raesene6

43 ms·

151.
by raesene6 10y ago
Interesting, I'm guessing Amazon are doing this as they're concerned at Microsoft getting companies onto Azure as part of a package with Office365. Articles like this one ( http://www.nasdaq.com/article/can-am
152.
by raesene6 10y ago
For this campaign. It's reasonable to suggest that there could be similar malware affecting OSX assuming the group have a general target in mind and not something specific to windows using developers...
153.
by raesene6 10y ago
which is not the point I was referring to , nice way to take my comment of out context. For avoidance of doubt I originally said ("The hit job was some of the other items they'd cut together to make the "anti-semetic" c
154.
by raesene6 10y ago
My defence of that point wasn't predictated on the idea that what he said was atypical of his content. It was predicated on the fact that WSJ took statements completely out of context to have the exact opposite of the in-context meanin
155.
by raesene6 10y ago
well I'd argue some of the WSJ quotes were deliberately taken out of context which changed their intention (specifically the one where PewDiePie compared Youtube's policies to those of Nazis (i.e. in a negative light) the WSJ stra
156.
by raesene6 10y ago
In the Internet scheme of things, I'm probably considered old (43) but youtube is one of my main sources of entertainment. I've got some channels I follow and watch their "show" regularly and others where I'll foll
157.
by raesene6 10y ago
No, but I could point to many other mainstream accepted comedians who get TV shows and are part of the "establishment" who have made jokes which mention the holocaust, and a range of other taboo topics. Heck if you want one exampl
158.
by raesene6 10y ago
Oh I wasn't suggesting that what he said wasn't meant to be provocative, the main instance they picked up was ill considered and in bad taste, but then if you watch any of his other videos this really shouldn't be a surprise.
159.
by raesene6 10y ago
I've been watching Youtube vids for a long time (well relatively, like 10+ years) and it's one of my primary forms of entertainment. It has been very interesting to see youtubers come and go, a lot of them seem to burn out on the
160.
by raesene6 10y ago
If you're working in Rails then I think you can get a lot of benefit from reading/writing some "pure" ruby code. Rails has a lot of its own ways of doing things, so it can be nice to see how to solve problems without us
161.
by raesene6 10y ago
There are some other options for this like Travelling Ruby http://phusion.github.io/traveling-ruby/
162.
by raesene6 10y ago
On the password front, I like the new NIST guidelines (summary here https://nakedsecurity.sophos.com/2016/08/18/nists-new-passwo... with links to the detail) and the UK NCSC guidelines https://www.
163.
by raesene6 10y ago
Regular forced changed of passwords is generally a net-negative for security. There's nothing wrong with changing if you think it's been breached or just 'cause you feel like it, but a system forcing change every 90 days is l
164.
by raesene6 10y ago
no indeed, I think it's important to provide a set of options and advice about when companies might want to use them. A setup that's appropriate to say a start-up environment may very much not be appropriate to a bank for example,
165.
by raesene6 10y ago
that's a really cool link I hadn't seen, thanks :) It will be interesting to see how Docker gets on in more enterprise environments.
166.
by raesene6 10y ago
Of course, I don't think my comment implied anything else... do you? My point was around maturity of things that enterprises tend to focus on like hardening/security best practice guides. The kubelet API bit was just an example, a
167.
by raesene6 10y ago
Whilst Kubernetes is really cool and has a lot of nice features I think, at the moment, it's lacking in some areas that are likely to be important for Enterprise customers who are likely to be interested in this Docker EE setup. Specif
168.
by raesene6 10y ago
If your use cases allow for graphical apps, there's a couple that are heavily used by the web app. security testing community and have quite a bit of useful functionality for inspecting/modifying HTTP(s) requests. OWASP ZAP Proxy
169.
by raesene6 10y ago
However with collective action, the company is usually aware of their employees actions, here if I'm reading correctly management were not notified that this was happening, so perhaps not quote the same thing.
170.
by raesene6 10y ago
So you're looking for an organisation who will use non-free employees to give you a product for free?
171.
by raesene6 10y ago
For me the "thicker margin" argument only holds if Apple were cash constrained or could get a better return elsewhere. Apple has a massive massive pile of cash sitting around (over $200 billion) and I'd be surprised if standa
172.
by raesene6 10y ago
err modern windows has many good security measures and in many cases Microsoft are ahead of the curve in adopting new security techniques. For me "insecure windows" is an old trope and not particuarly accurate any more.
173.
by raesene6 10y ago
It is far-fetched 'cause it's not AFAIK true. My experience for this is having set up a GKE Kubernetes cluster last night, it was definitely running Docker.
174.
by raesene6 10y ago
Even with a VM you need to be somewhat careful as hypervisor breakouts are not unknown.
175.
by raesene6 10y ago
This is a handy defence-in-depth mechanism, somewhat like the other cookie flags (httpOnly and secure). Once browser support gets a bit better, it would seem like a good idea to start making use of it on that basis, but I don't think I
176.
by raesene6 10y ago
The companies house data should be useful in that the company name is different for companies registered in scotland (Starts with SC) compared to those started in england and wales which just have a number. I'd say there's probabl
177.
by raesene6 10y ago
FDE's and Yubikeys are nice and good controls for some classes of risk, but distributing your passwords onto dev laptops via a git repo. opens you up to a wide range of risks that those won't help you with. Unless you got super-co
178.
by raesene6 10y ago
Sure there's always a cost / benefit balance to take into account. That said I'd say putting secrets in a git repo is a pretty risky thing to do. By the nature of the tool that means that the secret ends up on the device(s)
179.
by raesene6 10y ago
I think the ship of "easily analzed password dumps" has already sailed e.g. https://xato.net/today-i-am-releasing-ten-million-passwords-... <-- 10 million passwords
180.
by raesene6 10y ago
This is a good example of the increased risks from doing your development out in the open, any mistakes are exposed to a much wider group of potential adversaries. On an internal VCS, this would still be a problem, but a bit less visible&#x

More ›