technion

60 ms·

871.
by technion 7y ago
In supporting the enterprise, pretty much every application I deal with is unfortunately "Windows Only". Accounts tends to be managed by MYOB, Quickbooks or in the large firms, Accountants Office (also a MYOB product). All these s
872.
by technion 7y ago
I'm aware you can use Lets Encrypt that way, I just don't agree that it's bad use of an internal PKI to use it as an alternative.
873.
by technion 7y ago
It's a common meme that users will click "yes" to everything, but I'm not sure people realise just how far that goes. Look how it looks when Chrome marks a site as malware: https://www.removemalware.net/w
874.
by technion 7y ago
I don't think it's a bad use. When I logon to my SAN or UPS web interfaces, I don't want to type https://ups01.publicDNSdomain.com , and visit a site with a CT logged certificate. It's an absolutely internal t
875.
Secure Privileged Active Directory Management with Pam and JEA(lolware.net)
1 points by technion 7y ago|0 comments
876.
Dumbest pentesting script to ever succeed(lolware.net)
1 points by technion 7y ago|0 comments
877.
Microsoft Defender ATP Alert Categories Are Now Aligned with Mitre ATT&CK(techcommunity.microsoft.com)
1 points by technion 7y ago|0 comments
878.
by technion 7y ago
Regarding the "insert a CD and install software" statement, as someone who hasn't worked on this sort of environment I've always wondered - I have multiple test machines running Windows and Linux. I can push software to
879.
by technion 7y ago
Note the specific detail here: the City Council unanimously agreed to have its insurance carrier pay
880.
by technion 7y ago
Whilst servers are in a different category, multiple Windows Updates have changed the way updates work. Look at the Dual Scan situation[0]. People who had central management applied one update and suddenly found desktops also accepting upda
881.
by technion 7y ago
Australia celebrates the Queen's Birthday public holiday on different dates in different states already.
882.
by technion 7y ago
Microsoft has a pwnedpasswords-like service you can use: https://docs.microsoft.com/en-us/azure/active-directory/auth...
883.
by technion 7y ago
If for some reason you're stuck without MFA (and I appreciate why it happens), I can't agree short expiration adds value. I've done brute force exercises. Some people always pick bad passwords. Tell an organisation to change
884.
by technion 7y ago
This definitely needs to be considered. I open WSL and use curl on suspicious looking email links. I've been logged as doing so before. I'd hate for that log to actually go somewhere significant.
885.
by technion 7y ago
I'm having trouble digging it up now but at one point there was a domain associated with promoting Exchange 2003 that Microsoft let go of. It was still linked from all their docs but the new owner had it redirected to a Youtube with a
886.
Abusing Google Safebrowse for Phished Credentials URLs(lolware.net)
2 points by technion 7y ago|0 comments
887.
by technion 7y ago
I've been in a number of these situations where the basic workflow was "encryption = good" with no consideration for these scenarios. I've seen several organisations decide they need to encrypt backups. The first thing I
888.
by technion 7y ago
Whilst I'll say "disclaimer, this is my project", monitoring Certificate Transparency with CT Advisor has helped me find out about certificates marketing people deployed and expected me to maintain without my knowledge. [0]
889.
by technion 7y ago
Within hours of setting up DLP, I had someone complaining I had broken their workflow. That workflow apparently involved emailing credit card numbers to an external personal mailbox "for security". It was allowed to go on simply b
890.
by technion 8y ago
There's definitely still issues with that though. Try including one small component from material UI for example and the resulting bundle can still be quite significant because it bundles a lot to manage its theming.
891.
by technion 8y ago
Huh? I was worried I had been doing this wrong this whole time, but I haven't been able to replicate that with release builds. https://gist.github.com/technion/7c74fad9efd1f14244e25a1cee3...
892.
by technion 8y ago
> to properly assess the risk of their clients I've sat through a lot of these insurance company cyber risks assessments. It's absurd. You get asked a question like "did you pay for a firewall?". Then you say yes. Th
893.
by technion 8y ago
Purely for reference (since typescript didn't exist when this project started) all four of those terrible JS examples are Typescript errors: " error TS2365: Operator '+' cannot be applied to types x and y"
894.
Accenture Sued over Website Redesign(theregister.co.uk)
11 points by technion 8y ago|3 comments
895.
by technion 8y ago
On the contrary. He could go to Defcon and find it just validates his views. After all, it's a huge security gathering and noone meets his requirements.
896.
by technion 8y ago
I'll say the same thing about security people. There's an executive who's been whining on LinkedIn about the major skills shortage in this area. Here's an ad his company put up. I've had it confirmed every individua
897.
by technion 8y ago
Why should the people who built and maintain Ruby focus their efforts on a different language?
898.
by technion 8y ago
If I try to open a known phishing URL, most business firewalls will block the connection. It's not so much a reference to endpoint antivirus, but a part of the all encompassing "AV" solution. You can look up what Mcafee will
899.
by technion 8y ago
That c) particularly hit home. I had a contractor insist a T_PAAMAYIM_NEKUDOTAYIM is usually caused by a RAM fault and sent people to replace hardware.
900.
by technion 8y ago
I think an issue here is we've been told for a long time "always restrict access to the environment through a bastion host" without much implementation detail discussed after that. Agent forwarding tends to show up as the mos

More ›