technion

53 ms·

631.
by technion 5y ago
This is my standard time to paste it: Most of the enterprise configuration options in Defender can be put in place on a standalone desktop by opening gpedit.msc. You can configure exclusion paths for node_modules. You can configure sensitiv
632.
by technion 5y ago
It's actually a substantive money saver in a shared compute environment. Running Windows RDS or VDA solutions, you can actually watch CPU and RAM reductions across the board by deploying uBlock Origin.
633.
Using Azure MFA for on Premises Active Directory(lolware.net)
1 points by technion 5y ago|1 comments
634.
by technion 5y ago
I know HN has collectively accepted but every time I'm associated with an organisation that pays for a penetration test it comes in as a high risk finding, so much so that I've given in to deploying it to avoid sitting with non-te
635.
by technion 5y ago
- What's your ticket system like? If people can just drop by your desk and ask about their printer that's something you'll want to change - I know with your security background when Bob in accounts demands a domain admin pass
636.
by technion 5y ago
For political reasons we buy a tonne of their certificates. It's not uncommon that I'll paste a CSR into the interface and just get a quality error like "Unhandled Exception", which basically tells me that they fixed it.
637.
by technion 5y ago
The part that's contraversial about the MS bounties is that they stopped covering the majority of on-premise products. For example, person that reported the two major Microsoft Exchange vulnerability chains received no payout at all. R
638.
by technion 5y ago
A comment elsewhere is that the site was made with the 'IBM Form Experience', and that this issue is possibly just a part of how that product works. In which case I could totally see how it's part of the culture, having worke
639.
by technion 5y ago
It's actively supported by a company who themselves recommend against it and described its use as technical debt (in 2019) https://techcommunity.microsoft.com/t5/windows-it-pro-blog/t...
640.
by technion 5y ago
Awesome. A guide written in 2019 from the FBI that suggests Internet Explorer.
641.
by technion 5y ago
There's a paste from another recipient's headers: https://pastebin.com/8ES3t1hv I believe the very top line is inserted by the victim mailserver and points to an FBI IP in a way that can be considered accurate.
642.
by technion 5y ago
It's been a while since I interviewed but that second one has always come up for me, and I find it exceedingly horrible. Why can't the business just say "the policy is that you email a manager/call another manager/a
643.
by technion 5y ago
Just adding to these from my favourite incident: You restore from backups to alternate hardware, but your key software is license locked to hardware. It was always the documented recovery process to contact the vendor and request a new lice
644.
by technion 5y ago
Microsoft's done away with "individual updates". The current update for Windows 10 is "October 12, 2021 Update" and aside from a few exceptions such as CPU microcode updates, it bundles every previous update.
645.
by technion 5y ago
Last time I got frustrated by Microsoft update time, I created a PR for their update documentation while I was sitting there watching it that described how long it took. They merged it. https://github.com/MicrosoftDocs/
646.
by technion 5y ago
There's a practical benefit that it leads to seamless Bitlocker deployment without making users manage keys or do things that would lead them to prefer to not have Bitlocker. That definitely counts for a lot. It's just a shame tha
647.
by technion 5y ago
I'm usually pretty critical of tiny NPM modules, but I really want to support whoever maintains this package. Hundreds of lines of regexes, people asking about IE8 support, and a constantly moving target every time a browser changes so
648.
Server overload by enforcing DHE key exchange using minimal bandwidth(github.com)
19 points by technion 5y ago|1 comments
649.
by technion 5y ago
As a complete outsider, I have an impression at least that Google PMs have some level of technical knowledge. Which would make them far more "engineer led" than is common.
650.
by technion 5y ago
This is what a junk mail folder looks like on a mailbox that registered a domain and didn't employ domain privacy: https://ibb.co/jbF4169 It's like this all day, every day, and that's only what's gotten
651.
by technion 5y ago
A bug bear of mine for a long time has been the best practice of always having SQL server in full logging mode, with highly regular log backups. It's great for important production services. In practise I run test databases I could reb
652.
by technion 5y ago
I live in Australia and a substantive portion of my advertising feed is for US politics. Right now I'm looking at a Bible quote on an advertisement for the Texas abortion bill, and yesterday I had a picture of a roadblock and an ad tha
653.
by technion 5y ago
The risk that a person could potentially write an infinite while loop and commit it to a codebase is about the same as the threat posed by the DoS "vulnerabilities" that seem to have completely overrun the NPM audit system. Noone
654.
by technion 5y ago
The specific email you've listed here the format of a well known scam. There's been a tonne of this for filters to train on. https://www.bleepingcomputer.com/news/security/new-elon-musk...
655.
by technion 5y ago
It's interesting that you describe it as controlled. We always used Bravecto right OTC for our pets (Australian here). https://peto.com.au/bravecto-plus-flea-tick-and-worming-trea...
656.
by technion 5y ago
World of Warcraft players were using it in 2008.
657.
by technion 5y ago
As a counterpoint, I'm supporting a lot of corporate environments and I'd love if just one user anywhere expressed a desire to use Python. I've encouraged people look at it several times, along with R Studio or anything else
658.
by technion 5y ago
Yes it's been an interesting one to read through Microsoft's "what's new" for Windows 2022, there's multiple references to TPM support and Credential Guard and the MS Edge Browser (features we have already). We
659.
by technion 5y ago
Microsoft has made a big deal out of this being their way forward, but the only way to logon to a Windows Server is to use a password (unless you count a Smartcard) and their answer for how this all fits together is pretty much "let&#x
660.
by technion 5y ago
I'm a four hour drive from the test area but I tried to look into costs. It seems they do quite a few things beyond just coffee: https://wing.com/en_au/australia/canberra/ All the stores listed appear to

More ›