technion

35 ms·

511.
by technion 4y ago
Thank you for this list. It's ironic that I've seen so many "Awesome.. curated" lists but this is the first one I really want to go through.
512.
by technion 4y ago
Yes that is what I'm referring to. But note Oracle has the concept of a single node cluster, so you can have a completely standalone deployment and still perform this technique hot adding a new "node" when it's the same
513.
by technion 4y ago
Not that I want to defend Oracle but I've been through the process of installing a new version, starting it up whilst loading the same database files currently being served by an older patch level, and seeing it fail over to the new ve
514.
by technion 4y ago
"The bikeshed" I've been down this road. I don't know what it is, but many web developers are extremely adverse to doing it. Even once you've convinced people to let you do it, the first PR from a new hire is a fix
515.
by technion 4y ago
There's a pretty relevant blog that recently came up on this: https://soatok.blog/2022/06/14/when-soatok-used-bugcrowd/
516.
by technion 4y ago
Microsoft Defender can be particularly difficult about unsigned executables, which I appreciate is annoying for cross platform developers that don't have that problem elsewhere. I've submitted this as a false positive under our en
517.
by technion 4y ago
Nothing stops a person making a new wallet with limited assets for interaction with less reputable websites. Web3 culture has made this quite difficult in practice. For example, it's quite normalised to say "new exciting nft proje
518.
by technion 4y ago
Most common thing is Citrix/rds server environments. Plenty of orgs have all staff working on serversvas desktops. I was watching a doctor yesterday use a patient admin portal in IE.
519.
by technion 4y ago
I do not understand how some of these influencers are still influencers at all. Once a person has admitted to taking money to shilling four different rugpulls, how is it considered positive advertising to say "X has thrown his influenc
520.
by technion 4y ago
I think that's down to the problem you're trying to solve. Much like SSH brute force, if you know the only account is yours and it has an appropriately reasonable password and you can trust yourself not to get phished (say, you ha
521.
by technion 4y ago
I've a whole range of clients running it without an issue. I will say however, the only MFA it supports is push (ie, TOTP doesn't work), and if you're not familiar with that, be aware many Android installations snooze that ap
522.
by technion 4y ago
As someone who supports a lot of Windows environments - yes, it's incredible the rate at which this occurs. I'd strongly point people at the RD Gateway MFA plugin as a requisite for publishing RDS these days: https://do
523.
by technion 4y ago
I really worry about these sort of claims. I'm seeing pushback from people about shutting servers down because it's insisted "a WAF is protecting us now", and that's based on a "may reduce risk".
524.
by technion 4y ago
It's a common pattern in Java injection vulnerabilities. You can see an example here: https://portswigger.net/research/server-side-template-inject...
525.
by technion 4y ago
I don't think you need to work at Microsoft to be nervous about that. I've had recruiters offer to sell me information on who here is communicating with them on LinkedIn, without even being in a management or hiring position mysel
526.
by technion 4y ago
Wait until you hear someone yelling at the helpdesk because their Ashley Madison email was caught by a corporate spam filter..
527.
by technion 4y ago
This is the part that I don't get. 15 years ago I worked at a place where there was an entire room of people who were hired to literally do nothing but read your internal mail all day. One of the deployment rules were to make sure they
528.
by technion 4y ago
If I get a dependabot alarm for my Rails project, I would do well to make a bet that it's a nokogiri vulnerability. I haven't looked into the "why" or what's really going on, but it does feel like there's a lot
529.
Follina – a Microsoft Office code execution vulnerability(doublepulsar.com)
2 points by technion 4y ago|0 comments
530.
by technion 4y ago
It's relevant that they are talking about VMware's security portfolio. The vast majority of why people are VMware proponents is down to their virtualisation software. It's why we were big resellers for a while. But for the la
531.
by technion 4y ago
I asked our own Microsoft account manager this, and they gave us a list of security features that we, in the enterprise, would use to upgrade. Looking at the list featuring Credential Guard, Virtualization based security, LSAPPL and TPM 2.0
532.
by technion 4y ago
I would have stopped using it ages ago, except for the wasteland the rest of the internet has become. I'm trying to research a medical condition today and made it to page three of Google with nothing but SEO junk and content that is cl
533.
by technion 4y ago
It'll become unusable at a few hundred meg when it takes 180 SQL queries to render a landing page.. I wish I didn't know that either.
534.
by technion 4y ago
These style of languages often come up here. Could a proponent give some examples of practical applications written in these array languages? I feel like that's missing in these discussions. People say "finance", but let&#x2
535.
by technion 4y ago
You can add to that "people who manage web hosting servers". Across our fleet, disabling hacked instances is a routine event. There is often a marketing person that wants to argue - according to their industry, WordPress is leadin
536.
Using Microsoft Sentinel to roll honey tokens on Windows(lolware.net)
1 points by technion 4y ago|0 comments
537.
by technion 4y ago
It's actually higher than I expected. I've mandated a lot of different contractors use MFA over the years and the fighting back has been depressing.
538.
by technion 4y ago
The part I always struggled with regarding 4. is that if printf() didn't exist, it's not like it bundles its own compat library. It just errors out, with a very similar error to what a user would get if they simply tried to compil
539.
by technion 4y ago
I also don't agree that it doesn't come up on HN. If we look at all the recent Ruby threads: Five hours ago, we were asked "Is Rails still relevant", and one answer is that crystal is a better option: https://
540.
by technion 4y ago
The reason I always had SELinux turned off: I would either run Ubuntu, Arch, of Amazon Linux. The Ubuntu story is not great, and you can see you're swimming against the tide of common deployments: https://wiki.ubuntu.com&#x2

More ›