HNHacker News
TopNewBestAskShowJobs

tempfs

321 karma · joined June 2, 2017

submissionscomments
tempfs··on Zerotier – multiple vulnerabilities lead to private network access
Security teams have way more visibility than you seem to be aware of.

My advice to you and others is to always ask yourself, "Is this really worth losing my job over?", when considering any sort of security control circumvention.

tempfs··on Home Price to Income Ratio
1. Residential homes are no longer allowed to be 'investment properties' aka every person(or married couple) can own exactly one house. Corporate entities except for Banks(even then can only own it for the time it takes to sell it in the case of foreclosure) can't either.

2. Only actual Americans can own property in America. Single-fam, multi-fam, land,etc. doesn't matter.

Exactly no one needs to rent houses if mulit-fam exists and actual houses aren't speculative instruments or places where foreign nationals hide their money.

tempfs··on "Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
Exactly, they were doing fine until they made a point to shit on all open source software instead of limiting their focus to this one, Microsoft-sponsored outfit.
tempfs··on We Could Brighten Clouds to Cool the Earth
I am counting on there being enough Starlink satellites to block out the Sun. Problem solved.
tempfs··on Misbehaving Microsoft Teams ad brings down the entire Windows 11 desktop
Teams, that application that is notoriously slow, unstable and crashy AF...will soon be 100% baked in and inseparable from the rest of the OS.

[cue hyper-emotional MSFT spokesperson reaction GIF]

tempfs··on Tor is a great sysadmin tool (2020)
Using Tor for anything in a corporate network will rightfully get you into serious shit with IT security.

I see a lot of people also advocating ngrok, wireguard, etc. You all may not realize that actual threat actors use all of these same techniques and making yourself look like them could very well lead to your termination as this kind of circumvention of security controls is absolutely a threat to the org and a violation of security policy.

TLDR; If you need remote access, use the proper channels....pretty please. For everyone's sake.

tempfs··on Google says geofence warrants make up one-quarter of all US demands
And ofcourse the government while it can't collect all that information on its own can sure as hell buy or rubber-stamp warrant their way into these datasets at will in order to side step the 4th amendment all together.

If people are generally willing to accept the axiom that information is power, I am continually baffled as to why they can't understand how reckless it is to allow all of this capture, sale and sharing of the intimate details of their lives.

How can we possibly defend ourselves or have any control over our lives while giving this much power to profit motive corporations?

It is just pure madness.

tempfs··on Why SteamOS Switched from Debian to Arch Linux
Debian testing is a thing and has to be more stable than Arch which was absolutely not the last time that I used it.
tempfs··on GitHub’s engineering team has moved to Codespaces
Microsoft owns Github now. There is only really one way things will go from that point.
tempfs··on Tesla Model S garage fire follows pattern prompting warnings
Gasoline cars probably, rarely or never, literally spontaneously combust while sitting parked in a garage. This is a serious problem and I am not sure what citing that fact adds to the discussion.
tempfs··on MS Windows Defender and DeCSS
Your concerns extend to the OS itself by the way. Windows is a full blown surveillance platform now.

Defender ATP telemetry also sends much more home than the customer can ever see. They claim to anonymize it but anyone who works in security for a living knows just how much story you can tell with relatively little data.

tempfs··on Full-time minimum wage workers can't afford rent anywhere in the US
TVs haven't really gotten all that much cheaper to my memory in years. I can recall spending about $7-800 on a big-screen cabinet for our family room in the mid-90's and then recently spending the same amount flat screen LED version recently.

Computers also aren't really all that much cheaper now either. I mean sure, OK, compared to the 80's sure but that was 40 years ago.

Cars have absolutely not gotten cheaper.

Education and housing though...yeah. The Federal Reserve has made sure that no one has been able to afford either for many years now. Housing has also been made even worse by flippers and foreign investors(invaders).

Rentals also consolidating into fewer and fewer hands which is just going to drive up rents for everyone.

Electronics are frankly only so important.

Housing(ownership especially) and education are actually things that underpin so many other societal problems that we as a country should have *never* allowed lax interest rate policy and Chinese investors / flippers to drive prices so far beyond any semblance of rationality.

tempfs··on Ask HN: Why haven't we heard of data centers being affected by ransomware?
Ransomware requires a few preconditions in order to do real damage.

Mostly those all boil down to:

1. Shit-to-no backup solution in place. 2. Poor segmentation from a network/identity/privilege perspective.

Datacenters usually have this kind of stuff down pretty well or they don't stay in business very long.

