raesene6

36 ms·

301.
by raesene6 10y ago
Unless you or someone you trust has audited an application, all apps are untrusted and should be given least privileges (e.g. the mobile/UWP model). Personally I'd suggest that the trade off is whether the risks of global filesyst
302.
by raesene6 10y ago
well with this waterproofing probably back to an iPhone :) Security+convenience+waterproofing are the key characteristics for me and the iPhone hits those fairly well (now). I've tried various androids but from what I've seen of t
303.
by raesene6 10y ago
possibly although unless they got a decent number of the original developers across in a fork (Which seems somewhat unlikely) it would be a pretty difficult thing to pull off to maintain/develop the codebase. Not sure I can think of a
304.
by raesene6 10y ago
Well in this case all you would have received is a salted hash without the salt, which would be pretty useless. So that's only useful where cleartexts are breached and there he'd then have the massive headache of securing that dat
305.
by raesene6 10y ago
the best approach is implement 2FA so you're not solely reliant on user password choice. At scale, there's no way you'll get everyone to use good passwords. Random generation is a bad idea, users just write them down if you
306.
by raesene6 10y ago
I'd agree that if it seems that containerization is a fundamental part of an OS that it would make sense to have a neutral platform for it. That said there were containerization efforts in this area in the past (e.g. LXC) which never r
307.
by raesene6 10y ago
Indeed, I did think that was rather odd...
308.
by raesene6 10y ago
Personally I think the entire container space moves too quickly to be a good target for stable long lived services. Pretty much every element is under fast development. Stability is more the attribute of more mature services like Virtual ma
309.
by raesene6 10y ago
So the challenge, to me, is that if you fork docker, then people are going to have to get used to a different command structure anyway as the forks will diverge. One of the reasons to avoid a fork is the confusion caused by two kind of simi
310.
by raesene6 10y ago
I'm not really sure why the proponents of this split don't just put their efforts into improving one of the alternatives which are already available (e.g. rkt). A split would seem to be a bad outcome allround (confusion in the mar
311.
by raesene6 10y ago
hmm not sure I'd say that Blackhat would in any way be a better option for "something interesting", it's a very expensive corp. focused conference these days. Last time I went most of the interesting Blackhat talks were
312.
by raesene6 10y ago
Personally my concerns with Condoleezza Rice were as much to do with her support of warrantless NSA wire-tapping as the Iraq war conduct. The idea of someone who is in favour of the NSA hoovering up as much data as possible being on the boa
313.
by raesene6 10y ago
Personally I like the keybase approach for this of tying GPG keys to a set of accounts. Generally when I'm talking to someone online I know someone via other sites (e.g. twitter, github), so being able to say "the person who contr
314.
by raesene6 10y ago
With this attack however doesn't the vulnerability depend on the attackers ability to see the size of the response to the Cross-Origin request? So if the attackers JavaScript can't see a unique response it can't get the diffe
315.
by raesene6 10y ago
There could of course be downsides to that. 1) in situations where phones are not meant to be switched on (e.g. some flights) 2) from a privacy perspective not being able to ensure your phone is actually off is not great.
316.
by raesene6 10y ago
It'll be very interesting to see how this develops. whilst I'm sure it'll attract criticism as being an inexact benchmark, I'd say that any progress is welcome. From a security perspective, there's a well known &qu
317.
by raesene6 10y ago
one problem with Docker swarm articles at the moment is that the syntax really isn't finalized. For example in RC5 they move towards join tokens and away from secret...
318.
by raesene6 10y ago
you say nothing to see here, but compromising high traffic sites with great potential for malware delivery to a large number of users shouldn't be a de-rigeur thing... The fact that this has become the norm. should be a cause for conce
319.
by raesene6 10y ago
Mobile device security (well for IOS anyway) is waaaaaaaay better than PC security (for ordinary users), so I'd disagree on that point that app+phone is the same as browser+PC. In what world is malware which has full control of the PC
320.
by raesene6 10y ago
Different people are responding to those threads, and those different people have different opinions?
321.
by raesene6 10y ago
I'd suggest that is because there are enough low hanging fruits (single factor password based sites) left to attack. Phone 2FA is, to me, a bad idea as SMS was never designed as a secure transmission and there's a number of known
322.
by raesene6 10y ago
A practical attack against users is malware on the machine, which would allow screen viewing and key logging An attacker can then compromise both factors at the same time. To me, this weakens the point of 2FA a lot.
323.
by raesene6 10y ago
One point there really resonantes with me as someone who reads a fair number of tech books. "5. Choose a topic that will sell in a year and half." makes it hard (I think) for books to be written about very fast moving technical to
324.
by raesene6 10y ago
Sure naughty or not naughty though, having IBM be actively hostile to the only cheap way to get access to a mainframe like environment is disasterous for their skill pool. So if they don't like herculeas' efforts they should'
325.
by raesene6 10y ago
I've used Foscam's for wildlife watching round our house. they have outdoor cameras that seem pretty robust and aren't too expensive, although their software is a bit basic. They work reasonbly over wireless or Powerline ne
326.
by raesene6 10y ago
That's pretty cool, as some of the Kubernetes installation procedures can look a little daunting. One question though, are there any plans to support Windows as a host OS for this (either via VMWare Workstation or Hyper-V directly, or
327.
by raesene6 10y ago
The rollouts in the UK have been particularly dispiriting as the coverage doesn't seem to ever catch up (or indeed move at all) in rural areas. You can be pretty close in to large cities in scotland and struggle for 2G coverage let alo
328.
by raesene6 10y ago
indeed those messages are good examples of social engineering, but when comparing OS security there's nothing inherent about MacOS or Linux that would make them any more resistent to the same kind of social engineering attack. I'd
329.
by raesene6 10y ago
But then no standard desktop OS is immune to users executing code from untrusted sources, you need something more locked down like iOS for that. To get a macro running in office the user has to explicitly ignore security warnings to do it,
330.
by raesene6 10y ago
err no. outside of rarely used acl systems basic unix/linux permissions are far less granular than the windows equivalents. For desktops modern windows handles things very similarly to modern linux, which is to say that you don't

More ›