HNHacker News
TopNewBestAskShowJobs

longcat

226 karma · joined September 28, 2019

submissionscomments
longcat··on Against /tmp
Same for the sysadmins/scripts that create C:\Temp on Windows, there is nothing temporary about that directory.
longcat··on Thanksgiving 2023 security incident
In both situations Okta and Cloudflare a generic or system account has been compromised. CloudFlare would have had to upload or provide a session tokens or secret to Okta's support system.
longcat··on Show HN: React95 – A React components library recreating the look of Windows 95
great taste in music @hatf0
longcat··on My long goodbye to Windows XP (2022)
Plus a lot of vulnerabilities in Windows 10 or 11 also exist in Windows XP but they're no longer mentioned.
longcat··on My long goodbye to Windows XP (2022)
Windows XP on it's own, behind Windows Firewall and a router firewall not doing anything too controversial may be fine. Where the risks become higher is when you have many machines across the network. That one host would lower the overall security of everything else around limiting the ability to disable weak protocols.

Backwards compatibility with Windows/AD has always caused issues with Active Directory becoming such a juicy target in the way system-to-systems interacted.

longcat··on What Is Anglish?
What makes today's English so great is what has been borrowed and adapted from foreign languages. Everything adapts and grows with the cultures around them.
longcat··on Passwordless Authentication – Access Your Bitwarden Web Vault Without a Password
PassKey is great but also may cause vendor lock-in looking at Google and Apple in particular.

Does anyone have any insights to how enterprises will be managing passkeys for corporate accounts with the potential of creds being leaked to potential compromised devices.

longcat··on Plex: Important notice of a potential data breach
I'm interested to know more around how a third-party was able to access the data with for others to learn and provide use-cases to increase security controls in areas where there may be deficiencies.
longcat··on Windows OS, Services and Apps: Network Connection Target Hosts (2021)
As someone who works within an operations team, the telemetry that is seen within MEM/365 is extremely useful for detecting issues and providing overall health of the environment.

While MS does not help itself with some of the more invasive tactics, some of the telemetry is super valuable in detecting issues with drivers, updates and many other things.

Even the episode of MS08-067 https://darknetdiaries.com/episode/57/ has some interest bits on early telemetry.

longcat··on Unofficial firmware upgrade for Dyson V6/V7 vacuum battery management system
Legislation on e-waste, serviceability is extremely important to prevent this kind of preventable waste.
longcat··on Windows has a new wormable vulnerability, with no patch
This only impacts 1903 and 1909 releases of Windows, so any Windows Server LTSC 2016 and 2019 aren't affected.
longcat··on The NBA Feels a Backlash in China After a Tweet Supporting Hong Kong
That would never happen because HK is already part of China, while it's political system differs than Mainland China - It's still effectively China. It has PLA garrisons all around HK.

Would highly recommended reading about Taiwan. Taiwan is what China should be but with the amount of manipulation and corruption i don't see it ever happening.

longcat··on White House Weighs Limits on U.S. Portfolio Flows Into China
sadly the CCP don't play by any rules