jlkinsel

5 ms·

1.
by jlkinsel 4y ago
While it is great, Wazuh is not close to a static analyzer.
2.
by jlkinsel 6y ago
Actually, the www was working. It's a cname to tp.47cf2c8c9-frontier.amazon.com, which should have been a cname to d3ag4hukkh62yn.cloudfront.net, but that record was broken for about 20 minutes. Update: that frontier cname seems to be
3.
by jlkinsel 10y ago
I think that was a message from the rebel base?
4.
A Vagrant-based docker registry cache for faster docker pulls(theresnomon.co)
3 points by jlkinsel 11y ago|0 comments
5.
by jlkinsel 13y ago
sudo, ssh certs, egress firewalling. Congrats - you've covered about 4 pages from the NSA's 200 page hardening benchmark. Off to a good start! http://www.nsa.gov/ia/mitigation_guidance/security_configura
6.
by jlkinsel 13y ago
I've seen more compromised boxes than one can shake a stick at. There's all sorts of reasons that blocking egress is a great idea. Compromises are usually automated bots, and no, they're not smart enough to bring down iptable
7.
by jlkinsel 13y ago
Time to write a little VBScript to port scan me some Dropbox servers...
8.
by jlkinsel 13y ago
Soo they didn't forsee how teh hackers would compromise accounts without 2FA...but passwords are dead. Well, I for one, am sold!
9.
by jlkinsel 13y ago
To go a little further - at a glance, it's not clear if they've been fined yet or not, but either way there's soft costs to all of this - being in the news in a negative light, some patients will go elsewhere, their insurance
10.
by jlkinsel 13y ago
Last year when KC shot themselves in the face, they were running trading algos that hadn't been well tested. When dropped into production, things blew up fairly quickly. I probably should have left it off the list, it's more of a
11.
by jlkinsel 13y ago
Stanford's a little more than a college. There have been at least 5 HIPAA breaches, with at least 70k people's information compromised. http://www.healthcareitnews.com/news/stanford-reports-fifth-...
12.
by jlkinsel 13y ago
man how'd I forget hb gary...that's my other favorite
13.
by jlkinsel 13y ago
Let's see... TJ Max, UBS, Knight Capital, Heartland Payment Systems, Visa, Sony (already mentioned, but it's my fave), Stanford, Countless other hospitals, e-commerce vendors, banks, and other organizations that handle payment or
14.
Rajesh Rao demonstrates first non-invasive human-to-human brain interface(news.cs.washington.edu)
1 points by jlkinsel 13y ago|0 comments
15.
Using the Unix Chainsaw: Named Pipes and Process Substitution(vincebuffalo.org)
10 points by jlkinsel 13y ago|2 comments
16.
Pastafarian given permission to wear strainer on his official identity card(dailymail.co.uk)
1 points by jlkinsel 13y ago|0 comments
17.
Facebook Invents a PHP Virtual Machine(networkworld.com)
2 points by jlkinsel 13y ago|0 comments
18.
by jlkinsel 13y ago
I'm a little surprised this is on HN? To me this is the equivalent of a blog post about using %d with printf. Not complaining, just a little surprised something so novice would get attention...
19.
by jlkinsel 13y ago
A problem for security geeks is they frequently forget about 2 things: 1) the balance between usability and security, and 2) The risk acceptance/appetite of the person for the security they want/need to use. The two are intertwine
20.
by jlkinsel 14y ago
In theory if your'e going to the trouble of having different OSes on the two systems, you'll have separate admin staff, as well...
21.
by jlkinsel 14y ago
Yeah...this is nice, but really who's gonna implement it? Only folks with a lot of resources and need to protect something more serious than passwords on a social network. Or organizations who are vulnerable to the RSA sales person attack.
22.
by jlkinsel 14y ago
I say the post is nicely done, and note that I'm happy he took security into account, and people downvote. WTF???
23.
by jlkinsel 14y ago
Hmm...that seems to have potential, but it requires custom integration and users to use your app. Is there an open protocol for this? Looks like you're doing something similar to the mutual auth that wikid does...a whitepaper or two with mo
24.
by jlkinsel 14y ago
Nicely done. I was worried when I saw the headline that he wasn't going to take security into account...
25.
by jlkinsel 14y ago
I use a safari/firefox mix, all that's in that db for me is a short list of things I don't care about...
26.
by jlkinsel 14y ago
What's the Apache source code? You mean Apache httpd? :) Realize "Apache" means the Apache Software Foundation, which is made up of a large collection of open source projects. (disclosure: Apache CloudStack contributor and PPMC member)
27.
by jlkinsel 14y ago
I've become jaded with "top 5" style lists recently, but this one's pretty nice. I'm doing a few "secure development" training sessions with development teams in the next week, will be referencing this for sure. I'm not sure writing tests m
28.
Bespoke passwords(bespokepasswords.com)
4 points by jlkinsel 14y ago|0 comments
29.
by jlkinsel 14y ago
This is a UNIX cheatsheet. Nothing devops about it. And I concur with the comments about "sudo !!" - !! in general I've totally removed from my UNIX vocabulary. At least do something like !?string[?]
30.
by jlkinsel 14y ago
Does CookiesOK do any type of moderation over the cookies? Checking for domain scope, cookie flags, reasonable expiration of the cookie? I understand that "free" sites need advertising revenue, and unfortunately a lot of ad networks want to

More ›