technion

7 ms·

61.
by technion 8mo ago
I've sat in some pretty large orgs and my own experience was the "resources allocated" went to the PR team. I can assure you that they would have had a more boring, corporate sounding announcement with multiple references to
62.
by technion 8mo ago
I'll note 0.05 means you can't legally drive in Australia and would be issued a DUI.
63.
by technion 8mo ago
Whilst I agree in principle, its a bit like saying "never apply for a job that requires whiteboard coding or leetcode questions". Our rental market is abysmal and people can spent months sitting through rejections, without doing m
64.
by technion 8mo ago
Whilst thats important advice, as far as I can tell it wouldnt help here as no passwords are breached. I had a few of our domain users on this report and as far as I can tell theres nothing actionable.
65.
by technion 8mo ago
All the properties ive rented over the last decade required an application with "full financial transaction history" for three months. I know ive submitted a statement before where a lot of expenses were "paying off credit ca
66.
by technion 8mo ago
I have always wondered how this would go if you applied for a loan through your bank. Or a rental that wanted 'last three months financial transactions' in the application.
67.
by technion 9mo ago
Autodiscover has always been an interesting security problem. I wrote this years ago: https://lolware.net/blog/2020-09-02-autodiscover-circus/
68.
by technion 9mo ago
Australian here. I paid a garbage removal company to basically empty a house. Their qebsite called it "estate cleanup". It took a whole day for a team with crowbars to smash up every piece of furniture and load it in a truck and t
69.
by technion 9mo ago
Whatever this person is upset about, promoting it on a link that simply says "Age-restricted adult content. This content might not be appropriate for people under 18 years old. To view this media, you’ll need to log in to X" makes
70.
by technion 9mo ago
There is a downloadable binary, I doubt many people recommending age are recommending every server using it also download a Go compiler and build it themselves.
71.
by technion 10mo ago
We just had a series of articles and sysadmin outcry that major vendors were bringing 8gb laptops back to standard models because of the ram prices. In the short term, we're seeing a reduction.
72.
by technion 10mo ago
Honestly...be responsible for mail for at a large enough enterprise and all I can say is you'd be surprised how many people make work emails their only emails.
73.
by technion 10mo ago
Hilarious - i was literally just telling someone that im seeing no end of ads for vibit, and the dozens of glowing comments looked fake to me.
74.
by technion 10mo ago
For a long time, the standard was that tls was only ever on the credit card submission page. I remember when "finding vulnerabilities" often mean viewing source and noting it still submitted to a uardcoded http page.
75.
by technion 10mo ago
This was the game with the DOS port that had a jump you literally couldnt make. And someone somehow worked out you could proceed by going to a totally different area and glitching through a wall.
76.
by technion 10mo ago
There are multiple stories of public facing applications with Microsoft active directory as the source of user accounts that speak to the worst examples of this. I was involved in such an attempt but it never got off the ground.
77.
by technion 10mo ago
The docs suggest bitwarden lite is suitable for personal and lab use only - so i dont think so.
78.
by technion 10mo ago
Theres also the physical health. I can only get to a doctor easily because when wfh, I can do it in my lunch time. I remember when I would weigh up requesting annual leave vs not going at all.
79.
by technion 10mo ago
Unless im missing something, they replied stating they would look into it and then its totally vague when they patched, with Alex apparently randomly testing later and telling them in a "follow up" that it was fixed. I dont at all
80.
by technion 10mo ago
I can only say you havent worked anywhere i have. I remember heartbleed dropping shortly after a deployment and not being allowed to patch for like ten months because the fix wasn't "validated". This was despite insurers stat
81.
by technion 10mo ago
Its more about the likely target audience: i can scan the whole enterprise and activate blocks with those ids.
82.
by technion 10mo ago
Are we arguing that corporate workers arent "real sysadmins"?
83.
by technion 10mo ago
I know its a common view that sysadmin/devops are the same these days, but witha current sysadmin role nothing youve mentioned sounds relevant. Let's give you my list: 1. Patch Microsoft exchange with only a three hour outage wind
84.
by technion 10mo ago
The "screenshot of my own tweet, but edited somehow so it fakes a blue checkmark" posts are definitely my favourite cringe content to see.
85.
by technion 10mo ago
Not long back we were all urged to take CODE_OF_CONDUCT.md seriously. I've arrived at a place where the next thing I open source will include such a file which discusses not sending slop to the repository.
86.
by technion 11mo ago
I agree what occurred is quite egregious. But "use ai to talk to customers" and "play games with signed commits" sound much more like corporate policy than one employees mistake.
87.
by technion 11mo ago
I was just thinking of this scene as I read their report.
88.
by technion 11mo ago
These used to be on website - but websites themselves for the most part have stopped using them. I don't find every blog post with a "Click to like on Facebook" much more these days. I did used to like reading HPE spec sheets
89.
by technion 11mo ago
At one point I responded to a haveibeenpwned notice by immediately having the user reset a password. I've got over 200 users in a domain search (edit: for this particular incident), and nearly all of them were in previous credential br
90.
by technion 11mo ago
You might be shocked just how bad some wordpress sites are. Ive responded to web developers calling 'ddos' on sites that crashed under the Google crawl (before ai crawls misbehaved and made this more of a thing).

More ›