Additionally, traditional ransomware attacks start as client-side attacks[phishing/fake search engine results promising app updates/etc]. This kind of attack works way better against Mary Sue in accounting or Chuck in sales but the scenario of Datacenter admins checking their Gmail on admin workstations or servers is hopefully insanely rare or never.

tempfs··on Windows 365 Cloud PC
It's like they've never even used their own browser(Edge/Chrome) or something. 4GB for a Windows OS is hilarious.
tempfs··on US companies hit by 'colossal' cyber-attack
Because a lot of EDR detections are purely string based and will be closely watching for certutil doing things that attackers like to use it for.

Making a copy with a new random name defeats this detection logic.

tempfs··on Another 0-day looms for many Western Digital users
How many times do people need to be burned by closed-source, cloud boxes before they learn to stop buying them?

Western Digital deserves their fair share of blame here as always but honestly the pattern of failure and consequences here is pretty well established by now.

Rolling your own remote access solution(SSH/VPN+ strict FW rules) that can be used in conjunction with your own DIY raspberry pi network share(SMB+external drive USB or docked HDD) service is just really well documented in so many articles and is very maintenance free once you cronjob the updates.

It is time to own your digital destiny people. The stakes have always been high enough to justify the time and effort. Just do it!

tempfs··on 80% of orgs that paid the ransom were hit again
I mean they just proved that they are willing to pay the ransom. If they are also unwilling or unable to clean up their shop and keep it from happening again, it surely will.
tempfs··on Jackal 0.54.1 – Go XMPP Server
Believe it or not some of us still run private XMPP services so that we can communicate with our contacts in a private and secure manner....and it still just works.

How crazy is that?

tempfs··on U.S. workers are among the most stressed in the world, new Gallup report finds
Americans are in constant competition with each other for everything.(jobs,houses(and with foreign investors too),social media points)

Fighting, fucking, sleeping... it's all we know how to do anymore. We used to make things, build things, share accomplishments as a society and a nation with each other. Now everything is about the personal accumulation of power/money. Not sure how a society like this is meant to last.

Given the events of the last few years and the fact that a cretin like Trump was ever elected President, I'm pretty sure we are 100% fucked.

tempfs··on Linux OS Is Best for Medical Devices
Linux also doesn't constantly stream telemetry from devices that are being used in a HIPAA-bound setting unlike Windows which is going be sending everything from operational metadata to memory dumps back to Microsoft who will mine, selling and eventually leak it all.
tempfs··on How Big Tech got so big: hundreds of acquisitions
MSFT not growing?

https://www.nasdaq.com/market-activity/stocks/msft/advanced-...

tempfs··on Millions of Groundwater Wells Could Run Dry
California and the other Mexico-bordering states have so much ag in the middle of the desert because of the ready supply of immigrants.
tempfs··on IBM to Kernel Maintainer: “You Are an IBM Employee 100% of the Time”
No one tell IBM that they own Redhat now and have a direct/vested interest in seeing the kernel that it depends on be non-shitty.
tempfs··on Pihole-Antitelemetry
Great start, now do Microsoft.
tempfs··on Zero click vulnerability in Apple’s macOS Mail
Apple's entire business model is based on appearances. To be fair so is Microsoft's and many others.

Security is usually the last priority for nearly every for profit entity because it doesn't drive revenue.

tempfs··on TSMC cancels chip price cuts and promises $100B investment surge
I am wondering if this concentration of capacity in Taiwan with China looming over it is really such a great idea.
tempfs··on U.S. rent has increased 175% faster than household income over past 20 years
Foreign investment(Chinese) and interest rates are the biggest cause that I see. Shit local building policies are also to blame(California).
tempfs··on Apple Confirms iMac Pro Will Be Discontinued, Recommends 27-Inch iMac
More graphics power in the form of a discrete GPU, more storage and memory offered...etc.

With memory and storage soldered ofcourse...as is tradition.

tempfs··on The Need to Remove Bad Management
The role of "Management" is supposed be the oversight and allocation of human resources and other assets towards the completion of the org's stated goals.

This is the one thing that *never* seems to happen.

What does happen consistently is that management simply gatekeeps between two major classifications of subordinates, climbers and the productive.

Making sure to 'partner' with the climbers in order to share credit for their faux accomplishments and make sure that the productives stay right where they are to keep the machine from completely exploding before that manager can move up and on.

Bad management and truly poor leadership in general is just pervasive in public and private institutions.

In GOOG, APPL, and MSFT it is 10x.

tempfs··on Creating my awesome Windows 10 dev setup
Windows is just so slow at most everything though...

I go back and forth between a personal Debian box and Surface laptop all day long and it really just emphasises the amount of bloat and drag that Windows experiences doing even the most basic things like manipulating files and using a web browser.

I can use VS Code on both OS's and everything is faster on Linux. Not sure why I would choose Windows unless I needed the C#/.Net toolchain.

← PreviousPage 2 of 3Next →