technion

54 ms·

721.
A puzzle game of password requirements(passwordfromhell.com)
2 points by technion 6y ago|0 comments
722.
by technion 6y ago
That's how I read the text initially - but the diff still notes multiple @linux.ibm.com email addresses as maintainers.
723.
by technion 6y ago
Unfortunately Microsoft was inconsistent with this advice. They published that article in 2016, however in 2018 I logged this issue regarding their published best practices: https://github.com/MicrosoftDocs/windows-itpr
724.
by technion 6y ago
This hasn't been updated in a while but there's plenty of references: https://gist.github.com/technion/65c652194fb1427e6828ea23ff4...
725.
by technion 6y ago
If you have password rotations forced in Office 365, it will actually prompt you at the admin page with a recommendation to turn them off. There's documentation here: https://docs.microsoft.com/en-us/microsoft-365&
726.
by technion 6y ago
All those years ago I would actually take helpdesk support calls from business users that wanted help punching the monkey from their work computers. People would put work on hold until I walked over to their desk and clicked it for them. I
727.
by technion 6y ago
A substantive portion of these unpatched servers end up ransomed. And if not yet, they will be. A proportion of ransom victims show up expecting the FBI to help, even if they were extremely negligent in allowing the incident to occur. Anoth
728.
by technion 6y ago
That would be substantively less user hostile to me than a massive bill on a personal project, which is easy to see occurring for any number of reasons.
729.
by technion 6y ago
I believe this has been limited more recently. I just put my number in there and it just says that I can click OK to text myself a password reset, but didn't leak any details on screen.
730.
by technion 6y ago
Lower end VPS providers have offered full console access for years. For example: https://www.linode.com/docs/guides/using-the-linode-shell-li...
731.
by technion 6y ago
I did a job where I was given access to a server in the form of a set of credentials for an HPE iLO, which was accessible over the Internet. From there, we could use the remote console to logon as root. HPE iLO doesn't support MFA or a
732.
by technion 6y ago
Looking at their FAQ, mwave seem to have ceased this practice but they had a thriving online business at the time I wrote this: https://lolware.net/2016/11/17/requesting_bank_login.html Everybody single perso
733.
by technion 6y ago
I can't help notice that they describe a website that "looked professional", with an image that looks very similar to this array of sites: https://imgur.com/a/c9S2jRp
734.
Microsoft Probes Whether Leak Played Role in Suspected Chinese Hack(wsj.com)
3 points by technion 6y ago|1 comments
735.
McAfee Announces Sale of Enterprise Business to Symphony Technology Group $4BN(mcafee.com)
1 points by technion 6y ago|0 comments
736.
by technion 6y ago
Unfortunately a few comments here have honed in on one contrived example of why I think this strategy is broken. To give another contrived example: I personally had a logon to this portal, but it broke last year when they integrated logons
737.
by technion 6y ago
I get what they're saying, but in the majority of organisations the persons who spends their entire day reading Adobe's EULA and counting Oracle client installations isn't considered the sort of role that anyone has ever cons
738.
by technion 6y ago
This take was always problematic in my view. It's the reason that I had years of inherited servers with a proxy sitting in front of exchange that consistently broke things everywhere it was done. In practice, this exploit is just anoth
739.
by technion 6y ago
Unfortunately "moving to Office 365" for many organisations doesn't get rid of Exchange. Microsoft's article on "how and when" is basically a list of reasons you might be stuck with it. https://docs.
740.
by technion 6y ago
We've got some information on the timeline (and a name) on one of the major exploits here: https://proxylogon.com/ Some of the detail on where this is a mess - The relevant security update is only offered for the lates
741.
by technion 6y ago
Wait, was this.. The Soundblaster "Edutainment Pack"? I have a feeling I got the same exact package.
742.
by technion 6y ago
It'll "work" but the cert will be considered compromised as soon as an end user pulls the device apart and obtains it.
743.
by technion 6y ago
I had this with one of my own projects - a complaint that it didn't support an s390. I proposed a patch based on the described issue and stated it would be merged the moment someone who actually had an s390 tested it. Noone came forwar
744.
by technion 6y ago
This article specifically calls our Teamviewer as the vector: https://www.reuters.com/article/us-usa-cyber-florida-idUSKBN...
745.
by technion 6y ago
I don't need to Google them. "Residential proxies for sale" is one of the most common Facebook ads I see. There was one on my screen just five minutes ago. It's staggering that the industry is so blatant.
746.
by technion 6y ago
I have a pair of HP Elite monitors which are glossy in my home. As far as I know they don't make these any more, but I've been using them for over ten years and I've resisted upgrading to bigger because I enjoy the gloss so m
747.
by technion 6y ago
To this very day, the majority of non technical executives having a security conversation raise with me "so we're definitely not using Supermicro right" as their top security concern. It's incredible how much that story
748.
Microsoft Security Adventures Game(mssecurityadventure.com)
29 points by technion 6y ago|7 comments
749.
by technion 6y ago
This actually rules out a substantive number of registrars. I have a statement from an account manager at our wholesale supplier arguing that the requirement to know both the email address and password is considered "two factor" i
750.
by technion 6y ago
There is definitely a bubble effect here. Every trendy startup seems to use gsuite, but you'd be looked at quite strangely if you suggested it in some of the circles I've worked in.

More ›