technion

18 ms·

211.
by technion 3y ago
I spent the day with my Dad who wanted to watch a classic cricket game from the 80's - it was totally wild seeing coaches, commentators and even bench warming players smoking the entire game, on a field covered in cigarette advertisin
212.
by technion 3y ago
I know its early days but I think it's really broken to directly copy the upstream website, and impacts on how usable the product appears. For example, https://freenginx.org/en/security_advisories.html states &quo
213.
by technion 3y ago
Coming from these sort of businesses, I usually read these sort of comments as "they should be fired because when they recommended mfa they management said no".
214.
by technion 3y ago
The term has become a bit generic these days and people will use it in place of a range of things. Citrix or vmware are often just called "terminal server" by aome people. There is a huge difference between a port forward on port
215.
by technion 3y ago
I'm well with you there. It has been the bane of my existence trying to sell "lets enforce MFA" when you can command far more authority and respect for saying "let's buy security copilot".
216.
by technion 3y ago
The whole problem has historically been that any "simple" solution lacks nuance. I've been across a number of these sorts of environments. Just look at your answer: Daily backups off site. Sure, so I've seen this. There&
217.
by technion 3y ago
As an Australian that flicks through Facebook every so often... Australian news on Facebook every day is from a small list of headlines: "Shoppers flock to amazing new item at Kmart", "Australians can't believe new amazi
218.
by technion 3y ago
If you look at their incentives differently, i would argue they doing well with their goals. Every "use server" is another vercel customer. Every preact user finds it harder to claim they are using react when apis showing up in re
219.
by technion 3y ago
Many people experience a psychological reaction to being told "you disagree because you're not smart enough". It's very common in crypto discussions and people continuing to buy into nonsense projects just proves it work
220.
by technion 3y ago
This is in the "I'm not a frontend person, I've literally never heard of any correct attributes beyond the ones I copied from the React-hook-form examples" category. If you can point to a specific change, send it to an i
221.
by technion 3y ago
If you're interested in the local version or a "how does it work", I wrote this Ruby gem years ago for this functionality, which has been useful in a range of penetration testing engagements where "the Azure tenant"
222.
Show HN: Enumerate Office365/Azure Domains(azure-enum.lolware.net)
33 points by technion 3y ago|6 comments
223.
by technion 3y ago
As an example, local police here sent out urgent missing person reports and the "more information" link was a twitter link (behind a bit.ly shortener if you can believe it)
224.
by technion 3y ago
I think netflix is at a scale where you can question what I'm saying below, but every frontend test suit I've seen is so full of mocks you basically only test your own test suite. And then common front end bugs like "renders
225.
by technion 3y ago
I had an owl deliver the ring to my wedding. A decade on people still talk about it.
226.
by technion 3y ago
I write this blog a while ago: https://lolware.net/blog/react-xss-protection-cheat-sheet/ The feedback I got across the board was generally "what even is this code? If you it to work with react why isn't
227.
by technion 3y ago
Even in the older hardware from which this example that allowed this to occur, the threat to the "consumer" is the driver whose Uber you left your laptop in, for whom this attack is still out of the realm of plausibility.
228.
by technion 3y ago
The last place I worked with Okta, Okta routinely sent sales people onsite to meet and hang out with executives. Make this a common occurrence across a client base and your head count balloons pretty quickly.
229.
by technion 3y ago
Every time I read about a massive company ransomware event: excel macros, mimimatz, phishing Any time something is actually described as a novel technique: cryptominer. Ugh.
230.
by technion 3y ago
There's an oss dikim signing transport plugin for on prem exchange that has become somewhat a standard in this space. https://github.com/Pro/dkim-exchange/releases
231.
by technion 3y ago
Strong parameters has been a core security feature of rails for a long time, and all the guides go into detail about the boilerplate you need just to accept a form input past the strong parameter filters. It's weird to me that the patt
232.
by technion 3y ago
It stopped being a view library a while back. I mean server side components are now a major direction for the project.
233.
by technion 3y ago
Interestingly Edge gives you the option to disable the JIT wholesale. https://support.microsoft.com/en-us/microsoft-edge/enhance-y... I've had this in place on some workstations and I've never actually n
234.
by technion 3y ago
As someone who still has to support users of several ActiveX apps, turning off the "block unsigned ActiveX" setting goes with the territory of using it.
235.
by technion 3y ago
Aes has a blocksize of 128bits, which so 96 bit is the nonce size that gets you a 32 bit counter. You probably don't want a smaller counter. Things xsalsa technically have a larger nonce but in reality still derive a smaller nonce.
236.
by technion 3y ago
"Armoured core 6 can't beat pca enforcer walton" People actually discussing how they did this is the only real answer, generic websites with pictures and descriptions of his weapons never help.
237.
by technion 3y ago
I recently googled "rubbish removal mysuburb" and found a pretty good looking website. Let's say it was myrubbishremoval.com/mysuburb. The page text repeatedly named the suburb. It turns out they appear to have a folder
238.
by technion 3y ago
I went through a simulation issue where I spent days on a problem, had a Microsoft engineer asking for logs and generally wasting my time, eventually found it to be a hp firmware limitation. I wrote a page on my own blog about it. Was I a g
239.
by technion 3y ago
A fairly big deal is being made of this, but dmarc has been a signal for a long time and there's a good chance half your mail has been randomly landing in junk folders if you don't have it setup right. This may actually help peopl
240.
by technion 3y ago
I know "have smarter users" sounds like a joke but a lot of the problem really is cultural. In most languages you would write a two line leftpad function, in the js world everyone will tell you you're doing it wrong and shoul

More ›