technion

46 ms·

571.
by technion 5y ago
Yes it's been out for quite some time. It's also requires running a proxy as a GCP application, so people running GTM largely because it's free/cheap aren't going to go along with this.
572.
by technion 5y ago
Note that the Google announcement in question was August 2020. This didn't seem to make any significant changes to the ad-block space when it rolled out, and pretty much every site is still running the Javascript frontend.
573.
by technion 5y ago
Even before I had a job, reading "we are like family" in advertisements just left me thinking of "well you walk out on a family at 5pm just because the event ended then".
574.
by technion 5y ago
I think it depends what people mean here. As a general Office 365 user, I logon to my laptop and Outlook, Teams, Onedrive etc hasn't prompted for MFA in months. However, I have many scripts that require both "Connect-AzureAD"
575.
by technion 5y ago
Appreciated!
576.
by technion 5y ago
This was tested on a few Twitter threads, the confirmation being yes, .zip files and even .iso files will retain the mark of the web confirming they were downloaded. The special case is where 7-zip is used, which doesn't respect that m
577.
by technion 5y ago
They actually did a long time ago. A word .docx can't execute code. If it has a macro, it's a .docm, which is usually blocked on mail systems. The problem of course is the legacy of .doc, which is both of those in one filename.
578.
by technion 5y ago
Allow me to reference my own workaround for those vectors: https://github.com/technion/open_safety
579.
by technion 5y ago
The prompt to enable macros is near identical to the "protected mode" prompt, that users must click in order to do things like "print" and "copy to clipboard". No user ever questions it. To answer your question
580.
by technion 5y ago
The change means there won't be a prompt within the open word document to enable the macro at all. You would need to exit word and change the document properties.
581.
by technion 5y ago
There's a really great history on this here: https://insights.sei.cmu.edu/blog/who-needs-to-exploit-vulne... In summary, each successive version of Office actually walked back the tone of the warning if you tried
582.
by technion 5y ago
Right click on the file, click properties, click "unblock". Or use the Powershell command "Unblock-File". Close and reopen. it's not actually a new process, it's just a changed default. Some businesses set that
583.
by technion 5y ago
For all intents and purposes, macros are enabled by default. Yes, there's a simple "Click to enable" prompt. Everyone looks at it as "the button you need to click to load the document". People do it without even rea
584.
by technion 5y ago
I'll never forget a guy trying to headhunt with: "Do you see this watch? Genuine rollex. Do you know what it feels like to own one? Probably not, because you don't work for me yet, so you can't afford one".
585.
by technion 5y ago
Oh I get that bit, I just meant that was surprised they were able to find it basically immediately. It's not like my blog is high traffic.
586.
by technion 5y ago
I don't understand how these crawlers even work. Last week I published a PoC for CVE-2022-0316. The next day you Google that CVE, and a whole bunch of foreign language sites with an exact copy of my blog would show up. My own original
587.
by technion 5y ago
I ran these ads on Facebook with no issues. https://ibb.co/Wtn38Hf (there was no malware)
588.
by technion 5y ago
I'm sure that was true for about ten minutes after it was written, but it's unlikely still the case. This issue appears to suggest detections: https://github.com/Stanley-GF/PirateStealer/issues/45 I
589.
by technion 5y ago
Is it really fair to call someone a "skript kiddie" if they wrote the malware themselves that became "the most common malware" ?
590.
by technion 5y ago
Analytics and fonts shouldn't be too hard. What about Captcha?
591.
by technion 5y ago
I think people would be surprised how often it's entirely deliberate. I've had to get told "this is why we used the cloud... so dinosaur sysadmins like you wouldn't slow us down" by many different companies where I&
592.
by technion 5y ago
I can't really follow this. If I am trying to email you, there is nothing that could be broken about your DMARC policy which would prevent your mail server receiving my email. What matters would be my own policy, as the sender. Now you
593.
by technion 5y ago
There's been a lot of news about Mongo and ES, wait until people start searching for MS SQL servers with blank sa passwords. I've lost count of the amount of conversations I've had trying to shut that down with various organi
594.
by technion 5y ago
People come with all sorts of rules, but honestly I think sometimes you just know. I've seen code that breaks a lot of the rules people are going to list, that I've felt in practice was fine. This is what I've inherited. Codi
595.
by technion 5y ago
He is a Microsoft MVP. A title that is given for being a "community evangelist" of Microsoft. You wouldn't get that throwing it on a Heztner machine. Edit: Consider this article, and Geoff's statement about Azure credits
596.
by technion 5y ago
Is there supposed to be an answer to this or am I struggling with the UI? Here's how this looks to me. https://ibb.co/BTf9N1N
597.
by technion 5y ago
NSW Police need to keep making Facebook posts stating "our last SMS was not a scam" because people keep questioning them. Maybe not use bit.ly links in broadcast messages. https://www.facebook.com/nswpoliceforce
598.
by technion 5y ago
I'm jaded enough to imagine that if I ask someone to define it better and try to give a "senior" response that covered codepoints, an interviewer will write down "struggled with simple question". Edit: That seems co
599.
by technion 5y ago
Discussions around NFTs frequently involve someone making statements about URLs, followed by a defence along the lines of "every real NFT project uses IPFS, and every real buyer checks this". I picked a random artblock project and
600.
by technion 5y ago
Accounts involved in obvious karma grabs often show up sometime later with product "recommendations", noting that they are an established high karma account and definitely not a marketing person.

More ›