Because blue means iMessage and iMessage means E2EE.
Grey and Green means not encrypted. Simple.
7,174 karma · joined February 18, 2010
Portfolio: http://deltaregeer.com/ Engineering Notebook: http://funcptr.net/
delta@regeer.org
Grey and Green means not encrypted. Simple.
It would allow you to do network reliability testing, as well as get data back on Wifi AP's and some environmental data.
Company I worked for had them spread out across all of their offices in various different locations, all of them reporting back to a central location.
When we took apart the device we found a Raspberry Pi inside, with a PoE hat. It made sense for the use case, cheap devices, custom case, and MAC address that was set to the vendors MAC address range upon boot up.
At the time I was helping with a security assessment, and being able to run our own software/tools on a device that would blend in was kinda nice ;-)
"Embedded industry" is a VERY large segment.
Here's a fun one for you. This was told to me by the person who helped build this project. Parallax makes a device they call the BASIC Stamp 2 (https://www.parallax.com/product/basic-stamp-2-microcontroll...). It is a very easy to use and develop for microcontroller yet it is incredibly capable. You program it in BASIC.
The BASIC Stamp 2 was for the longest time used in a production sold to consumer timer clocks for turning solenoids on and off for sprinkler systems. At one point in time you could buy it off the shelf at Home Depot not knowing that the device contained a very simple BASIC Stamp 2 to do its functions.
These devices end up in the weirdest places. You'd think a manufacturer would switch from a BASIC Stamp based product to spinning their own board + using a small embedded CPU instead, but the cost savings just weren't there.
The RaspberryPi is likely used in far more places than you or I could imagine in ways that are considered "professional". That stuff gets hidden in little metal/plastic moulded boxes and for all intents and purposes disappears.
Re-implementing system capabilities is fine and all as long as you support common use cases properly, which Golang does not.
There is minimal software on the e-ink display side… it connects to wifi, fetches the image, and sends it to the display.
https://github.com/serde-rs/serde/issues/2584#issue-18580752...
Due to the way that the derive feature was causing the dependency chain in Cargo to be longer than necessary, thereby making it impossible for cargo to compile multiple crates in parallel.
Their login page only allows for 16 character passwords using the max length. This would truncate my password on login.
Backend handles the longer password just fine though.
This is difficult to answer, as it really depends on the customer. I work in a sector where any vulnerability is something that we have to attempt to remediate, even if it is a tool or library that is installed in a docker image that is not executable by the app that is running inside that container (think base image has a security flaw)... it means we have a lot of work to basically copy the contents of the app out of a container and plug it into our own base images that we can control/scan/deal with the vulnerabilities on. It's a giant pain in the behind. Vendors usually don't care because they rightfully so say "that library is not something our app uses, so it is out of scope" or "that comes installed by default in the debian base image from docker, complain to them".
The field is simply too fast and large. The other one is when your binary/app is using a library that is vulnerable. Think Java/Go/Rust/Python/Ruby using a library that is vulnerable. We can't patch that (without potentially breaking things), so we have to get an exception while we push the vendor to upgrade.
That part is even difficult at times though because sometimes the version that is not vulnerable is not API compatible with the version that is, and the upgrade takes longer than the time we have to remediate the vulnerability. With Ruby/Python/Java we can usually replace the bits necessary to make it not vulnerable and get an exception granted, but for Go/Rust and or other binaries we are stuck getting exception approval and building additional security around the product to make sure that exploit can't be attacked.
> 2. Is anyone aware of a security database & evaluation tool geared for vendors not for end-users? As in: Gets a feed of CVEs relevant for our products, each of them needs to be analyzed, amended, new CVSS vector and our own analyze result and then publish them to a feed, potentially emailing all affected customers
Even if you made this available, we HAVE to use the NVD/CVE scores themselves. We can't deviate just because the vendor says so, unfortunately.
I would love for vendors to have something like this integrated though as some vendors have hopelessly outdated versions of libraries in their products because it is a lot of work for their teams to upgrade/test/validate that the new version doesn't break anything versus just sticking with the known quantity. Upgrading dependencies in a project is work, and the larger the project, the more dependencies, unless you have a really good testing framework it becomes a HUGE chore, and there is always some new feature that gets priority over gardening tasks.
https://webkit.org/blog/11529/introducing-private-click-meas...
The key for a hosted zone is managed using AWS KMS.
So far we've let AWS Route53 deal with the whole DNSSEC thing, but it has made moving hosted zones from one AWS account to another more difficult and more troublesome than it should have been, and making sure that DNSSEC is setup on all of them is frustrating and annoying.
Thankfully we haven't encountered any issues with DNSSEC signing causing downtime, but I expect it will happen when someone misconfigures a DNSSEC record somewhere and now we gotta wait for the caches to empty/clear.
I kinda wish I could use 1Blocker on my Apple TV :P
Chrome used to be tied into Keychain but they went their own way a long time ago, which is a damn shame.
Nope.
Yup, until you click away from that window, suddenly its the little window in the corner again and it is no longer available in Mission Control, well the little tiny window is.
So I end up clicking on that little window all the goddamn time just so I can see my co-workers and know who is talking.
I don't want it to minimize at all. And I surely don't want it to sit in the bottom right corner and if I move it, move back there.
So here's at least one person who is using teams who complains about it.
The shitty UI/UX is one thing, but some of the behaviors are incredibly frustrating. Here's some examples:
- Sharing a single window makes Teams minimize the window with everyones video camera on it into a small window in the corner of your primary screen. I have a 49" wide screen, I can have that Teams window open (so I can see faces/people) and share a window at full-size for everyone else, STOP minimizing that window.
- That small window sits in the bottom right corner of the primary screen, if you move it elsewhere, click on Teams for chat, and then foreground another app, it re-positions itself in the bottom right corner (thereby obscuring whatever app happens to be sitting there)
- All of my meetings that were created through Outlook/Office 365 as a Teams meeting are labeled "untitled" and there is no way for me or anyone else to change the title of the meeting, its worse if the meeting is on a shared calendar
- Teams notifications are the worst, it'll tell me I have 2 messages, but I open the app and there is nothing, OR it's messages I've already seen
- No easy integration for 3rd party chatbots and the like, which is a HUGE thing we use on Slack
- Teams out of all of the apps (including all the security software corporate loves) uses the most energy and power, and is the primary reason that we all upgraded to M1's as fast as possible because then maybe we'd have a chance to use our laptops without carrying the power brick when in meetings
- Tagging people in messages may or may not notify them...
- Meetings allow you to add people to them, but once the meeting is over they get removed from the chat, even if you've tagged those people in the meeting chat with important information, you have to formally invite people to the meeting with the original meeting invite for them to "stick".
- No way to copy/paste entire chat history/print chat history. I have so many screenshots of meetings/notes I need to keep and or share with others.
Overall Teams is one of the worst products I've used, and I was using "Teams" in the Microsoft Lync on macOS during the Office Communicator days.
The lack of native app is a real killer though, and unlike Slack which has done a LOT to improve how they use Electron/how much energy they use, Teams is the slowest and worst of them.