Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v17.1a - motherfuckers act like they forgot about jre
 
  • Post
  • Reply
The Fool
Oct 16, 2003


 the sea witch, obviously this thread is the rocks

* # ¿ Jan 15, 2019 19:13
  • Quote
Adbot
ADBOT LOVES YOU

# ¿ May 8, 2024 16:50
  • Quote
The Fool
Oct 16, 2003

Proteus Jones posted:

LOL

https://twitter.com/duniel_pls/status/1093571155368296449?s=20

Also, they 404’d their client list.

It is of course still on the way back machine

* # ¿ Feb 10, 2019 05:13
  • Quote
The Fool
Oct 16, 2003

quote:

- The whitelist was trimmed down to just 2 entries:

5e50a8b6afbcc3d33e38f30ba7a29542261e1191631481adbb7ef36bc63dc768:1:https://www.facebook.com
f363c150f2c13e39b50ff011438b4ba54ce67a433dd0f2cce9caa33dd3e3e0e4:1:https://apps.facebook.com
* # ¿ Feb 19, 2019 19:32
  • Quote
The Fool
Oct 16, 2003


 can't be worse than paypal

* # ¿ Feb 19, 2019 20:00
  • Quote
The Fool
Oct 16, 2003

Schadenboner posted:

turn 360 degrees and walk the gently caress away.
* # ¿ Feb 20, 2019 02:08
  • Quote
The Fool
Oct 16, 2003

ozymandOS posted:

otoh, if the box can unlock its own encryption on boot, so can an attacker

there are plenty of scenarios where the drive could be exposed but not the rest of the computer

the improper disposal example above doesn't even require a malicious actor

* # ¿ Feb 26, 2019 21:07
  • Quote
The Fool
Oct 16, 2003


 Does PayPal have real mfa now? I thought it was sms only.

* # ¿ Mar 5, 2019 17:32
  • Quote
The Fool
Oct 16, 2003


 same but pastebin, there are loads of password dumps there already, what are the odds anyone malicious will ever find mine

* # ¿ Mar 11, 2019 20:02
  • Quote
The Fool
Oct 16, 2003

BIGFOOT EROTICA posted:

no sorry if youre using a mac it Just Works
wrong

quote:

seems like someone is doing something incredibly stupid
the incredibly stupid thing is using a computer for anything

* # ¿ Mar 11, 2019 20:35
  • Quote
The Fool
Oct 16, 2003

the yeti posted:

huh, I could swear I read something once implying they actually were a woman. that’s pathetic though lol.

Yeah. He leaned hard into the gimmick for a while and it was super weird at times.

* # ¿ Mar 18, 2019 17:36
  • Quote
The Fool
Oct 16, 2003

Shame Boy posted:

you still have to search for and pick the thing first right? this matches based on the URL and picks the right one for you :shrug:

also i thought auto-type was Bad and you Shouldn't Use It because things were finding ways to hijack it, but maybe i'm thinking of something else

e: yeah I think I was thinking of the auto-fill browser mode where it doesn't wait for you to like, tell it to enter the password, it just goes ahead and does it whenever it feels like it, which is a hilariously bad idea

Autotype exists because the clipboard and browser plugins are not secure.

* # ¿ Mar 22, 2019 17:38
  • Quote
The Fool
Oct 16, 2003

CommieGIR posted:

Defender is getting stronger with ATP, ATA, and Sandbox testing builtin.

Honestly, if you have Azure AD, even just for your off prem stuff, you should totally take advantage of ATP and their Event Forewarding Analysis stuff.

