technion

21 ms·

301.
by technion 3y ago
Until recently, every time a story was run about a leak being "for sale on the dark web", you could visit raid forums or breach forums, both clearnet sites, and note that's where it's for sale.
302.
by technion 3y ago
We just do saliva tests here in Australia. It's has its own set of problems but I cannot understand the position thats its better leaving things in the hands of a subjective test like this.
303.
by technion 3y ago
There's an awful lot of SEO people on Twitter that claim to be connected to Google, and the article he links on the Google domain as a reference doesn't say anything on the topic that I can find. I'm reluctant to call that an
304.
by technion 3y ago
Seeing it declared a WONTFIX to me helps answer which of those it was. If it was fraud, you'd expect a fake apology and a fix at this point.
305.
by technion 3y ago
As an Australian, it was extremely obvious that image was fake the second it was seen simply because we had a policeman with a machine gun like that. If you're going to claim Australia is a "police state" I'd urge you to
306.
by technion 3y ago
We kind of had an example last year in Australia where a climate protester shut down Sydney bridge. It was absolute chaos city wide and I'm sure it will inspire copycats.
307.
by technion 3y ago
I've been complaining about this for a while. Everything I try to test with urlscan.io (as a safe sandbox to view a phishing site) has for a while just given me a Cloudflare captcha. Everything I submit to certain automated malware ser
308.
by technion 3y ago
uBlock on Edge blocks that same URL and the page works fine without it.
309.
by technion 3y ago
Microsoft Exchange being listed alongside entire operating systems with comparable numbers of ITW vulnerabilities is somewhat something I relate to after running such systems.
310.
by technion 3y ago
For the last few weeks uBlock on my devices seems to have just stopped Youtube ever playing anything. I've read plenty of threads about it but gave up and turned it off for the domain.
311.
by technion 3y ago
This whole situation just shows as a lie everything we hear about SEO. Stack Overflow has the exact text, it loads incredibly fast (should be commended more for this), doesn't require ten meg of Javascript to render as far as I know ge
312.
by technion 3y ago
That's going to depend on your domain, because most fronted d questions I come across end in "there is a jquery plugin for that" which don't help modern sites without jquery.
313.
by technion 3y ago
Ironically, Palo Alto lists this domain as "Phishing" and blocks using it.
314.
by technion 3y ago
I'm not a fan of hooks (and the endless blog posts and opinions that hooks somehow were the invention of functional coding), but react server components did a lot of people in. The default expectations being that react frontends have a
315.
by technion 3y ago
My issue with these "they don't need to worry about security" issues is that this issue is at its core still an obvious bug. If your password generator puts a ; in your password your attempt to set it will break. I went throu
316.
by technion 3y ago
Last time I raised this I was told to subscribe to RedHat's notifications. Now I get 10+ emails a day related to some Openshift module I've never heard of, and the one thing I know for sure is that it a CVSS10.0 comes in nginx out
317.
by technion 3y ago
As far as I can tell he is the ceo of a company with product positioned as an Ai chatbot that can replace staff. Is this whole roasting not just submarine advertising?
318.
by technion 3y ago
Support windows for enough end users and you'll never touch a debloat script. They invariably work fine until some update breaks something, and the hobbiests that promote these hack jobs also promote simply rebuilding your machine whic
319.
by technion 3y ago
My experience with this sort of enterprise software is that if you are a user, there is usually someone higher up the org chart than you that is worried such a disclosure will damage his relationship with his mate. My point being, much like
320.
by technion 3y ago
A friend of mine tried mastodon on my recommendation. But he couldn't find a "login with facebook" button, which is how he assesses whether a website is trustworthy. Mastodon to him is "like a scam version of threads&quo
321.
by technion 3y ago
I think the "don't do this" examples are actually some of the least egregious examples of this problem. I've got an infamous chat I here where a guy opened with "hey".. followed by a "how are you".. a
322.
by technion 3y ago
I keep referring to the situation where a supplier sold the Cisco select range. If you clicked the page on their site, select showed up in the url and their way blocked your connection.
323.
by technion 3y ago
OK hear me out: a Linux capability like option that removes the .. option from the kernels file name parser. Like web apps have been seen various bypasses involving somehow smuggling two dots somewhere since we were on dial up modems. It&#x
324.
by technion 3y ago
If this happens to be a reference to Microsoft, their famous laying off of qa people has been regarded as a disaster by everyone outside Ms, with windows update quality dropping off a cliff.
325.
by technion 3y ago
Office 365 offers message retention - our standard configuration will see it set with a seven year period. So you can delete from the outfox, and it goes to deleted items. If you delete from there it disappears from view, but any admin expo
326.
by technion 3y ago
The padding oracle challenge has just been the gift that keeps on giving. I wrote a Ruby Gem for exploiting this: https://github.com/technion/paddingoracle I've since used it in the wild several times. It is shock
327.
by technion 3y ago
That's pretty much the story. It came in as a high priority issue with no context. I asked for clarification, he asked if we wanted to fail the the audit. I changed them to red and he wrote a thing about we were more secure now.
328.
by technion 3y ago
I'm aware Java can be fast, but thats never what I work with. The products I've supported include vmware vcenter, confluence and epo. In all cases, just restarting a service is a "go have a coffee" affair. It really says
329.
by technion 3y ago
I've been told we'll fail a pci audit unless we go into the datacenter and replace all the blue cat5 with a different colour. Nothing is apparently too silly.
330.
by technion 3y ago
Meanwhile my issue with it is that the story got so popular online, given it feels like a normal day with most security auditors. I have to have worked with dozens of guys just like this. The only thing consistent is that they are the ones

More ›