rtempaccount1

12 ms·

61.
by rtempaccount1 7y ago
Endpoints in a network aren't all PCs :) In some industries (e.g. SCADA) Telnet is very much alive. Also even on the Internet, Shodan has about 5.2Milllion hosts with the Telnet port exposed...
62.
by rtempaccount1 7y ago
In general, I'm not a fan of vulnerability quantification efforts like CVSS. The reason is that they provide the appearance of repeatability and objectivity when, in reality, many of the assessments used are subjective and opinion base
63.
by rtempaccount1 7y ago
That's a view for sure, however it seems that some world leaders and corporations have decided that the trade offs are worth the risk...
64.
by rtempaccount1 7y ago
Hopefully if that's the case, more attention will be paid to the fact that using mobile phones for 2FA or identification on high value services is a bad idea :)
65.
by rtempaccount1 7y ago
I'd agree that there are always trade offs however, you could do a number of things to detect an active attack, changes in user agent, location etc can be detected and flagged for review. Now that's not possible at scale, but for
66.
by rtempaccount1 7y ago
I'll be interested to see the post-mortem on this breach for sure. As an outsider, I would have thought that the Twitter security team would have a set of high-value users (with @jack being at the top of the list) who'd they keep
67.
by rtempaccount1 7y ago
I use this a lot for basic things like base64 decoding. Of course, nothing you can't do with A.N. programming language, but handy for quick checks.
68.
by rtempaccount1 7y ago
shouldn't be it's purely client-side. And of course, if you don't trust them, just stick a proxy in-line and watch for traffic.
69.
by rtempaccount1 7y ago
The last point is the one that really rings out to me as an Info/IT Security person. While these incentives aren't aligned it is unlikely there will be a significant improvement in overall IT Security practice. It's been prov
70.
by rtempaccount1 7y ago
Whilst Quantum computing is an interesting topic, gotta say I think bitcoin's challenges are far more mundane and pressing that that. No.1 challenge is how to stop centralized exchanges from extensive market manipulation. Decentralized
71.
by rtempaccount1 7y ago
It's interesting that we're still in a place in 2019, where one motivated attacker, can compromise the security of major corporations, and access sensitive systems and data, and that those corporations don't realise/reac
72.
by rtempaccount1 7y ago
Looks like we're starting to see k8s slide down the slope in the typical "hype cycle", in the way we've seen Docker do so over the last 12-18 months. It'll be interesting to see how well it weathers this part of the
73.
by rtempaccount1 7y ago
I understand that Docker's user namespace support is relative basic, but the point I was looking at was that if you don't run your contained process as root (e.g. unprivileged) by specifying a USER in the Dockerfile, then I wasn&#
74.
by rtempaccount1 7y ago
I'm not sure I follow you here. The Docker daemon runs as root (which is kind of inevitable, if you don't then you end up needing hacks like slirp4netns to hook up networking) However, there's nothing innately inside Docker t
75.
by rtempaccount1 7y ago
I'd say "that depends" For example if you're running Kubernetes, then if you have a user who has RBAC rights to exec into a privileged pod, but doesn't have rights to create new privileged pods, then this could be a
76.
by rtempaccount1 7y ago
Out of curiosity, what makes you say that LXC has better security than Docker? What aspects of LXCs design or implementation provide additional security controls over those of Docker?
77.
by rtempaccount1 7y ago
Whilst from an overall security perspective, this may not be that meaningful (the pre-req's are CAP_SYS_ADMIN or --privileged), it's still a really neat hack. Also a good demonstration of how runc container security is really just
78.
by rtempaccount1 7y ago
There's some cases where it's use in Kubernetes. Some of the system pods will run privileged and also some CNI pods will too.
79.
by rtempaccount1 7y ago
I'd say the amount of isolation to be sufficient, depends on the threat model. If you want some isolation but moderately trusted workloads (e.g. different departments in the same company) that's easier than the isolation required
80.
by rtempaccount1 7y ago
(IMO) this isn't intended to be a product, it's an experiment in different ways to run Kubernetes workloads
81.
by rtempaccount1 7y ago
I wouldn't suggest I am re-writing history. What's your definition of "production ready"?
82.
by rtempaccount1 7y ago
I thought this was a joke initially, but it appears not. It's quite something when the ISP association starts attacking an organization that supports user privacy and security. Let's hope that some of the "feedback" they
83.
by rtempaccount1 7y ago
Any article which talks about Bitcoin as an investment without mentioning (at least in passing) the currently unregulated exchanges and the role of Tether in the price, is missing a large part of the picture. The current set of exchanges wh
84.
by rtempaccount1 7y ago
The Docker team did quite a bit of work (e.g. establishing Apparmor/SELinux profiles, creating seccomp policies, deciding on acceptable capabilities) in the relatively early days of Docker. TBH those haven't changes much in quite
85.
by rtempaccount1 7y ago
So the Docker security team did a lot of work in the early days precisely because people felt that it didn't provide good security isolation. As to root in a container == host compromise, what makes you say that? Absent a Linux kernel
86.
by rtempaccount1 7y ago
Whilst it's always good to see articles discussing the relative merits of various container runtimes for isolation, there seems to be a tendency to underplay the security benefits of standard Linux containerization (As used by LXC&#x2F
87.
by rtempaccount1 7y ago
Cool. I had one question, what's the usual lead time for non-profit data to show up in this dataset (e.g. when would you expect that 2018 forms/data would appear)?
88.
by rtempaccount1 7y ago
yes unfortunately all that these forms tell us is, more money is coming in and more money is being spent, not really what it's being spent on (and I'd imagine the 2018 numbers will show another big jump in revenue if the growth of
89.
by rtempaccount1 7y ago
Well sponsorships are part of conf. revenue in a lot of cases. I've looked at the sponsor packs for the CNCF conferences, and those higher tiers do not come cheap. Also don't underestimate smaller individual payments * very large
90.
by rtempaccount1 7y ago
The linux foundation results on here are quite interesting. they're showing pretty rapid "revenue" growth from $39M in 2015 to $61M in 2016 to $81M in 2017. I'm guessing this is, in no small part, down to increasing con

More ›