seanieb

7 ms·

61.
by seanieb 1y ago
Credit card benefits suck in the US now too, no?
62.
by seanieb 1y ago
Some of his points overlap with Signal founder Moxie’s observations: > “I don’t think it’s on a trajectory to deliver us from centralized platforms, I don’t think it will fundamentally change our relationship to technology, and I think t
63.
by seanieb 1y ago
It’s not. The Secret Service already has identified nation stare actors as being responsible.
64.
by seanieb 1y ago
Missing the key context: > “While forensic examination of these devices is ongoing, early analysis indicates cellular communications between nation-state threat actors and individuals that are known to federal law enforcement.” https:&#
65.
by seanieb 1y ago
Howard Lutnick stated it was yearly in the video.
66.
by seanieb 1y ago
They said at the signing that it was per year. No idea if it’s applicable to existing h1-b’s. https://bsky.app/profile/atrupar.com/post/3lz7tewnfrr23
67.
by seanieb 1y ago
Privacy.
68.
by seanieb 1y ago
Why did the socket.dev story from last night get flagged off the front page? https://news.ycombinator.com/item?id=45256210
69.
by seanieb 1y ago
There have been practical suggestions that could prevent this but NPM has not yet adopted: - Prevent publishing new package versions for 24–48 hours after account credentials are changed. - Require support for security keys.
70.
by seanieb 1y ago
socket.dev is a well known a reputable company, and their founder is pretty well known and trusted too. And looking that their blog post it looks like detected a real attack.
71.
by seanieb 1y ago
Scanning everyone’s messages does not meet the bar of necessity. Especially when you look at their reasoning, child safety. Every country in EU should be ashamed of the funding they give police to investigate and prosecute known abuse and a
72.
by seanieb 1y ago
His detailed clarification came post my reply to you. Prior to that his statement was that most of their employees were no longer living in Russia. Which implied that some percentage of employees still lived in Russia. He claifies that it’s
73.
by seanieb 1y ago
The AdGuards CTO and cofounder just replied to my comment, called it misinformation, but then confirmed that a large amount of their team continues to work from Russia. If you trust Devs working in Russia with you or your companies dns secu
74.
by seanieb 1y ago
Lots of Russian apps and services registered in Malta or Cyprus, but their devs continue to live in Russia. And naive users think they’re using a European app or service. For example Adguard.
75.
by seanieb 2y ago
A wide open door to get foreign political donations (see: bribery) in plain sight.
76.
by seanieb 2y ago
TLDR; Microsoft didn’t have rate-limiting on their TOTP MFA if you opened different tabs. Allowing attackers enough guesses to get the users MFA code.
77.
by seanieb 2y ago
Is this a flying imsi-catcher network? Could it spoof cell phone carriers in foreign countries to MITM their calls, sms and data?
78.
by seanieb 2y ago
Weren’t lots of those planes leased from an Irish company, and now effectively stolen property?
79.
by seanieb 2y ago
"You're probably not vulnerable to the CUPS CVE" https://xeiaso.net/notes/2024/cups-cve/
80.
Meta enforces purpose limitation via Privacy Aware Infrastructure at scale(engineering.fb.com)
33 points by seanieb 2y ago|53 comments
81.
by seanieb 2y ago
It looks like it wasn’t a software update, it was a AV definitions update, so internal to the CA application.
82.
by seanieb 2y ago
When Russia enables it, amplifies it, builds their disinformation and propaganda machine around those facts and there’s no counter weight it gets into the realm of anti-democratic adjacent. There’s nothing simple when it comes to internatio
83.
Post-quantum readiness for TLS at Meta(engineering.fb.com)
2 points by seanieb 2y ago|0 comments
84.
by seanieb 2y ago
Durov travels freely to and from Russia and several of their employees are still based in Russia. So yeah, the FSB have leverage if they need to use it.
85.
by seanieb 2y ago
Well reading that was a frustrating waste of time. They absolutely used a bait title. What they found amounts to nothing in security terms.
86.
by seanieb 3y ago
Can’t help but think Elons lawsuit will trigger more releases by OpenAI. His core arguments are BS, but raised legitimate questions about their non-profit status and lack of non-profit related activity.
87.
Making messaging interoperability with third parties safe for users in Europe(engineering.fb.com)
2 points by seanieb 3y ago|0 comments
88.
by seanieb 3y ago
The idea that Keycloak solves security issues makes me giggle. It's CVE's should shed some light on what I mean. - https://www.cvedetails.com/vulnerability-list/vendor_id-25/p...
89.
by seanieb 3y ago
You're swapping out your DNS for a Russian controlled DNS service. Seems dumb IMO.
90.
by seanieb 3y ago
Apple is an American company and we’re not actively paying for a hot war against China.

More ›