It absolutely is. There are many dash-cam videos truckers have uploaded to Youtube of people finding out.
57,650 karma · joined June 16, 2015
news.ycombinator.com##tr.athing.comtr:has(a.hnuser):has-text(/\bLinuxBender\b/)
For HN usage questions see https://github.com/minimaxir/hacker-news-undocumented for HN tips (not my repo) (\_/)
(='.'=)
(")_(")It absolutely is. There are many dash-cam videos truckers have uploaded to Youtube of people finding out.
For non developers people seem to like Discord for the freedom, options, ability to chat with whomever. It's not great in terms of compliance in a public company but maybe your company is small and this is not an issue.
The natural transition from Skype would be Teams and should be free if you are a small group. It is also free if you buy O365 or whatever they are calling it now. I can't keep up with the name changes.
Without understanding your business model it is hard to suggest anything that fits into your regulatory and audit requirements. Beyond that it would also matter what you put in your SOC1/SOC2 documents and what policies and procedures they reference.
Probably not? I could think of ways to hide the controls but the most likely targets would be Linux forks and firmware that run in cell phones, cars, appliances, IoT's, etc... Those are more likely to be in the path of monitoring something interesting. Even in the case of cell phones, cars, etc, I would expect the control to be in firmware that one could tickle with JTAG over bluetooth, USB, WiFi, LoRa to take full control of the OS and bypass all security controls rendering encryption into a placebo or a CPU warmer. Why waste processing cycles on brute forcing when you can tell the application that the encryption key was successfully decrypted without ever even looking at the key.
I guess a simpler way to say that is, why control Linux when there are always so many proprietary things are in the path that only have a handful of people controlling them, especially when one could replace said people whereas replacing all the Linux developers would be hard. Firmware that provides a CPU ring -4 shell can bypass absolutely every security control anyone could imagine in microseconds.
No. I adjust the settings on my monitors. I wear glasses to protect from shrapnel when cutting, drilling, sawing, etc...
Only if their scientific minds and governing bodies lied to and gaslit the population repeatedly until all that was left was to come up with their own albeit wrong answers. In this case I put the blame squarely on the NIH and WHO, both of which need some serious reformation.
Oh, and the witches hammer. [1] That book killed millions of women and girls. numbers are often debated
In Europe maybe? I've never seen anyone pay with their phone. Not in big cities and not in rural areas in the US. I will never do financial transactions with my government spy device. To each their own obviously.
As for when I am ready to pay, I go to the counter and give them cash or I might use a debit card if I am picking up everyone's tab. If they give me grief then I simply do not return to that establishment and they will get negative reviews.
Exactly. If the software is loaded then enabling the service is just a feature toggle. The only way someone would know it is enabling itself is if sites like HN start talking about it.
In terms of legality it is not clear to me that countries will enforce the laws of other countries even if they are allies. Global trade is changing and I suspect that could affect international enforcement as dependencies shift, maybe. Time will tell.
My process is to pull all emails off the server daily so that if I lose my email account or domain then instead of trying to switch back to my self hosted solution I just get a new domain, a new email provider and update them in each vendor if I still can. In some cases it will require getting on the phone with someone but I do not have much of a digital footprint. I have cut ties with most vendors that are not within a 5 minute drive. The exceptions being the IRS and Amazon, both of which I could live without and I have secondary contact info in the IRS system plus they like money so they will help me.
Example using DNS validation:
0 iodef "mailto:domainowner@example.net"
0 issue "letsencrypt.org; validationmethods=dns-01; accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/xxxxxxxxxx"
0 issuewild "letsencrypt.org; validationmethods=dns-01; accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/xxxxxxxxxx"
Only useful for non-rogue CA's of course and maybe some day crt.sh will be less after-the-fact on all browsers and API clients.Hard disagree. That's one person out of the billions that is your potential adversary and highly unlikely at that. It is highly improbably that person with either know they have your old IP or that they would be a risk. Even limiting login to a ASN# or large CIDR block is monumentally better than allowing the entire internet to brute force ones account.
As an example I have a few services that I do not really care about but I still limit logins to the CIDR of my ISP. That means most of my country and all of the other countries can bang away or pound sand all day and night for millions of years and they will get nowhere.