Security Fuckup Megathread - v14.1 - Hello, is this a delivery order?

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v14.1 - Hello, is this a delivery order?

«‹›4 »

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

aws bucket?

# ¿ Dec 20, 2017 00:43

Adbot: ADBOT LOVES YOU

# ¿ May 14, 2024 12:04

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

spankmeister posted:

someone should register the .local gTLD

i think microsoft started telling people not to use that for internal domains about 17 years ago, naturally i still see it everywhere

# ¿ Dec 20, 2017 19:30

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

when i say everywhere i mean in business AD networks with name servers, i.e. places where mDNS should not be in use

# ¿ Dec 20, 2017 19:33

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

server 2016 essentials does this too

microsoft is real schizophrenic about it, but their ad best practices have been relatively consistent re: don't do it

the fact that a small business product explicitly contravenes their own best practices is the least surprising thing ever, for example, every release of small business server and server essentials

# ¿ Dec 20, 2017 20:30

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

their sample text uses .test

# ¿ Dec 20, 2017 20:45

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

NEED MORE MILK posted:

yeah but they have, of course, provided no way to easily change a domain name so were gonna be using .local forever because lmao at creating a new domain and migrating stuff over

yeah, i had to modernize an old single label domain a couple years ago and welp, the process is to make a new domain

modern windows server does not like single label domain names. neither does anything else

# ¿ Dec 20, 2017 22:33

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Farmer Crack-rear end posted:

"Goodin knew these statements were false" lol i'd love to see their argument for that one

are they suing tavis too?

# ¿ Dec 21, 2017 00:35

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

weirdly, it's just a colour swapped version of GCHQ's cyber security advent calendar christmas tree

# ¿ Dec 24, 2017 08:26

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

why did you have servers delivered to your house?

# ¿ Dec 27, 2017 20:27

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Jabor posted:

most of the world disables javascript?

they ought to

# ¿ Jan 4, 2018 04:54

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

lol. also how the hell did he manage to issue a cert for just under two months?

# ¿ Jan 4, 2018 23:58

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Wiggly Wayne DDS posted:

that's a 90 day cert...

can't math, send help

# ¿ Jan 5, 2018 00:06

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

intel still makes top-to-bottom server platforms (motherboard included) if for some reason you're not buying from some other tier-1 OEM. i don't believe they make workstation boards any more, and they haven't made consumer motherboards for a few years now.

imo, the biggest differences you'll find between most board vendors will be firmware and power component quality.

and trust me, you can gently caress up plenty with just lovely UEFI

# ¿ Jan 7, 2018 04:02

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

depends on how you define workstation i guess. anything dual-socket will be legit, but there's not much of that. beyond that anything single socket that supports xeons and ecc should count, and gigabyte, asus, et al. have something it's just hard to find unless you go digging for it on their site.

# ¿ Jan 7, 2018 08:55

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

there's a fairly major manufacturer of glass curtain-walls in north america that buys nothing but cad stations built around consumer grade motherboards and the 2fast2furious pcgaming videocard of the day, because it saves nearly 50% per workstation over whatever optiplex model and certified drivers don't mean poo poo in cad and solidworks these days

# ¿ Jan 7, 2018 08:59

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

compal makes all

# ¿ Jan 7, 2018 09:46

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

does threadripper support ecc? i seem to remember it not having ecc

# ¿ Jan 7, 2018 20:36

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

y'know, a zine

# ¿ Jan 10, 2018 04:54

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

since it's apparently 1992, i'd say 2600

# ¿ Jan 10, 2018 04:57

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

https://twitter.com/daviottenheimer/status/949348043744309248

loool

# ¿ Jan 10, 2018 22:03

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

https://twitter.com/mik235/status/951217727422611456

# ¿ Jan 10, 2018 23:42

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

there's something incredibly amusing about the hawaii ews team perpetrating a stunningly effective terrorist attack, entirely by accident

# ¿ Jan 14, 2018 02:59

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

a random guy on the internet posted:

It�s been several years since I worked with any EAS tech. But we had a �draft� mode (aka test mode or sandbox mode) that would let us preview anything about to be sent out. The live and draft environments look and operate almost identically, with the exception of the border color on the display window, a radio button on the screen, and the distribution sheet. I�m guessing that someone didn�t realize they were in the live environment before hitting send.

Another possibility, they were training a new hire who did not think/know to check for the difference.

# ¿ Jan 14, 2018 04:25

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

where else is that info going to come from when this alert is needed?

# ¿ Jan 15, 2018 07:41

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

fishmech posted:

idgi so it was door that opened to all cars? or this was a plate they previously had authorized?

either way it'd be like saying "an id card for a security system sucks because someone might take the id card from someone meant to have it"

i think the idea is it's pretty trivial to take a picture of an approved plate, then print it out on something the same dimensions, to fool an optical scanner

# ¿ Jan 16, 2018 03:02

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Midjack posted:

similar to the kids in maryland who photographed a teacher's plate, printed out copies, and drove past as many speed cameras as they could find

lol. awesome

# ¿ Jan 16, 2018 03:51

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

locks and honest people, etc.

as long as you're aware it's trivial to defeat, i guess

security snakeoil is harmful though, i guess it depends on how it's being marketed

# ¿ Jan 16, 2018 05:40

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

someone is claiming a practical attack based on meltdown/spectre, with no details of course

# ¿ Jan 18, 2018 19:52

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

not news: google continues to suck at vetting extensions and responding when malicious ones are found

# ¿ Jan 19, 2018 22:24

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

smart companies get breached, for valuation purposes

# ¿ Jan 20, 2018 22:18

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Kazinsal posted:

It looks like they stole his username by renaming the breached account to something else and re-registering his original username

this just happened to a local city councilor here in toronto

and on the subject of rule lawyering, we've successfully avoided data breaches be re-defining data breach

# ¿ Jan 22, 2018 23:33

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

haveblue posted:

should have used the proper salt

oy vey

# ¿ Jan 24, 2018 03:02

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

what if cybersecurity but google, you know, on the cloud

# ¿ Jan 25, 2018 00:12

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Subjunctive posted:

ugh loving FIPS

FIPS mode? FIPS mode ~~is the greatest~~ loving sucks

# ¿ Jan 25, 2018 22:59

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

Dadbod Apocalypse posted:

oops!

Tech firms let Russia probe software widely used by U.S. government

https://www.reuters.com/article/us-usa-cyber-russia/tech-firms-let-russia-probe-software-widely-used-by-u-s-government-idUSKBN1FE1DT

how is this an oops? if they want to sell software to the russians this is sop

# ¿ Jan 25, 2018 23:25

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

also

https://twitter.com/ArmsControlWonk/status/957771075663769600

# ¿ Jan 29, 2018 02:18

Adbot: ADBOT LOVES YOU

# ¿ May 14, 2024 12:04

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

i'm sorry subjunctive, but user tracking is haram

# ¿ Jan 30, 2018 19:52

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v14.1 - Hello, is this a delivery order?

«‹›4 »