technion

48 ms·

841.
by technion 7y ago
We logged a paid support case with Microsoft a while back, and support tickets were coming from something like microsoftdynamicssupport.net. The domain wasn't even registered so we had to call them and discuss the way our email replies
842.
by technion 7y ago
A recurrent discussion around security.txt is the question "would it actually solve the problem?". In this case, we've been advised the project's maintainer is MIA. A security.txt file containing a maintainer's emai
843.
Influencers Were Invited to Endorse Poisonous Cyanide Drink, and They Said Yes(designtaxi.com)
3 points by technion 7y ago|0 comments
844.
by technion 7y ago
As much as I appreciate with the premise that this shouldn't have happened.. I'd much rather people feel safe coming here talking about it. They talk about a long past incident and they don't suggest they are proud of it. Hav
845.
by technion 7y ago
I can pick up a few here: https://github.com/MicrosoftDocs/azure-docs/search?q=bit.ly&... Edit: All those seem "legit", but do point to a pattern
846.
Reddit Infrastructure Team AMA(reddit.com)
13 points by technion 7y ago|1 comments
847.
by technion 7y ago
Unfortunately many of the applications in this space basically operate by placing the "database" on a file share that people have access to. This also involves heavy use of OpLocks, causing you to be required to neglect security a
848.
by technion 7y ago
For people discussing automated tools and noise, prediction: we will start seeing automated tools flagging "missing security.txt" as some sort of vulnerability and I will end up implementing it just to stop the noise. It feels lik
849.
by technion 7y ago
This discussion comes up a lot, and I'd make an opposing case. Rather than debating whether OpenBSD can reasonably say this - I'd suggest most Linux distributions could say it themselves if they so wanted. Last time I installed Ce
850.
by technion 7y ago
I've tried this out so I can report the experience. First, I can confirm the only permission requested is camera, and that's only when I first try to use the "scan a license" function. It seems like a Google Play bug tha
851.
by technion 7y ago
I can't speak for their situation but the standard here is that when a barber holds up something that looks like a cut throat razor, it's a "shavette", which actually takes a disposable blade.
852.
by technion 7y ago
A while back I had someone setup a new domain with office 365 email and a completely broken spf record that only allowed his web server. Gmail accepted everything without a problem. I agree an SPF record is an expected minimum but "use
853.
by technion 7y ago
Thanks for posting this. It looks like some really great tooling. I tried fuzzing the Argon2 library a while ago and very quickly hit some of the issues you appear to have addressed.
854.
by technion 7y ago
I consulted to an organisation that spent multiple years refusing to allow any form of MFA. Everyone agreed it was extremely important and some password protected data was very sensitive. But the conversation about authenticator apps always
855.
Australian Media launches “Your right to know” regarding secrecy laws(yourrighttoknow.com.au)
2 points by technion 7y ago|0 comments
856.
by technion 7y ago
An unfortunate part is that 2.1.2, 2.1.3, 2.1.4, 2.1.7 and 2.1.11 are all issues I've fought of favor of previously (many.. many times), and one of my best assets in that fight an "appeal to authority" by positioning document
857.
by technion 7y ago
It's worth noting there is some really nice Mimikatz mitigations in Windows 10, that you don't get in a "patched Windows 7".
858.
by technion 7y ago
If an IT decision maker researches this, the first thing they'll find is Microsoft's description here[0], which describes Windows Professional Edition as being designed for the SMB. It goes onto describe Enterprise as for "me
859.
Coalfire rules of engagement with Iowa [pdf](iowacourts.gov)
4 points by technion 7y ago|0 comments
860.
by technion 7y ago
My "go to" answer for these issues is to run the address in virustotal.com, which will tell you about any blacklisting issues the domain may have. In this case however, and firefox on my machine, I cannot find any issues.
861.
by technion 7y ago
This statement is accurate based on my interactions with general users. It's not just "junk news" though. People can and have been caught out by things like Microsoft tech support scams, fake virus alarms and prominently disp
862.
Microsoft Forms to Add Enterprise Automatic Phishing Detection(bleepingcomputer.com)
2 points by technion 7y ago|0 comments
863.
by technion 7y ago
That's only an output image though. The ability to interact with the console is always something I've missed from on-premises hypervisors.
864.
by technion 7y ago
That's a really underrated statement - as a lot of "scale blogs" are often referred to as fact. I'll have to reconsider a lot of those in hindsight.
865.
by technion 7y ago
Check the advertised site, https://amp.dev/ , and look at the headers for v0.js. I'm seeing an "expires" tag of "now", a cache-control header of 'private' and 'max-age' of 50 minu
866.
by technion 7y ago
You're not meant to. It's minified and rewritten by the Javascript compilers. I believe this would be the place to find anything you want to read: https://github.com/ampproject/amphtml
867.
by technion 7y ago
I'd be less worried about "forgetting" and forever worried about a manager just saying "you obviously forgot (something I just decided)". I mean it happens even when there's documentation I can pull up and say
868.
by technion 7y ago
Azure will happily provide 10 mailboxes on your own domain, they just brand it as Exchange Online.
869.
Citrix concludes investigation of unauthorized internal network access(citrix.com)
2 points by technion 7y ago|0 comments
870.
by technion 7y ago
I can echo this. On a security assessment I found an organisation was a long way behind in Windows Updates. I eventually tracked this to the AppReadiness service being disabled, which someone thought was a cool debloat option. The end resul

More ›