spydum

114 ms·

691.
by spydum 10y ago
Interesting, not sure if this happened a while back or in part of this update, but I am noticing you can only down vote relatively new comments? See here: http://imgur.com/0bNIi6B
692.
by spydum 10y ago
yeah collapse is nice, but curious what will happen on collapsed thread which is added to... i'm also confused, wasn't there already a "saved" section where upvoted items went previously? seems like all which was done wa
693.
by spydum 10y ago
Yeah, or copy/paste detection
694.
by spydum 10y ago
I am not a metasploit ninja, my job is mostly in design and defending systems. However, on occasion I'll need to demonstrate a pivot or exploit a common vuln to make a point to a DEV team. I might bust out the cheatsheet because that t
695.
by spydum 10y ago
In fact Azure security center does quite a lot of threat and malicious traffic analysis. OMS is going to be rather interesting as it matures as well.
696.
by spydum 10y ago
Sounds exactly like the CTOs job. I think too often the folks in SV abuse the CTO title when they really mean senior architect or engineer. I'll offer advice but it comes from someone with no experience: Take this opportunity and grow
697.
by spydum 10y ago
just my own prediction.. msft will attempt to replatform the entire stack onto Azure, making heavy use of their Azure platform services as a way to show how scalable they are (sort of the same play they made with hotmail decades ago).
698.
by spydum 10y ago
i don't know, a lot of folks show up to CTFs with skills to break conventional apps. Actual reverse engineering (especially something a little different like radio) takes a bit more creativity and effort.
699.
by spydum 10y ago
Firewall is a component to a layered defense. One of the points about Ubuntu was starting the service immediately after install, was it not?
700.
by spydum 10y ago
How does it feel to be just under the 800ft line? Does article make you wish you could have added just a few more floors? ;) In all seriousness - I've never been to nyc (never had a reason to I guess). I just don't comprehend the
701.
by spydum 10y ago
Did I misread? >In order to estimate annual maintenance costs, we found the amount spent on every two oil changes (as oil changes are generally done every six months). This cost only considers oil changes? That is not a realistic cost of
702.
by spydum 10y ago
maybe I'm missing something, what will the chickens eat? "whatever they find on the ground" is not exactly a strategy for growth, especially if everybody is raising chickens, you can pretty much expect the availability of edi
703.
by spydum 10y ago
I thought they did not have the "reason" for the arrest -- only the warrant. The arrest may have nothing to do with accessing the Public FTP, and entirely to do with the research he was doing on the FTP service itself. If he was a
704.
by spydum 10y ago
I think woodmans argument is that AMT is an active service, you should see network traffic to the management engine and such -- so firewalls/airgaps/SPI should detect and prevent tampering. I think that is a naive view of AMT, it
705.
by spydum 10y ago
perhaps everyone who finds something disappears? </sarcasm> seriously, AMT is stuff of nightmares. runs even when machine is powered off.
706.
by spydum 10y ago
developer only writes code for a component (maybe to a spec), engineer has responsibility for either operations, or individual component/solution design. Architect is responsible for a comprehensive set of solutions. Not sure everybody
707.
by spydum 10y ago
You linked right to it.. what do you mean? $ ./bless_client.py region lambda_function_name bastion_user bastion_user_ip remote_username bastion_source_ip bastion_command <id_rsa.pub to sign> <output id_rsa-cert.pub> If succ
708.
by spydum 10y ago
The AWS/IAM secrets wouldn't be passed around, except on initial creation.. Not sure what you mean? The problem they are fighting is host-level SSH authentication. Developers tend to have SSH keys stored all over the place, and it
709.
by spydum 10y ago
ah, some how that wasn't so clear. Clever idea, but how do you distribute load across your front-end servers (or whatever is your actual public facing service)? Do you still rely there on a load balancer or round-robin DNS? I guess I&
710.
by spydum 10y ago
> But if you mean pissed off about Google using it's position of power to arbitrarily decide what technology "wins" and "loses" - people are pissed off. I think categorizing it as winners and losers is wrong. As
711.
by spydum 10y ago
I'm confused on why in your article, you say the setup doesn't use a load balancer. How is a dynamic reconfiguration of IPTables not the same as a load balancer? What happens when your iptables box dies?
712.
by spydum 10y ago
https://github.com/search?utf8=%E2%9C%93&q=rangeCheck+fromIn... Indeed, quite a lot, but I dont think that was the point.
713.
by spydum 10y ago
I am seriously considering implementing this and tying it into the nextdoor.com API to creating a wall of shame in my neighborhood.
714.
by spydum 10y ago
Pretty good write up. The author glosses over the finance part at their own peril. I'm noticing enterprises with longer and longer payment terms.. As in they mandate their vendors provide net-90, which seems insane to me. It used to be
715.
by spydum 10y ago
> As a software developer, I envy writers, musicians, and filmmakers. Unlike software, when they create something, it is really done — forever. A recorded album can be just the same 20 years later, but software has to change. This is fun
716.
by spydum 10y ago
Who would win? In all seriousness I think you'd undo the last couple decades worth of productivity gains in just a couple days..
717.
by spydum 10y ago
For what's it's worth, this type of analytics and market research is what Nielsen (NLSN) has been doing for several decades.. Indeed they were the first real BigData company. They just don't charge monthly.. You buy access to
718.
by spydum 10y ago
InfoSec folks dont make vulnerability data public usually..
719.
by spydum 11y ago
Obviously I have no evidence, but my suspicions are that its like the pac-man world, it just continuously loops on itself. Its just really big...
720.
by spydum 11y ago
As with anything, I think folks are trying to sell you tools for the "how" part. The trouble is always in the implementation. His point is very valid about poor architecture is hard to change... And I think over investment in tool

More ›