rshnotsecure

16 ms·

91.
by rshnotsecure 6y ago
I'm not sure I'm comfortable using the term "bots", but certainly more gamesmanship and "information warfare". The Nautilus link that made it to the front page several days ago deeply disturbed me [1]. From a g
92.
by rshnotsecure 6y ago
Most police departments do business with extremely shady technical firms. These are things no normal say DevOps engineer has ever heard of. I can say confidentially the whole computer forensics industry is something of a cross between Chine
93.
by rshnotsecure 6y ago
Most police departments do business with extremely shady technical firms. These are things no normal say DevOps engineer has ever heard of. I can say confidentially the whole computer forensics department
94.
by rshnotsecure 6y ago
This is actually very concerning. We have significant evidence now to suggest that asteroids in the past have caused large earthquakes. Sometimes on the other side of the impact zone (the antipode). More scary though is what comets can do.
95.
by rshnotsecure 6y ago
This article is bizarre. Some quotes that strikes me as just really really odd: "Jerry Mitrovica has been overturning accepted wisdom for decades" - no one is this good. "What he calls postmodern geology" - this is very
96.
by rshnotsecure 6y ago
It has always struck me as strange there is no 2FA function on HackerNews along with no real delete function. Also some of us have noticed for a while Hacker News is hosted differently than the rest of YCombinator. While YCombinator uses AW
97.
by rshnotsecure 6y ago
Zoom I've always thought must have pretty strong security if configured correctly (obviously that's a big if) It is currentLy in use by the Chinese Academy of Sciences (CAS). CAS is sort of like a mix of NSF, NIH, and DARPA all ro
98.
by rshnotsecure 6y ago
I bought a Purism laptop last year for around $3,000 USD. It is ok. Purism had a bizarre falling out with their former CTO. I am inclined to believe the CTO [1]. The documentation is basically non-existent. There is no end to end hardware t
99.
by rshnotsecure 6y ago
Reddit has changed ownership structure significant since these comments were made. It is highly unlikely that Tencent would be willing to see their $300 million investment from last year diluted at all [1]. Tencent is also one of the larges
100.
by rshnotsecure 6y ago
Recently the Australian Strategic Policy Institute put out a paper "The Chinese Communist Party: Engineering Global Consent" [1]. It focused on China's attempt to build a digital "belt road initiative" and the vast
101.
by rshnotsecure 6y ago
This article is bringing to light a lot of stuff that needs to be said about printers. Also somewhat depressingly, HP is definitely the most secure printing company. That's not a very high standard though. But what it means is everythi
102.
by rshnotsecure 6y ago
1. Keyloggers written entirely in CSS have been demonstrated for some time now [a] 2. Malicious Javascript could have been embedded into their CI/CD pipeline and made it onto the site. 3. Somehow stealing SSH keys from a developer and
103.
by rshnotsecure 6y ago
This is just Zoom. The partners and sponsors almost all conspicuously mention Zoom meetings and Zoom Celebrations on their websites. Especially because of the major WSJ story today on Zoom and the origins of the Coronavirus, it seems very i
104.
by rshnotsecure 6y ago
Nearly all consumer-grade home security cameras sold today on Amazon are just rebranded Xiaomi. This is part of a major initiative out of Beijing called the "Xiaomi Ecological Toolchain". Wyze, Yi, Kami, and IMOU are all part of t
105.
by rshnotsecure 6y ago
Dell XPS 13 Developer edition is probably considered the best. I would also recommend System76 out of Colorado. Quite an interesting, boutique company.
106.
by rshnotsecure 6y ago
I agree with the other commenter. This could just as much fight trafficking as it could be an "FDCS" or "Foreign Data Collection Scheme" The Australian Strategic Policy Institute has some excellent examples in their pape
107.
by rshnotsecure 6y ago
Even within the security community there is vicious, and at times quite personal, disagreement. We are about 5-7 years away from there simply being a "site" with all around good advice most agree on. Here's one problem. Let&#
108.
by rshnotsecure 6y ago
- graduate with BA in psych at 21 in 2012 - self study into sysadmin role over summer break - work way up to Engineer and then to Cloud Architect over next decade - am aging in place until of the age when management considered more normal
109.
by rshnotsecure 6y ago
Tmux is what makes Linux worth it for me. Or more specifically, the command line. It is incredibly freeing, and discovering it is what made me finally choose the sysadmin path over outright programming. Fun Fact: Google Cloud Shell is by
110.
by rshnotsecure 6y ago
We have been measuring and tracing Zoom traffic from the various client apps for the last couple of weeks. One weird thing. It appears Zoom uses SCO Cloud [1] and HunTel Engineering Nebraska [2] to form sort of their own IPX? I have been a
111.
by rshnotsecure 6y ago
Agreed, and obviously the WHO is highly motivated to say something dire will happen at the withdrawal of large amounts of money. AID to Africa has largely has been an unintended yet sad disaster. The best example of this is when the British
112.
by rshnotsecure 6y ago
Front companies are a well established method of operation certainly in spycraft (see the latest Crypto AG revelations), but also in internet hosting. For example, Google requires their employees at certain data centers to only wear the bad
113.
by rshnotsecure 6y ago
The way the report was written, I suspect this was another open Gitlab server. Most people who self-host Gitlab doesn't realize that between the default self-registration and "Explore" button at the bottom, possible for entir
114.
by rshnotsecure 6y ago
Does anyone know what happened to the Facebook https://opencompute.org project? Does anyone actually use that? Seemed interesting at the time but haven't heard much recently.
115.
by rshnotsecure 6y ago
The Area 51 of China is known as "Lop Nur". It is a desert site in the far northwest of China in the province of Xinjiang. Xinjiang is the site of many concerning human rights violations, particularly near arbitrary executions to
116.
by rshnotsecure 6y ago
Does this process allows the use of custom domains? For a long time now custom domains on GCS with SSL has been a networking "mission impossible" and just an absurd amount of work really. I remember giving up 12 months ago, I can&
117.
by rshnotsecure 6y ago
I was hired by a decently well know consumer tech company in 2018 to investigate automated cloud security platforms. They handled a good deal of financial data so I was told (and this is the only time I've been told this in my career)
118.
by rshnotsecure 6y ago
A quick recent anecdote on how hard this is going to be. In early February an NY Times reporter criticized, with some good evidence, Senator Tom Cotton for claiming that the Coronavirus leaked from a lab in Wuhan [1]. By the second week of
119.
by rshnotsecure 7y ago
This is particularly concerning for those in China. Keep in mind over 1,000 Chinese hospitals now use Zoom, as detailed in the Feb 26th blog post by CEO Eric Yuan[1]. If anything, I suspect this has less to do with hacking and more with ins
120.
by rshnotsecure 7y ago
https://securitytrails.com/domain/pussy4all.dashboard-produc...

More ›