I know some folks who deployed during OEF/OIF and used these types of systems. Many a night raids were conducted simply by watching where attackers originated from.
64 karma · joined October 12, 2022
I know some folks who deployed during OEF/OIF and used these types of systems. Many a night raids were conducted simply by watching where attackers originated from.
Yeah that's totally it. It couldn't be that people like to have a phone that gets security updates for more than 2 years. Or having an AppStore that is policed in any meaningful way that keeps blatant spam and data-slurping apps out. Or any other numerous things that the Android ecosystem is totally fucked up on.
I love Apple haters- They rarely ever make sense and just come off as bitter.
"Executive time", a/k/a fuck off time, is perhaps one of the few great things Trump gave us. I'm legitimately not kidding. More people need to engage in fuck off time on a regular basis. It is refreshing for the mind.
I'm pretty surprised this issue has gotten as long in the tooth time wise as it has. I remember seeing a story about this ticking-timebomb power connector like 1.5 months ago and then heard nothing. I'm guessing there is scurrying behind the scenes between then and now, but you never know.
Picking up the telephone and debugging areas of expertise YOU created or are already responsible for is much easier than making a sales guy into a pseudo-engineer.
Also, paradoxically, some of the best product features I've come across literally started as a ghetto-coded-idea by a Technical Account Manager (sales engineer). Said features were later formalized and picked up officially by engineering, but the nexus of the product feature started with a non-dev.
Sorry for the ramble/rant. My point is this: Don't get so married to job titles. It can be limiting in my humble opinion.
No one with a fucking brain thinks that was a good idea. But that's what Democrats do.
And I'd really like to understand how the government "takes half" of your salary. Either you're super rich (probably not), or you're exaggerating.
Reality goes something like this: You roll out your E2EE dating app, it gets successful, you're winning bigly. Then cops show up with an order from a judge demanding you hand over information regarding user #890202 because they are suspected of using your platform to entice minors into sexual activity. This is usually where the E2EE worship falls flat, for legitimate societal reason.
If you want E2EE you need to use a dedicated app specifically ONLY for that (Signal, WhatsApp, etc). Any time you bolt on other business or incentives and then use E2EE as the messaging platform you will discover a world of pain in my opinion.
Unless they are actively repelling an attack, I can guarantee you that the President is absolutely not anywhere except the Beast. All of the other vehicles in the motorcade are less armored, and do not carry the critical items the President may need, namely his blood. The standard operating procedure if the President's motorcade is attacked is to exfil the President while the CAT (Counter Assault Team) lays down massive amounts of suppressing fire. To that goal, the Beast is the safest vehicle for the President to be riding in.
My point is this: There is no defense against 0-day/X-day exploits in the wild. But the second best thing against being patched is logging and properly tuned alerting. In my 20-ish years of working in this field I've caught half a dozen attackers/intruders via logs and anomaly alerts. Without those 2nd best things in place the entire network(s) would probably have been compromised.
Cheers.
In these scenarios you will usually see the vendor default to locking down the platform/hardware, if for nothing else to prevent people from buying it and re-purposing it due to subsidized components included.
It kind of opened my eyes to how much a maze the IC is regarding classifications and data restrictions. We may both have TS clearances, but I may have access to wayyyy more crazy stuff than you do, based on what I am officially working on. However, on paper we may have the same levels of "trust" from the system's perspective.
That is an extremely charitable parsing of the events. The more accurate (realpolitik) version is Bush said the no new taxes quip, and Democrats subsequently laser-focused on making him (slightly) raise taxes, showing he is a "liar".
My take away is to learn not to promise overly optimistic outcomes when your political rivals have a significant stake in seeing you either be a success or a failure.
Edit: Not sure why this was flagged. Did not mean to come off as hostile or aggressive. Anyways, cheers.
To the point of bickering - that's human nature. I expect humans to argue over the shade of blue, sneakers of the month, or whatever. What I don't expect humans to do is regress mentally to some child-like viewpoint of erasing and censoring any opposing viewpoints.
Reddit is radically different than it was 10 years, and not in a healthy, engaging way. Browse some non-technology subreddits and you will quickly spot the echo-chamber effect and group think in action.
I suspect he shared that with us younger folks to illustrate that war is not glamorous, even if you win. Yes they won, but it was a disgustingly ugly affair for all parties involved.
I'm glad he shared that, because I have a very healthy aversion to unnecessary conflict, in part due to a few stories shared by him.
Most of the places where I've been able to use my Yubikeys (FIDO2) also offer a very clear list of enrolled/registered keys, along with either a hash or serial number of the key. It makes revoking a key pretty easy in my experience.
I'm less keen on the idea of centralized repo for dead keys - each key is unique to the site in question, so there will be no need to share the existence of that revoked key's identifer with other providers - the data is meaningless to anyone else.