nuker

40 ms·

541.
by nuker 5y ago
> someone that is blocking their caller ID. They do give you valid login and password, why is that not enough?
542.
by nuker 5y ago
> It is the government's job to solve / prevent / deter crime. Network Border Protection Agency, NBPA. A nation level firewall, much like China’s. Plus KYC rules for renting compute inside the country.
543.
by nuker 5y ago
> This is not entirely true You mean user devices may connect directly to Google storage? Did you observe it connecting to IPs in Google owned ASNs?
544.
by nuker 5y ago
I’ll def check it for myself now, if you’re right thats big blunder on Apple
545.
by nuker 5y ago
Nope, its Apple servers. User devices don’t connect directly to Google
546.
by nuker 5y ago
> and access to traffic patterns I would think Apple is smart enough to mix storage blobs, so one blob is not one user. Plus all requests come from Apple datacenters, not user devices.
547.
by nuker 5y ago
Very nice piece, with many details
548.
by nuker 5y ago
How much was in the rug?
549.
by nuker 5y ago
> Vestager said "I think customers will not give up neither security nor privacy if they use another app store or if they sideload." Horseshit. Consumers will install anything from anywhere, all the time.
550.
by nuker 5y ago
Yup, if I had to run a company, it will be macbooks and iphones with MDM, like by jamf.com. That will cover device security. Then SSO, separated networks and no Windows whatsoever.
551.
by nuker 5y ago
> We set up software on a lot of machines Windows, right?
552.
by nuker 5y ago
Sure. No melted craters, no fallout.
553.
by nuker 5y ago
> The SolarWinds attack affected only something like 1% of their customers, when it could easily have been 50% or more! If it was me (it was not), I’d use it to gain persistance in companies like Kaseya, extending my beachhead as first p
554.
by nuker 5y ago
I just disabled “load remote content” in email clients, stops spam pretty reliably.
555.
by nuker 5y ago
> With the exception of my phone number You can get it from 2019 FB leak of 533M accounts, dumped for free this April. My boss is in there and phone number is correct.
556.
by nuker 5y ago
Normally machines behind NAT use it only for pulling stuff on boot time. Main traffic goes via LBs. depends on your case, of course.
557.
by nuker 5y ago
What I do in AWS is having a VPC with 3 subnet types, public, private and restricted. Public ones have default route to inet, private to NAT, restricted - none. DBs go in restricted, load balancers in public and web/app servers in priv
558.
by nuker 5y ago
> They clearly made the right moves The machine with DB had a public interface. No matter firewalls, this is just bad. DB machine should be in private subnets, preferably with no inet access at all, even via NAT. Proof that it had public
559.
by nuker 5y ago
MacOS diverged enough from *nix I think, to be third camp. Things they do like read-only system drive, app permissions, signed binaries, no package manager.
560.
by nuker 5y ago
just in case someone missed it, leak is huge
561.
533M Facebook users’ phone numbers leaked on hacker forum(bleepingcomputer.com)
6 points by nuker 5y ago|3 comments
562.
by nuker 5y ago
> largely two consumer camps - Windows and unix-like ones Oi! Mac oleee ole ole ole!
563.
by nuker 5y ago
This is smart! """Check whether the cake is true""" return isinstance(cake, Cake)
564.
by nuker 5y ago
“ The AI uprising will be well-documented, at least.”
565.
by nuker 5y ago
> My money is on "hardcoded admin backdoor Mine are on UPnP and shitty firmware web server
566.
by nuker 5y ago
Flagging should be banned at HN
567.
by nuker 5y ago
$ spctl --add myFancyBinary Yes, defaults matter, 99% users don’t have friends that ask them to run their binaries :)
568.
by nuker 5y ago
> I'd still like to know what the author suggests the alternative should be? I think MacOS handles app security right.
569.
by nuker 5y ago
lol
570.
by nuker 5y ago
> writing CloudFormation scripts templates, not scripts, Declarative. And CFN is much more lean and reliable than TF, I recommend it for new to AWS people.

More ›