itscrush

6 ms·

1.
by itscrush 6mo ago
Usually through service accounts. Those are single factor.
2.
by itscrush 1y ago
Monetize first is their strategy given this included statement: > Our future plans include letting you save a secure backup archive to the location of your choosing
3.
by itscrush 1y ago
Looks like AdGuard allows for same, thanks for mentioning dnsmasq support! I overlooked it on setup.
4.
by itscrush 1y ago
Certainly doable, grapheneOS has it https://grapheneos.org/features#duress .
5.
by itscrush 1y ago
Wrong. Their profile clearly states high school teacher. Why assume?
6.
by itscrush 1y ago
Wiz is closer to the CNAPP field instead of the software composition analysis tools you mention, Snyk would fit here for SCA. Sysdig, Palo Alto's Prisma Cloud, or a few others compete with Wiz's CNAPP offering. Wiz also strays int
7.
by itscrush 2y ago
Wiz uses various API's via read access in your accounts/orgs/subscriptions to assess risk of configuration. They also snapshot your disks, cloning them to Wiz accounts to provide secrets scanning / vuln scanning / e
8.
by itscrush 2y ago
Yes folks do and I can't understand it either. Have asked / talked through their rationale but frankly humans are irrational is my clear takeaway. I experience it mostly when folks are prompting search in family settings. These us
9.
by itscrush 2y ago
Certainly not the UK, they're spearheading much of the privacy problem.
10.
by itscrush 2y ago
Bitwarden for usability. Vaultwarden if you can and prefer to self host. Being on the internet you'll have to trust someone at some point. Can reduce risk by combining strong 2FA (not SMS/Email) alongside backing up your vault. En
11.
by itscrush 2y ago
> I am using CloudFlare for my DNS. Based on this it sounds like you exposed your resource and advertised it for others. Reverse dns, get IP, scan IP. Probably simpler, you exposed resource on IPV4 publicly, if it exists, it'll be s
12.
by itscrush 2y ago
Why isn't your name in your profile here or why aren't you easily identified if that's the case? You're not all that identifiable here.
13.
by itscrush 2y ago
1. Is github the best place to report bugs / issues for Waterfox? 2. When (not in your lifetime obviously) Waterfox is broken, what canaries do you have deployed that we can archive now, like Mozilla's tell here? 3. What keeps wat
14.
by itscrush 2y ago
Veracrypt works just fine on M$ Windows 11 for FDE.
15.
by itscrush 2y ago
Same play as the meat industry leveraging "data analytics" to fix and sort at https://www.agristats.com/ . [1] https://www.justice.gov/archives/opa/pr/four-states-join-jus... [2] http
16.
by itscrush 2y ago
The security community used to maintain one that was fairly active pre-covid. https://github.com/PaulSec/awesome-sec-talks
17.
by itscrush 2y ago
Is the best counter here to acquire a brand tld to operate themselves (setting aside all the linkrot it generates)? They've certainly got the resources when you compare against other brand tlds that this could have been an option.
18.
by itscrush 2y ago
The tld it's dependent on doesn't fall within these parameters. They also don't own and operate the .cc TLD do they?
19.
by itscrush 2y ago
I think librewolf gets you most of the way there. Just add a sponsorblock extension and check a few extra lists on its built in ubo. Does the reliance on Firefox ESL or based on Gecko rule this one out?
20.
by itscrush 2y ago
Namecheap's been out a while, I'd drop them from your list too. Porkbun's in for now.
21.
by itscrush 2y ago
It was released as freeware back when by EA originally, which is what openRA relies on. Later the source was released under GPL[1] during the CNC remastered collection from EA. [1] https://github.com/electronicarts/CnC_R
22.
by itscrush 2y ago
No, start with modifying the Colorado River Compact and other underlying agreements to allow more upstream retention than is currently allotted.
23.
by itscrush 2y ago
Turns out VPN source IP is given a different redirect
24.
by itscrush 2y ago
Thanks, FF fork here with ubo, most lists, and medium settings enabled ... somehow this is not the case for me. I'm not being served a page with any overlays / modals, just this redirect to login page. I know exactly what you&#x27
25.
by itscrush 2y ago
Thanks for the response, somehow this is not the case for me. Like past times, I always hit the walled garden unless it's Facebook's actual Blog pages. The provided link of https://m.facebook.com/story.php?story_fb
26.
by itscrush 2y ago
Are you sure? Your link also lands me at an auth required splash page.
27.
by itscrush 2y ago
Yea good assumption, SQLMap for instance, defaults --dump to .csv with sqlite as an option if you're just looking for a simpler test point. Plenty of other tooling options out there too. Tooling providing your encoding during dump will
28.
by itscrush 2y ago
Free labor that you're handing away. Saw your edits, sounds like you've got start carving boundaries in stone and letting colleagues know it's their loss and fault for not eyeing timezones / after hours.
29.
by itscrush 2y ago
Abusive. Are you giving away your time for free too during these rotations? Bonus, overtime, equal time off?
30.
by itscrush 2y ago
Load Balancing && WAF or CDN enablement usually suggests at least a decrypt step or two in the HTTP(s) chain. WAF for layer7 payload inspection, or the default wildcard cert'ing your Cloudflare site for instance. There's a

More ›