technion

29 ms·

421.
by technion 4y ago
Related: This viral video of a catalytic converter thief in Bankstown Australia: https://www.tiktok.com/@alfa_towing/video/715361999595885696...
422.
by technion 4y ago
Depending on context, "vulnerable ciphers" often lead to high priority vulnerability alerts that aren't a significant threat in practice. For example, best security practice would have disabled tls 1.0 years ago but most majo
423.
by technion 4y ago
This whole write up is what gives me nightmares, kudos for anyone who works in this field. You cannot write a test suite to catch regressions. How would you build a ci that detects sd boot failures on commit? A static analyser couldn't
424.
by technion 4y ago
Possibly a legacy of websites with tilde home directories being the norm at one time.
425.
React Monkeypatches Patches Fetch()(github.com)
1 points by technion 4y ago|0 comments
426.
Microsoft font parser ported to rust(twitter.com)
2 points by technion 4y ago|0 comments
427.
by technion 4y ago
I bought my apartment a decade ago. I needed to move to another area so I rented it out. I regularly see these takes hn and I don't get what's so assholeish about my situation. I know that my tenant is on a temporary visa. Are we
428.
by technion 4y ago
I have a small service for an nfp on the $20 plan and I remember working out cloudfront+aws was would have set them back roughly 1500 per month, and that's without looking into occasional viral traffic spikes. The price disparity is ba
429.
by technion 4y ago
Note that features on the insiders ring often either don't reach production deployment, or take years to get there unfortunately.
430.
by technion 4y ago
Yes it's definitely a "server with dedicated role" scenario.
431.
by technion 4y ago
Honestly if if a big enough organisation hasn't disabled untrusted Word macros by policy several years ago their odds of being ransomware victims by now would be close to 100%, and based on what I've seen the odds of having been v
432.
by technion 4y ago
As a real side issue, you actually can optionally remove support for 32 bit apps from Windows server. Guess how much malware suddenly can't execute.
433.
by technion 4y ago
Exactly how I would have done things except the hardware we used to sell had F6 to load raid management firmware.. so too early and I would end up looking at disk configurations. Of course there was no exit when I pressed too early, just an
434.
by technion 4y ago
I remember windows would give you what felt like 10ms to press f6 to load a driver. The text offering you the option would sit on the screen for about two seconds after the opportunity has been missed (causing confusion), and your only solu
435.
by technion 4y ago
It will no doubt be "Defender for networks" or something similar in short order. Nearly everything in the Ms security stack had such a rebrand.
436.
by technion 4y ago
I really feel for developers of projects like that. It presumably took a lot of work, was done a long time ago and been maintained since, and solves a lot of potential problems. But I also haven't heard of it before your post.
437.
by technion 4y ago
There is a current front page article on the same blog, I suspect someone browsed from that and shared what they found.
438.
by technion 4y ago
I would suggest azure has an approach that shows how iam can be a lot simpler. I can create a resource group, and make you a contributor on that group. You now have full permissions to servers, storage and anything else created under that g
439.
by technion 4y ago
The hypothetical I want to pose people is, let's say your server is corrupted or I.pacted by ransomware. So you pull your gpg backups and hit restore. The data somehow looks correct and in line with expectations, but the signature fail
440.
by technion 4y ago
I agree with that being a major part of the problem. Regarding root, I always create an account with a console login that can remove the root user mfa or reset a password, it becomes the recovery account and I can put its own key on it, and
441.
by technion 4y ago
It's just the workflow. Mfa is fine with passwords and console, but everyone has been educated to understand once they have a iam key saved on a disk its no longer correct to have.
442.
by technion 4y ago
Regarding 1, my own cli runs aws-vault set-up such that I need to enter a totp code to assume a privileged role. It sounds like really basic security - my saved credential can't go delete servers. Absolutely everyone, from aws certifie
443.
by technion 4y ago
This is pretty consistent with communication most people get from recruiters: tell me your salary so we can know what you are worth. Back home I have a few screenshots of LinkedIn messages that opened conversations asking for screenshots of
444.
by technion 4y ago
There's some interesting pr work in describing her this way in a heap of articles on the incident. The article links her twitter profile, and her own bio there never mentions twitch or streaming.
445.
by technion 4y ago
I read your quote and I thought "nah, it's probably just Spez pushing crypto again". Then I click your link and he goes on to suggest Reddit NFT have been a community success. Then he talks about making people's lives be
446.
by technion 4y ago
On that issue I've never seen a LinkedIn message from a Tiktok recruiter, or heard messages about mass hiring. Anyone know if they operating on a much lower staff count?
447.
by technion 4y ago
I keep telling the story of attempting to buy some enterprise routers. I would logon to my distributor's website, click on the CISCO SELECT range, and get blocked from the site for an attempted SQL injection ("SELECT" in the
448.
by technion 4y ago
I've always used a custom domain not with google, but the reason I would find it hard to get off gmail is the list of sites that only offer a 'login with gmail' with the only alternative being 'login with facebook'.
449.
by technion 4y ago
Well if you're familiar with Google Workspace.. you know once you've got email accounts in there then there's a whole lot of user admin you can do? Azure AD is just Microsoft's version of that directory. The thing is if
450.
by technion 4y ago
You can also enumerate that tenant and see which businesses share infrastructure/accounts. https://github.com/technion/azure_enum

More ›