rshnotsecure

51 ms·

181.
by rshnotsecure 7y ago
Can we talk? One concern we had was that these cargo ships, some subset of the 220, have nuclear weapons onboard that the crew isn’t even aware of. Much like how the soviets used to hide their ICBMs in train cars that move around, this make
182.
by rshnotsecure 7y ago
I am writing this all on a phone and I am more than happy to produce a 5000 word report which will be posted in 96 hours. I will follow up via a comment here and also send to Michael Forsythe at the New York Times for additional review. You
183.
by rshnotsecure 7y ago
Look into something called Reverse Mergers btw. Old dying hosting companies were the perfect cover to be acquired by spy agencies. You’ll notice a large posting of press releases and apparent spending in the last 4-5 years though still for
184.
by rshnotsecure 7y ago
It comes mainly from mapping the subdomains over time and analysis of the ASNs. This is key. You will often see a company with perhaps 200 or so subdomains, that only does business in the United States. But then you will see one subdomain t
185.
by rshnotsecure 7y ago
Dozens of tech companies around the world that were established in the last 4-5 years were done so entirely for the purpose of being fronts for spy agencies to engage in the vast collection of data. This extends also to shipping, licensing,
186.
by rshnotsecure 7y ago
I recently worked at a major retailer who has offices in the Bay Area. Part of the role involved migrating the ERP and ATS system, which had employees, salary, details etc. In the building I was in, which had incredible developers btw some
187.
by rshnotsecure 7y ago
Since the early 2000s, Microsoft has done a significant amount of work for the NSA. AWS has had GovCloud, and it is true the CIA uses AWS, but MSFT has built out quite well some of the more exotic requests of the NSA. The crown jewel of the
188.
by rshnotsecure 7y ago
I think you make a valid point that also is the most plausible argument I’ve heard. Except though if I do this exercise for USA sites, I don’t see the same thing. My guess though is that the USA sites are maybe just more aggressive about fi
189.
by rshnotsecure 7y ago
There are some interesting results if you check the Google Analytics ID of TikTok. They seem to also manage a somewhat sizable portfolio of gambling sites, sites selling knockoff Sports Jerseys, and adult videotube sites. I am counting abou
190.
by rshnotsecure 7y ago
The AWS Associate and Professional Architect certifications together costs $450. 12 months of self-study from knowing nothing about computers, and many have done it in less. Compare them (although this is not the best metaphor) to an Associ
191.
by rshnotsecure 7y ago
That flood is terrifying btw. I can barely watch the 3G geographic movie models without feeling terrified. That would have been 5 million years ago though I think. The #1 rule of humans and archaeology and anthropology is whatever your date
192.
by rshnotsecure 7y ago
Docker Hub still does not have any form of 2FA. Even SMS 2FA would be something / great at this point. As an attacker, I would put a great deal of focus on attacking company’s registries on Docker Hub. They can’t have 2FA, so the work&
193.
by rshnotsecure 7y ago
This is quite serious. Interstellar objects travel at very fast speed. Comets, because of their highly elliptical orbit, already impact earth at much higher speeds than asteroids. Can only imagine what a hit from something further than the
194.
by rshnotsecure 7y ago
Back in late 2016 a lot was made about a 20+ year Oracle/Linux veteran at ORCL jumping ship to Microsoft to lead their burgeoning Linux group. 9 months later the guy returned to Oracle. Always thought that spoke a little bit to the qua
195.
by rshnotsecure 7y ago
https://www.amazon.com/Founders-Work-Stories-Startups-Early/...
196.
by rshnotsecure 7y ago
The fact that FB can task developers to this, but not the breached servers (of a 3rd Party but who has access to highly confidential material) I’ve reported via their BB page that are online right this second is somewhat insulting to me. If
197.
by rshnotsecure 7y ago
Facebook has a couple dozen contractors that employ thousands of people. These contractors fall out of the scope of Facebook’s Bug Bounty in most cases, and the contractors do not have a way to contact them about security vulnerabilities or
198.
by rshnotsecure 7y ago
This is not unusual. My spouse works for Glassdoor. Entry level programmer jobs in Texas will get 2000 applications (not bots) within about 72 hours. Desperate people from all over the US. I think at one time the advice to “play the numbers
199.
by rshnotsecure 7y ago
Highly recommend Leo Braudy’s “Frenzy of Renown”. Basically considered the default text in the field of celebrity studies. Braudy’s hypothesis is the celebrity has always been an inherently quasi-religious phenomenon. Religious only in the
200.
by rshnotsecure 7y ago
Has anyone asked why in the Linux Kernel there has been an extraordinary amount of work on Huawei in a few key networking files? In fact in such file the changelog since 2016 mentions Huawei more than any other proper noun combined . The p
201.
by rshnotsecure 7y ago
It’s such an oversight that to quote someone from early 20th century ... “is this stupidity or is this treason”. Not doing this was a deliberate choice. The benefits of implementing it outweigh at maybe a dozen orders of magnitude not imple
202.
by rshnotsecure 7y ago
That article does not clarify anything. I want to provide a link. It is nothing but thousands of words saying they aren’t partnering by putting an app in Huawei App Store. For years companies used to provide all sorts of incentives to put a
203.
by rshnotsecure 7y ago
Yubikeys are one of the few forms of 2FA that are highly resilient to being phished. Google has not only an option to restrict SMS 2FA, but an additional one below to restrict “all 2FA options except security keys” in GSuite. It has been kn
204.
by rshnotsecure 7y ago
ProtonMail does not support Yubikeys. I would like to ask all of HN to think seriously about this and what this means. ProtonMail does many things exactly right. This 1 oversight suggests something very very scary going on at the organizati
205.
by rshnotsecure 7y ago
The skills we’re missing could be easily trained for. People would happily do the training for free even if it lasted months (say through online portals that were self paced) just for a chance at getting a job / a guaranteed in-perso
206.
by rshnotsecure 7y ago
Capella University has a very low reputation / is for profit. My understanding is it is no better than ITT or University of Phoenix, which have a very bad and infamous reputation in the United States.
207.
General Motors Developed a Competing Standard to Ethernet That Almost Won(en.wikipedia.org)
2 points by rshnotsecure 7y ago|2 comments