We've been testing its use as a way to isolate infected machines, and even though it modifies the firewall to block all outbound internet traffic if it detects an infection, it keeps pushing the ATP and even forewarding for analysis

There's like 4 different ATP products

* # ¿ Mar 27, 2019 17:06
  • Quote
The Fool
Oct 16, 2003


 This is a gold mine:
https://np.reddit.com/r/sysadmin/comments/b6hhrn/software_vendor_vpns_dont_work_and_public_facing/

quote:

nmap caliach.com

Starting Nmap 7.40 ( https://nmap.org ) at 2019-03-28 16:00 EDT
Nmap scan report for caliach.com (119.9.76.6)
Host is up (0.27s latency).
Not shown: 990 filtered ports

PORT STATE SERVICE
21/tcp open ftp
80/tcp open http
135/tcp open msrpc
139/tcp open netbios-ssn
445/tcp open microsoft-ds
990/tcp open ftps
3389/tcp open ms-wbt-server
49154/tcp open unknown
49155/tcp open unknown
49156/tcp open unknown

http://www.caliach.com/caliach/support/knowledge/sql/0015.html

quote:

The server MUST allow us to enter with Remote Desktop AS THE
ADMINISTRATOR to set it up and thereafter for troubleshooting. Your IT
company may tell you we only need to be a user as part of the administrator
group? Please see bit above where it tells you that you will be charged when
your IT company wastes our time....
 You must not use a VPN. Easier said than done we admit as nearly all
computer geeks will wax lyrical on the benefits of using a VPN for “security”?
The problem is, using a VPN with RDP (Remote Desktop( which is what we
have to do – simply does not work! Therefore, if you have a VPN setup, then
you have two choices:-
* # ¿ Mar 29, 2019 01:34
  • Quote
The Fool
Oct 16, 2003

Shame Boy posted:

donating that to charity seems kinda like donating a bunch of stained torn up underwear to charity.
* # ¿ Apr 1, 2019 17:25
  • Quote
The Fool
Oct 16, 2003


 ill massage your sectors

* # ¿ Apr 2, 2019 18:11
  • Quote
The Fool
Oct 16, 2003

Lutha Mahtin posted:

this is such a galaxy brain take lol. i put my real name on the invoice, no fraudsies!!

Galaxy brain is listing them as a client on your website afterwards

* # ¿ Apr 5, 2019 00:17
  • Quote
The Fool
Oct 16, 2003


 ask me about losing att at every site in the us because ap and procurement were having a tiff about po numbers.

* # ¿ Apr 8, 2019 03:35
  • Quote
The Fool
Oct 16, 2003

Captain Foo posted:

:allears:

20-ish sites nationwide lost their primary internet and site-to-site VPN connections for ~30 hours because those two groups spent three months arguing about whether or not the at&t bill needed a PO before it would get paid.

Procurement claimed it didn't, because it wasn't tied to a contract, it was a recurring utility bill. AP said it did, because :shrug:

The final bill to get everything online was 6-figures.

* # ¿ Apr 8, 2019 17:28
  • Quote
The Fool
Oct 16, 2003

haveblue posted:

you can't block nazi sites because no one is willing to block the internet
* # ¿ Apr 19, 2019 19:32
  • Quote
The Fool
Oct 16, 2003

Schadenboner posted:

Is 9.9.9.9 good?

:ohdear:

It's fine as long as you don't mind your dns being run by law enforcement.

* # ¿ Apr 19, 2019 19:34
  • Quote
The Fool
Oct 16, 2003


 the ceo of cloudflare wrote some words when they terminated the daily stormer, the majority of which I agree with: https://blog.cloudflare.com/why-we-terminated-daily-stormer/

* # ¿ Apr 19, 2019 20:04
  • Quote
Adbot
ADBOT LOVES YOU

# ¿ May 8, 2024 16:50
  • Quote
The Fool
Oct 16, 2003

Jabor posted:

not actively sheltering nazis is censorship now? when did that happen?

There's a difference between actively sheltering and just treating them the same as every other customer.

(USER WAS PUT ON PROBATION FOR THIS POST)

* # ¿ Apr 20, 2019 04:20
  • Quote
  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply
The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v17.1a - motherfuckers act like they forgot about jre