technion

45 ms·

601.
by technion 5y ago
The two most significant issues I've dealt with in the last year have been Microsoft's PrintNightmare and the two rounds of 10/10 Microsoft Exchange vulnerabilities. In both cases, news regarding mitigations, scanning, live e
602.
by technion 5y ago
That's the service I generally recommend but you're looking at $199 per month for even small businesses.
603.
by technion 5y ago
You don't, but I've tried what you suggested and it fills with thousands of xml files attachments you have no hope of reading. You could just ignore them, but that gets down to what I mean by "doing it properly".
604.
by technion 5y ago
Unfortunately I've had many related experiences. Mail works at first or on a small scale, but eventually a customer with Google workspace mail tells you email goes to junk, and Google support sends you this article in response which de
605.
by technion 5y ago
Email is in a funny space. Spf showed up. And although it meant some political fights when people expected to send email from anywhere, it was free to run in the dollar sense. Same with dkim. Dmarc is increasingly required to get past spam
606.
by technion 5y ago
These are all consumer products. The issue isn't sysadmins, it's mum and dad that saw the advertisements currently running on Facebook and clicked "buy".
607.
by technion 5y ago
Defender allowed a person to easily fix for that for Norton and I'm about to have it fixed for Avira: https://imgur.com/a/kPGUF44
608.
by technion 5y ago
I noted yesterday that if you sign up to Independent Reserve, they have an "account reason" section and "ransomware/cryptovirus" is actually a valid account sign up reason from the pull down. I was surprised to see
609.
by technion 5y ago
Although the card itself has an unclickable cursor for some reason, there is a relevant clickable piece of text under it.
610.
by technion 5y ago
This is an underrated point. Every "best security practices" guide you read has you setup MFA for console access, then create IAM keys with no such protection. The credentials I'm using with Terraform require MFA in order to
611.
by technion 5y ago
I'm surprised MFA isn't mandated by default. It is in Azure: https://docs.microsoft.com/en-us/azure/active-directory/fund...
612.
by technion 5y ago
Here we have a person not running Exchange, seeing the impact on their own outbound delayed queues: https://twitter.com/taupehat/status/1477367798326120458
613.
by technion 5y ago
There's been a influx of "memes" that just say things like "when you buy new sunglasses from x.com" and it's just a picture of Leonardo DiCaprio making a face. My own friends repost these things on social media
614.
by technion 5y ago
Can confirm, when I made this thread it didn't have the old. name in the URL.
615.
by technion 5y ago
You could have 15 people in an org and it's entirely unsupported to drop the Exchange server if you wish to have AD synced users regrettably. MS are very clear that "ways around it" go against their recommendations, even if I
616.
by technion 5y ago
As far as I can tell, there's currently no official acknowledgement of this issue. It has affected 100% of the Exchange servers I'm overseeing. In every case, a complete halt to mail was corrected by a fix only escribed on Reddit
617.
Microsoft Exchange stops passing mail due to bug on 1/1/22(old.reddit.com)
711 points by technion 5y ago|358 comments
618.
by technion 5y ago
Kind of interesting contrast to their advertising: https://community.hpe.com/t5/Alliances/Protect-from-attacks-... Quote: The iLO5 chipset provides an unprecedented level of hardware security with its silicon root
619.
by technion 5y ago
It's not directly your answer but I highly recommend this for elderly relatives and anyone susceptible to scams: I grabbed the signing certificates for Anydesk, Logmeinrescue and all the common "remote management" apps, and b
620.
by technion 5y ago
Wait until you have apply a security update for teams in environments where users aren't local admins and get a desktop-wide install. Microsoft wrote a not officially supported Powershell script to hack this in, noting this might be ne
621.
Crown Sterling final Whitepaper [pdf](f.hubspotusercontent10.net)
2 points by technion 5y ago|0 comments
622.
by technion 5y ago
I agree in principle but there's context to this discussion. I've had people argue (to be clear, on work provided computers) that having EDR software phone home with "User downloaded free-movies-mp4.exe and it contained ranso
623.
by technion 5y ago
Aren't every one of those facts supposed to be the sort of thing that gets you downranked on Google? Slow pages, pages that don't load, pages appear in Google but when clicked present a logon wall? I've posted on own blog on
624.
by technion 5y ago
In general I'd say yes. AD syncs to Azure totally painlessly and MFA "just works" if you turn it on.
625.
by technion 5y ago
I have read that ticket and the JNDI documentation multiple times and I still can't picture what it would look like to choose to use this. Can anyone show me a codebase that utilises this feature so we can see why?
626.
by technion 5y ago
I don't believe this library exists in the same space. If you consider this sort of function, I don't believe you'll see equivalents in libsodium. https://github.com/coinbase/kryptology/tree/mas
627.
by technion 5y ago
That's pretty much what I've experienced myself at one point. We had a client sending extremely sensitive data around by email. One day I was told we should all relax, the problem had been solved. You see he'd been sold a PGP
628.
by technion 5y ago
Sadly every WAF vendor is falling over themselves to claim otherwise. I've already had arguments with senior leadership suggesting there's no need to worry about patching because multiple vendors have promised their solutions are
629.
by technion 5y ago
Regrettably I have multiple products, such as pos software from Oracle, that break on minor point release java updates.
630.
by technion 5y ago
This is what I've been waiting for for many years. I did these before answers could be found, and there's a few places I had "working" answers but wasn't happy with the maths and wished I could discuss it. Just a fe

More ›