uid65534

4 ms·

1.
by uid65534 2y ago
Ah yes, I too remember when COMODO was ripped out of browsers in 2011 when it came to light they gave sign-anything rights to a bunch of resellers, one of whom was hacked. And then again in 2016. And another fun one unrelated to signing was
2.
by uid65534 2y ago
I feel this every day I talk with cloud-brained coworkers. I manage an infrastructure with tens of thousands of VMs and everyone is obsessed with auto scaling and clustering and every other thing the vendor sales dept shoved down their thro
3.
by uid65534 2y ago
Having the tool actively prevent classes of errors is a worthwhile endeavor, but I do agree it gets overly focused on alone when several other _massive_ classes of vulnerabilities continue to be introduced. At a high level though, it is a l
4.
by uid65534 2y ago
The only way this stuff trickles down to the masses is people that know what they are doing forcing it on them through their products. Very, very few 'engineers' actually go out and learn the state of the art these days in my expe
5.
by uid65534 2y ago
I personally push for IPv6-only internal networks whenever possible, and have deployed several such designs in datacenters. Unfortunately, a lot of applications are building on platforms where IPv6 is an afterthought if even present at all.
6.
by uid65534 2y ago
IME when people start using self signed certificates they trust anything that is presented, with no pinning. That means that so long as you MITM it with something with it's own self signed cert it will work just fine.