tiberious726

This makes me kinda furious. The us government makes me do so much goddamned work to comply with their cyber security regulations (only about half of which actually contribute to my security posture), and here they are running their fucking firewall management page publicly exposed (the globalprotect portal was not vulnerable, only the _actual_ management page).

It's impossible (other than mutual TLS) to do mfa on the native ios mail app without trusting a third party for one of your factors. Hopefully Thunderbird will support it...

Not presupposing something is not itself a presupposition

And should be expected at any time without backups

Who would exploits be sold to then?

"Over 900 packages infected in a repository anyone can upload to, it just has to be compatible with Arch"

This is correct, look at IBM's CAPI for an example of the needed hardware

Install the plasma add-ons package if you're on KDE, I'm sure there's still something around for gnome too.

Burning windows away on close is my favorite

I fly with a flipper zero often. What are you talking about?

A hackrf is less expensive than a flipper and more capable in every way, except the dolphin gifs.

The flipper's primary use is that looks like a children's toy, which makes it far more effective for demos of how bad an orgs security is to not-especially-technical stakeholders than something like a hackrf or chameleon

How does Forgejo stack up to Gitea nowadays?

#AmericaColonizesEurope

It basically did, just in hex...

There is much better hardware available to security researchers (chameleons, hackrf, and actually research-grade (much more expensive) equipment).

The flipper is basically an Arduino pre built with a bunch of static antennas. It's fine and in a decent form factor, but I really haven't found it useful.

Do you have any links to actual research (not children playing "researcher") done with flipper hardware?

It doesn't infer anything, you just hit a blacklisted token

The fury X was a beast for a consumer card, sadly limited by having a mere 4gb of (hbm) VRAM, and a non-refillable AIO. But back when games could fit in 4gb, it was incredible.

I'd absolutely buy another hbm consumer GPU if it had at least 8gb (and if I got the vibe/hope AMD will actually support for a couple years...)

> TPM isn't for "security" in the abstract, it's fundamentally for authentication

What on earth do you think I make my users present keys for???

You know all those guides saying "you should never copy an ssh private key over the network. Make a new one for each device" that every idiot dev ignored? Now I can enforce that.

This article's method is bad, basically the same as systemd-creds (not itself bad, just extremely compatible), take a look at tpm-ssh-agent or gnupg for how to do that part the right way (the party they don't do right is bind/sign to pcrs, which is just low hanging fruit in today's day and age...)

If you run into the link to this, is love to read it. Proper, modern, pcrphase binding with a signing key should remove these firmware update issues irt the raw pcr value changing

The authors of both this article and ssh-tpm-agent (disjoint set) really need to learn about pcrphases and the signing keys therefor: https://github.com/Foxboron/ssh-tpm-agent/issues/15

I set up my orgs SPF/DKIM/DMARC (we self host, they have feelings about corporate data sovereignity...) it look about 30 min having never touched them before, and maybe another 15 to write an ansible playbook to rotate the keys.

We do have a _tremendous_ amount of spam fail these checks, as well as a few legitimate organizations.... Some of our peer companies have sent out notices that they will bounce anything that fail these checks in the coming years, and we're probably going to to do the same before too long.

It's trivially easy, and absolutely valuable

Random web apps are not. Imap pop and smtp don't sanely support mfa, so the insurance industry is slowly killing them off

It whines about licensing, but I switch between booting my windows installation bare metal and as a VM all the time

I still use emacs gnus with Gmail. You need a token instead of old fashioned imap auth, but it works fine

Still trying to figure out how it's related to B5

Genera would like to have a word

You mean valve's?

Yes

Anything with an sfp slot and a decent "optic" should blow tp-link's link stability out of the water. In about the same price range, have you tried mikrotik?

In unconfigured emacs, you can literally just go Buffer>Save in the toolbar. If you didn't know to look in the buffer menu, then you didn't read even a little bit of the tutorial that appears when you open it