noinsight 9y ago
> Client certs alone are good for authentication (don't work in HTTP/2 though) Um, what? Did client certs get removed from HTTP 2?
110.
by noinsight 9y ago
It would be better if they supported the OpenSSH PKI format.
111.
by noinsight 9y ago
Zero sandboxing for one?
112.
by noinsight 9y ago
Or, you can use the (S)ATA Secure Erase[1] command which was designed from the start to securely wipe a hard disk and should handle wiping reserve space etc. properly. [1] https://ata.wiki.kernel.org/index.php/ATA_Secur
113.
by noinsight 9y ago
In addition to jobs there are workflows which also offer parallelism but they're a little fickly.
114.
by noinsight 9y ago
Are you referring to this addon? https://github.com/Ericsson/exchangecalendar It seems to be dead currently, seems it stopped working in the latest Thunderbird release and the author is unresponsive.
115.
by noinsight 9y ago
But IIRC, the standard library doesn't offer any support for sessions, i.e. signed cookies. That's kind of mind boggling to me. How common are web services without any kinds of sessions? These sorts of omissions make me question w
116.
by noinsight 9y ago
> one of the vulnerabilities seems to be a 0day targeting SMB on Windows. If your computer's network profile is set to Public, it will be firewalled off. In other cases YMMV. On corporate networks, AD Domain Controllers are (usually
117.
by noinsight 9y ago
> and servers with SMB running. Which is going to be Domain Controllers, the most highly privileged servers on most corporate networks. And accessible to the "entire" network too. Group Policy is distributed through SMB shares.
118.
by noinsight 10y ago
Nokia relicensed it to LGPL 3. Bindings for other languages can have another license though, obviously. For example, the Python PyQt bindings are licensed under GPL or a commercial license.
119.
by noinsight 10y ago
SSH supports forwarding UNIX sockets...
120.
by noinsight 10y ago
Also http://dk .

More ›