News for hackers. Stuff that matters.

A comment on Our security auditor is an idiot. How do I give him the info he wants? (2011). Parent comment

Re:Our security auditor is an idiot. How do I give him the i... by sgtnoodle on Sunday June 18, 2023 @06:10PM (#36385052)
Couldn't you just give them an empty rule set? Like, make it a nice official looking report.

I had to certify a low speed vehicle using a government test procedure. It called for all test equipment to be calibrated within the last year. I had built some of the equipment myself specifically for the test, though. I measured the relevant performance characteristics in a thermal chamber (oscillator drift was the only possible source of error), documented it on a piece of paper to stick in the office filing cabinet, and printed some "Calibrated on xx/xx/xxxx" stickers.

[ Parent | on HN ]
Re:Our security auditor is an idiot. How do I give him the i... by dharmab on Sunday June 18, 2023 @06:26PM (#36385177)
A purely hypothetical and fictional story: A programmer once complied with a requirement to produce a firewall policy by creating an allowlist policy that was effectively, 0.0.0.0/0 but with addresses such as the following removed:

- 100.64.0.0/10

- 192.0.0.0/24

- 192.88.99.0/24

- 192.0.2.0/24

- 198.51.100.0/24

- 203.0.113.0/24

- 233.252.0.0/24

The significance of these networks is left as a punchline for the reader.

[ Parent | on HN ]
Re:Our security auditor is an idiot. How do I give him the i... by autoexecdotbat on Sunday June 18, 2023 @08:10PM (#36385842)
https://www.iana.org/assignments/iana-ipv4-special-registry/...

What is 233.252.0 0/24 reserved for? I don't immediately recognize it and didn't see it on the iana special registry.

[ Parent | on HN ]
Re:Our security auditor is an idiot. How do I give him the i... by anotherhue on Sunday June 18, 2023 @09:15PM (#36386202)
https://chat.openai.com/share/7f51c5f6-5193-4f7a-9c4b-7c4464...
[ Parent | on HN ]
Re:Our security auditor is an idiot. How do I give him the i... by dharmab on Sunday June 18, 2023 @09:40PM (#36386361)
GPT is wrong here - or at least, doesn't provide the complete picture
[ Parent | on HN ]
Re:Our security auditor is an idiot. How do I give him the i... by dharmab on Sunday June 18, 2023 @09:41PM (#36386365)
https://datatracker.ietf.org/doc/html/rfc5771#section-9.2

> The first /24 in this range, 233.252.0.0/24, is assigned as "MCAST- TEST-NET" for use in documentation and example code. 233.252.0.0/24 SHOULD be used in conjunction with the [RFC2606] domain names example.com or example.net in vendor and protocol documentation. Addresses within 233.252.0.0/24 MUST NOT appear on the public Internet.

[ Parent | on HN ]
Re:Our security auditor is an idiot. How do I give him the i... by autoexecdotbat on Sunday June 18, 2023 @09:59PM (#36386497)
Well dang I should've thought that through before asking the question. Should've realized up in the 220-230 range was going to be mcast reserved. Can't help but acknowledge the irony in not throughly reading the docs for the documentation reserved range though.

https://www.iana.org/assignments/multicast-addresses/multica...

[ Parent | on HN ]