Re:FireEye Shares Details of Recent Cyber Attack
by stickfigure on Tuesday December 08, 2020 @10:58PM
(#25355165)
99.9% of Matthews-in-accounting use Microsoft Excel on Windows. Full stop.
Re:FireEye Shares Details of Recent Cyber Attack
by ramraj07 on Wednesday December 09, 2020 @03:01AM
(#25356389)
Excel in windows is still possible, it'll just be on either an rdp server locally or on AWS.
Re:FireEye Shares Details of Recent Cyber Attack
by sudosysgen on Wednesday December 09, 2020 @04:30PM
(#25365388)
And then when you run the xlsx file with the contaminated macro or zero-day, the result is exactly the same.
Re:FireEye Shares Details of Recent Cyber Attack
by smabie on Tuesday December 08, 2020 @11:52PM
(#25355488)
Matthew wouldn't want to work at your shit company then.
Re:FireEye Shares Details of Recent Cyber Attack
by ramraj07 on Wednesday December 09, 2020 @03:03AM
(#25356400)
Why is that a mark of a shit company exactly? Because we should continue allowing a threat model that continues to plague essential services like hospitals with "ransomware", the fact that such a threat is allowed to continue suggests we need to take a hard look at how much we should take highly customisable computers for granted in work situations.
Re:FireEye Shares Details of Recent Cyber Attack
by weisk on Wednesday December 09, 2020 @10:07AM
(#25359205)
Who's this fucking Matthew and why is everyone talking about him? He must be the best heckin Accountanant ever
Re:FireEye Shares Details of Recent Cyber Attack
by judge2020 on Tuesday December 08, 2020 @10:36PM
(#25355025)
A magnetic lightning connector glued in should do fine[0], but if your threat model really takes into account checkm8, you could also just buy the newest ipad which will have a patched SecureROM.
0: https://www.amazon.com/REDDOTMOBILE-Detachable-Magnetic-Ligh...
^ This is the solution I have been mulling if and when I am responsible for an org where security is kinda important. Sure, iOS is still hackable, but hopefully we put more hindrance steps between the attacker and the org, and move the exposure more to the cloud services (like box). Curious if this is feasible.