technion

79 ms·

901.
by technion 8y ago
Since they mention Office 365, it's worth noting Microsoft's Smart Lockout tooling has been pretty efficient here imo. https://www.microsoft.com/en-us/microsoft-365/blog/2018/03/0... There
902.
by technion 8y ago
Regarding DNS forwarding.. I'm not far off giving up myself. We have DNS servers acting as recursive servers across the enterprise, and there's a bikeshed every few months about how it needs to forward to Google. Multiple extern
903.
by technion 8y ago
My issue would be that even if "gmail use it", people using G Suite with custom domains probably aren't.
904.
by technion 8y ago
Google's implementation guide says: Add a subdomain to your domain. This is consistent with my reading of the RFC.
905.
by technion 8y ago
I'd like to be wrong, but with the nature of this standard, I don't expect heavy adoption. If a person is deploying G Suite or Office 365 or similar, they get asked to setup MX records, TXT for SPF, possibly DKIM and so on. If I c
906.
by technion 8y ago
There are unfortunately plenty of cases (and raging threads on various forums) of people doing this, and finding that eventually Windows updates itself anyway. Part of the problem was the new "Dual Scan" GPO which defaulted the wa
907.
Microsoft says encryption laws make companies wary of storing data in Australia(abc.net.au)
573 points by technion 8y ago|276 comments
908.
by technion 8y ago
Nothing about "just use a PAAS" changes this. Sacking ops and telling developers to they should "just use EKS" or whatever is precisely why we keep seeing open S3 buckets and ES servers.
909.
by technion 8y ago
Oracle has somewhat of a monopoly due to its Micros acquisition. A hotel group upgrading their servers for some Opera products are given their choice for "servers": Windows 2008 R2, Windows 8 (yes, for servers) or let Oracle run i
910.
by technion 8y ago
This may just relate to the circles I move in, but I'd have a hard time finding a group of what I'd call skilled developers, where not a single one can manage rsync or find their way around a Linux server in general. It's all
911.
by technion 8y ago
Consider the instructions for the nginx fork: https://github.com/eustas/ngx_brotli The "filter" module operates totally within nginx, and behaves roughly how we're used to with gzip. The "static&quo
912.
by technion 8y ago
The [1] I should have linked is here: https://github.com/google/ngx_brotli/issues/72
913.
by technion 8y ago
The brotli experience has been frustrating. All modern browsers support it, so you'd think it would be an easy win. The top nginx search is an official looking Google project which is long abandoned and doesn't support current ver
914.
by technion 8y ago
The reason I have doubts that there's someone "periodically checking payments" is that I've personally sat in on several payments. Without fail, you send BTC and within a few seconds (presuming you spam F5) the website u
915.
by technion 8y ago
The common way these are "cracked" is that the C&C server - which observes payments and hands over keys - is itself compromised. There are a lot of news articles I read about people "cracking ransomware encryption" a
916.
26/43 freelancers chose “plaintext” to store passwords(twitter.com)
19 points by technion 8y ago|6 comments
917.
by technion 8y ago
Thanks for finding that. This image from their directory listing (maybe on their site somewhere but I couldn't find it) shows me at least something about their offering - looks like another dark web breach alerting service. https:&#x2
918.
by technion 8y ago
The FAQ page: How Can I Improve my Chances of Receiving an Award? One answer is: Sponsor the Cybersecurity Excellence Awards There's a voting scheme, but the FAQ does state: The popular vote will only be considered if two or more nomin
919.
by technion 8y ago
That's what Citrix is famous for - that's not the company I was talking about.
920.
by technion 8y ago
I've looked over their website and I'm confused about what they actually do. They are "trusted by leading Fortune 500 corporations" apparently (with logos for Microsoft and Amazon), but the entire "Interested in our
921.
by technion 8y ago
Have you got a source or more information on this? I'm not disputing the statement - but I've seen several different languages claimed to run "most of AWS" (including Haskell at one point) and it'd be good to have a
922.
by technion 8y ago
I don't run a bug bounty but I do sit on a security@ inbox. I don't believe I've ever seen a report I would want to pay out on even if I could, but if you discount blatant spam (often peddling EV certificates), I've rece
923.
by technion 8y ago
I switched the production backups for ctadvisor from WAL-E to WAL-G largely because of the whole the workflow I blogged about here: https://www.lolware.net/2017/02/02/continuous-backup-tests-w... I'm not
924.
by technion 8y ago
I'd urge you to not be too hard on yourself. As much as people don't enjoy the morals of adtech, you got to experience scale, and apparently highly reliable code whilst early in your career. You can't blame yourself as a self
925.
by technion 8y ago
Regarding a "casino's main systems".. Going back a few years I was involved with a gaming organisation. We were advised that certain activities legally had to be air gapped (we are not in the US), and I raised an issue of how
926.
by technion 8y ago
I lived through a "empower the developers with Devops", "prevent you doing menial tasks" project a while back and ended up with: - A mail server which was an open relay, promptly shutdown for abuse - Every single interna
927.
by technion 8y ago
It also means you're in a position to pick up your stack and deploy it elsewhere if such a thing makes business sense in future. A lot of organisations are putting themselves in a position where that's not an option.
928.
by technion 8y ago
I'll add I saw a number of Docker image discussions where people asked about TLS 1.3 support, and the answer was "blocked in Alpine, which is blocked in Libressl".
929.
by technion 8y ago
There's a great write up here on how assuming scnprintf behaved like snprintf led to memory bugs: http://blog.infosectcbr.com.au/2018/11/memory-bugs-in-multip...
930.
by technion 8y ago
I could put aside ten hours for an opportunity and not consider it an issue. Applying ten places and getting 100 hours of homework knowing there's a good chance of ten businesses ghosting? I have plenty of empathy for people who have t

More ›