spydum

45 ms·

481.
by spydum 9y ago
Wonder how many of those 40000+ mentions were bots? If Facebook is manipulated to shift elections, why wouldn't we expect Twitter be manipulated to shift social media platforms? Also, I suspect many millions have already abandoned face
482.
by spydum 9y ago
I'd say a significant amount of our problems are not transaction log failures - they are authentication/identity failures. The catch is that blockchain technologies force you to solve both (you cant take part in a transaction with
483.
by spydum 9y ago
I mean, maybe that's true, but I'm not entirely certain it's a fair assessment. Yahoo and Facebook are arguably some of the largest targets (different eras of course). Being a CISO at both and not getting fired from either
484.
by spydum 9y ago
Didn't he also leave yahoo for practically the same reason?
485.
by spydum 9y ago
It doesn't contradict anything, it just lowers the probability of being right a hair (For the extreme few APTs who would bother with such trivialities), hence the "attribution is bullshit" -- you can't ever know . Howev
486.
by spydum 9y ago
sure, IOC monitoring can be done via osquery (free), or tanium ($$$). You just have to build your own ruleset to pickup IOCs. Linux has AV, and nextgen stuff like Cylance (works but super buggy, runs as a kernel module). You also have othe
487.
by spydum 9y ago
APT groups have a set of tools, techniques, and processes (ttps) that they use. They evolve over time, but generally consistent per APT group. It's maybe dozens of methods and signature moves that teams use to attribute the actor. Malw
488.
by spydum 9y ago
Bioengineering. Soon enough those AIs will be making better humans than we do..
489.
by spydum 9y ago
From the Article (the actual notice): https://apps.fcc.gov/edocs_public/attachmatch/DOC-349258A1.p... They identified the device, and the service impairment stopped when he shut it off.. "On November 30, 2017
490.
by spydum 9y ago
No idea but in any case I'd imagine SDN dongle could work as an effective RF sleuthing tool (wireless protocol known or not).
491.
by spydum 9y ago
Took me far too long to realize author substituted actual firewall rules for simple lists of numbers. I don't get the point of not doing the leg work to compare an actual list of rules from differing firewall implementations (as was th
492.
by spydum 9y ago
Is this not common? Even at junior collgss ethics is typically a first year requirement
493.
by spydum 9y ago
I wonder if this has anything to do with the Cyber NYC effort? https://www.nycedc.com/opportunity/cyber-nyc-rfp One of the stated objectives is to actually build out a Cyber Center in NYC as part of the jobs program. T
494.
by spydum 9y ago
Check out Azure AD. Most of the best practices are implemented there.
495.
by spydum 9y ago
Great post Mike! Just wish there was a solid solution for identity providers in the enterprise space (gsuite and activeAD exist, but pretty rare). Instead every company ends up building their own IDP and making all these same mistakes. The
496.
by spydum 9y ago
I wonder if many comments these days are bots just trying to farm karma, so they can sell astroturfing campaigns later. They all take turns upvoting themselves.. Or maybe I'm paranoid
497.
by spydum 9y ago
M&A has been the strategy of just about all major companies for the last 18 months, and because of the lead time, I think 2018 is going to be even busier.
498.
by spydum 9y ago
Very very few people I hope. There is no economic incentive for companies to invest in secure design/architecture. The costs of building it right almost always lose to other product owner features and timelines. Until we can actually g
499.
by spydum 9y ago
It's clearly to evade a security control.. As if you approached a door, to find it locked, but then discovered the front window was unlocked and let yourself in.. Clearly the occupant didn't want you to enter, and just failed to s
500.
by spydum 9y ago
Scott, Thanks for creating this! Julien from Mozilla referred this to me back at AppSec and I have been using it as a devops security primer for folks in my org since. Really clever teaching tool. I've had it on my mind to create an Az
501.
by spydum 9y ago
Basic bolt ons for a gm F-body will take you up to 155 mph before being electronically limited. Don't need nitrous for that. Pretty sure though beyond 180 would be incredibly hard.. That is a ton of aero force the cars weren't des
502.
by spydum 9y ago
I think it's pretty risky to try to categorize all infosec people into one ranking.. But I will say most folks I bump into are not writing code for maintainability, or necessarily efficiency. Most of us stick with GEMO (good enough mov
503.
by spydum 9y ago
Garage door openers frequently operate at 433MHz, very likely your neighbor was hitting the button as they left?
504.
by spydum 9y ago
while I agree about the prowler, i was holding #1 for a solid hour or two in the mohawk. It takes some strategy (mostly about orienting yourself north frequently), but it still is useful. I agree, if POV could be toggled to follow, it would
505.
by spydum 9y ago
i suspect you register and begin to level up?
506.
by spydum 9y ago
like how you can't view amazon prime videos from android tablets (or at least, certain versions iirc.. amazon yanked it's apk from play store. i dont recall why, but some people simply side-loaded from amazon store).
507.
by spydum 9y ago
how is that different than when apple has it's launch days? the announcements are mostly relevant to the major audiences here, seems reasonable to think they'd get a surge of upvotes
508.
by spydum 9y ago
Sounds like DJI kicked off a bounty program and didn't have their ducks in a row on setting bounty scope, legal terms, or process. Researcher found PII leaks and keys to some pretty sensitive stuff, and DJI didn't know how to resp
509.
by spydum 9y ago
agree, if you have batch jobs for spark, Azure Batch Service may not be a bad solution either. HDInsight includes too much other complexity if all you wanted was spark. Databricks will be interesting, as they can take away even they mystic
510.
by spydum 9y ago
I know it's been studied extensively, but doesn't fda and others still advise caution about frivolous use?

More ›