raesene6

34 ms·

271.
by raesene6 10y ago
Realistically though those are organisational decisions not requirements of the Windows platform. there's nothing that mandates that a windows environment must have AD/Group Policies or Anti-Malware software, you can configure a
272.
by raesene6 10y ago
It's a plausible suggestion that all services that provide basic critical infrastructure for the Internet (e.g. DNS, Certificate Authorities, ISPs and network providers) should have a very high level of security testing given their att
273.
by raesene6 10y ago
It would be interesting, but a very tricky comparison to make as the Linux kernel and full OS' like Windows or OSX is not really a like-for-like comparison. Windows and OSX cover large areas of functionality not really covered by the l
274.
by raesene6 10y ago
I don't think Google have an equivalent community setup compared to what was on Panoramio.
275.
by raesene6 10y ago
I was sorry to see this, although the writing has been on the cards for Panoramio for some time. It seems a really odd decision by Google, panoramio had a strong community which may well not migrate to the alternatives that google are sugge
276.
by raesene6 10y ago
That's a view, I thought I was explaining why "Internet cut off" was likely not the case (or at least not the only case). Wikileaks are suggesting that he's been cut off by a state actor. I'm pointing out why that
277.
by raesene6 10y ago
Sure the embassy can just lock him in a room with no devices, that's easy . what's not practical is to cut the ecuadorian embassy building off all together
278.
by raesene6 10y ago
hmm I would suggest there's something more to this than "Internet cut off". There's pretty much no chance you could cut off all connectivity from a building in the heart of london ( https://www.google.co.uk&#x2
279.
by raesene6 10y ago
it's a real risk when you're a conference organizer to take someone with no prior experience. I've seen quite a few talks where the abstract looked technically good, but unfortunately the delivery really didn't help the
280.
by raesene6 10y ago
Good list, I'd add one more which is look for conferences with "rookie tracks" for new speakers. Some of the UK Infosec conferences now have these where they pair new speakers with experienced mentors who coach them leading u
281.
by raesene6 10y ago
Containers (and especially multi container orchestration software like docker compose or Kubernetes Pods) let you describe an application that might contain multiple processes (so a really simple example could be a web server with a databas
282.
by raesene6 10y ago
Interested to see the emphasis on security, it's definitely something that could use more focus in this area. On that note, are there any plans to implement TUF ( https://theupdateframework.github.io/ ) or similar into
283.
by raesene6 10y ago
I would agree that not everyone wants the same set of security problems and that this causes the conflict evident in the mailing thread, not so sure I'm completely with the banks on this one though. Standards bodies are trying to impro
284.
by raesene6 10y ago
Well part of my point was they already have MITM infrastructure and DMZ termination of SSL is something I've seen many times in banks, so it's not exactly an unknown concept there. As to your question of whether it's more sec
285.
by raesene6 10y ago
With regards to your example, in my experience in the banking industry, you just re-encrypt for the internal leg. TBH I think the BITS guy is over-egging his case a fair bit. For all outbound to Internet comms they've got to use an int
286.
by raesene6 10y ago
I think if you're pinpointing a move from File & Print to app servers and tying it to the move from Netware to Windows it would more be a combination of Netware's difficulties in stably running multiple apps (it was a rock-sol
287.
by raesene6 10y ago
interestingly I thought that breaking things up helped a lot and that they could do better by continuing that trend.. For me a big part of the problem of SO (as opposed to other SE sites) is that it's too big for the mods to really hav
288.
by raesene6 10y ago
I'd say that depends on the hack. The hacks just for prestige aren't really that prevalent any more. These days it's hack for stealing creds or money or secrets or perhaps just putting ransomeware on all the comapanies syste
289.
by raesene6 10y ago
Consider many other product markets, when there is a defect in someone's product there are legal remedies. These are in place to provide an incentive for companies to do something they otherwise would not. Examples of this would be fo
290.
by raesene6 10y ago
Definitely not if it was implemented in a big-bang, but a more gradual approach might work. The counterpoint of what will the costs be if we carry on with the current level of security and drive IT systems more into everyone's lives ha
291.
by raesene6 10y ago
Interesting perspective, I too have worked with large financial institutions (for 15 years if that matters) including RBS :) Organisational red-tape is obviously part of the problem but that's part of what I meant by complexity. Chang
292.
by raesene6 10y ago
it's nice to hear that you're a flexible and accomodating customer who's not adverse to companies having some IT issues. Unfortunately banks in the UK are regulated by the FCA and they are more than a little picky about that
293.
by raesene6 10y ago
Wow, can I ask was it a big stack? And when you say audited, do you mean manual code review, static analysis or something else? How far down the stack did it go? I'd be genuinely interested to hear, as it's something I see bandi
294.
by raesene6 10y ago
some good points there, but LOL about all 3rd party code being audited.
295.
by raesene6 10y ago
As another commentor said, it very much depends on how much you're paying for support. If you pay enough you can get a much better response than that. Your open source case is also perhaps a touch optimistic, it implies you have techn
296.
by raesene6 10y ago
Interesting, although I'd suggest that the problems for RBS in implementing such a system are more a reflection of the complexity and age of their systems than than technology used. I'm interested that you say you were looking for
297.
by raesene6 10y ago
I'd read this article and something about it bothered me, took a while to put my finger on it. To me creating a back end banking system using a load of software that's very new and still very much developing is a risky move. Once
298.
by raesene6 10y ago
I think that the main part of the problem is the sales are to foreign companies. Many companies tend to focus efforts in their home countries and there's always a risk that a foreign acquisition will see its operations downsized in the
299.
by raesene6 10y ago
Yeah Microsoft contributes to a bunch of projects. I'm sure at least in part that's to help compatibility with their systems, but it still helps those projects that are not theirs. A good example is Docker where, IIRC, Microsoft
300.
by raesene6 10y ago
Generally the way I've seen sudo implemented in all desktop linuxes is that after providing a password the process gets all access. This to me isn't a great trade off as it relies on the user invoking the process understanding the

More ›