technion

57 ms·

781.
by technion 6y ago
Theorycrafting: Is this choice of two SHA256's of different data a case of hedging your bets against a canonicalisation attack that may be involved in SHA512(Context || M).
782.
by technion 6y ago
Regardless of whether it works, people still pay for it. I have a Facebook ad right now that says "Get over 500,000 backlinks for $29.99". No doubt it's someone with a bot that spams comment forms.
783.
by technion 6y ago
The thing to note there is that despite being on a "black hat" website, most of those ads are from marketing or SEO companies linking to their own legitimate company websites. It's clear most of them just see this as how inte
784.
by technion 6y ago
Every time I hear such a story, it involves Gnome or X or some similar GUI issue. I run Arch on headless servers and can't relate - maybe there's a connection there.
785.
by technion 6y ago
For a short period they actually looked like they were rebranding as Intel security. All their material stopped actually saying "McAfee". Intel selling them off again put a stop to that. The other branding issue is no-one seems ca
786.
by technion 6y ago
Just to expand on this, the "McAfee SECURE" logo was sold to PathDefender (not TrustedSite) and all those McAfee logos you see on websites aren't operated by McAfee any more.
787.
by technion 6y ago
Microsoft's "official" status page, which they will usually refer you to, can be found inside the admin center. They've been criticized in multiple previous incidents however, for experiencing an outage then telling peop
788.
ACSC Annual Cyber Threat Report, July 2019 to June 2020(cyber.gov.au)
2 points by technion 6y ago|0 comments
789.
by technion 6y ago
>Check for passive voice in your copy. I know this is a meta statement but I cannot possibly believe that this is the sort of thing that would cause Google to downrank your site. A quick search informed me there are thousands of SEO blog
790.
Obtaining Corporate Credentials via the Autodiscover Circus(lolware.net)
2 points by technion 6y ago|0 comments
791.
by technion 6y ago
She is also not a porn star. None of this content is nude. The running joke is that there are pap photos showing more skin than what people paid for here.
792.
by technion 6y ago
I'll actually be ok with that. The security recommendations they put forward at the end are significantly better than anything I can ever get backing to implement.
793.
US travel firm $4.5M ransom negotiation open chat(twitter.com)
585 points by technion 6y ago|463 comments
794.
by technion 6y ago
Without details it's hard to say. They talk about "phone spear phishing". It's within the realm of that description to say they were hit the same way someone I know recently was - someone called and said "Can you ju
795.
by technion 6y ago
I know I've said this before here but.. it goes the other way too. People make a big deal of SPF/DKIM etc. I think you should, for the sake of best practice. But you can set yourself up with gsuite or Office 365 and pay no attenti
796.
by technion 6y ago
> In particular, the long introductions that would start with history. I can feel this. I studied cryptography at University. There was a lot of great things studied, but the first several weeks were a discussion Enigma, the war, and a l
797.
by technion 6y ago
I've seen this sort of statement on technical forums (such as HN) regularly. I makes sense logically and I want to agree with it. But I've also been in organisations big enough to have multiple full time in-house counsel, and more
798.
by technion 6y ago
Since this is a gaming article.. A soon to be released patch offers world of Warcraft players an in game upgrade (additional bag slots) for players with MFA setup. I would have thought this would be supported by a community. Instead, the fe
799.
by technion 6y ago
There's more details in the NCSC write up: https://www.cyber.gov.au/threats/advisory-2020-008-copy-past...
800.
by technion 6y ago
I don't know but desktops used passthrough networking, so there wasn't a PC with network connectivity left.
801.
by technion 6y ago
I won't forget having a pentester nmap a local network - it hard locked every single phone handset corporation wide. People had to walk around pulling the power out and putting it back in every single desk in multiple buildings.
802.
by technion 6y ago
I haven't used this, so I went and read the documentation. node-forge is a good example of giving a user too many options in my view. As a developer looking to secure something, you've apparently decided on AES-256 against options
803.
by technion 6y ago
Some discussion on this issue. - https://twitter.com/MSFT365Status/status/1272314872307408896 - https://www.reddit.com/r/sysadmin/comments/h94652/office_365...
804.
by technion 6y ago
When you know your target runs Internet Explorer, you serve phishing pages to IE users and some boring content to other users, at the server level. We've had this keep our user tests out of Google Safebrowse and so on. I'm sure si
805.
by technion 6y ago
I'm sure this is an underrated part of why discord became such a big thing in gaming communities. With so many toxic players and threats against a person so common, a good threat model would care a lot less about surveillance and a lot
806.
by technion 6y ago
It's something you will routinely see in subreddits. Someone makes a comment wanting to link this thread, and it will say "just have a read of https://google.com/amp/news.ycombinator.com/item?id=23322730.
807.
by technion 6y ago
You cannot reasonably expect a person to refuse to even look at a suspicious email. Let's say your support product x at your workplace. From: Person you don't know. Subject: Bug report. Noone would delete that email without readin
808.
by technion 6y ago
Just to give credit where it's due here, I don't think I've ever seen a client side form check upload sizes before. I've had many frustrations going through a form upload then refreshing to a page that says "your fi
809.
by technion 6y ago
Ironically I just took a look at Snap and out of five consecutive advertisements, four were for Tiktok.
810.
by technion 6y ago
"Actually not bad" subs often include the per-language subs. /r/ruby still has jamesgolick as a mod. ref: https://news.ycombinator.com/item?id=8804624

More ›