News for hackers. Stuff that matters.

2-4-Flinching

Re:The Bare Minimum You Should Do to Protect Your Family's Data on Saturday December 01, 2018 @07:22PM (#18579954)
Defender doesn't get updated as fast as other AV that is why it is free and if you actually get a MS enterprise AV is a ton of money compared to other enterprise AVs. I have had Defender not find viruses other AV will caught as long as a week. Also defender also opens up vulnerabilities. I didn't miss the cost/benefit calculation. https://www.cvedetails.com/vulnerability-list/vendor_id-26/p...
Re:The Bare Minimum You Should Do to Protect Your Family's Data on Saturday December 01, 2018 @05:05PM (#18579268)
So does the Linux/Linux-Kernel, Windows/Windows-Kernel, OSX/OSX-Kernel. Better not install those reputable OSs.
Re:The Bare Minimum You Should Do to Protect Your Family's Data on Saturday December 01, 2018 @05:00PM (#18579245)
It's pretty simple that they are looking to protect the user from the everyday threats (hint hint: Bare Minimum in the title). Also while I'm sure your superman with a "security degree" that looks down on all the mere mortals. You would stand no chance against an government agency with all the time in the world and a blank check.
Re:Fixing Weak Wi-Fi Router Security on Thursday June 14, 2018 @08:22AM (#17311080)
Not much. Have not noticed a real increase in my electric bill. However, it is a mini desktop and designed to be low power. Probably far less then my Plex Server easily.

There are options for much lower power hardware. I may do an experiment to see. Be kinda interesting but also hard to duplicate traffic effect and CPU loads.

However the reliable updates, advanced firewall, physical multi LAN, and durable VPN can't be understated for my use.

Re:Fixing Weak Wi-Fi Router Security on Wednesday June 13, 2018 @02:54PM (#17305967)
That is the reason I run a pfsense router/firewall. You never worry they are going to stop supporting your device cause your device is x86 with FreeBSD base.
Really? I though the least realistic thing on TV were the people given the perfect hair, make up and just genetic beauty.

Its pretty obvious that Microsoft made a deal with the studio and Broadcasting companies. Just like the popularity of auto bots to pick Chevys and the Decepticons some how fine de-badged fords or the fact that Marvel is full of Audi's. If you open your eyes you will find brand placement everywhere.

Now to the Surfaces, Currently I have switched over three departments to Surface Pros last year (2017). Each employee has a docking station hooked up to duel monitors, keyboard and mouse. So far I have been surprised how well they worked out, mostly that no one has dropped them. I have had few complaints. They run good, they can be used off site and are easily portable. I have also used in with the kick stand on my lap with no issue. Maybe we have different body types. Overall was not a big fan when they decided to do the first department upgrade but I would deploy them with no problem now.

Re:It Was Bad UX, not a “Wrong Button” in Hawaii on Tuesday January 16, 2018 @01:28PM (#16160650)
I will say color makes a bigger impact on people that are not paying attention. I built a batch script to automate a lengthy process we had to do to a few dozen offline computers. I had field techs telling me it ran but didn't work. Found out that they were not reading the output of the command line. It would ask them to run it as Administrator. Quick fix, I made the box background go red and the text yellow when it hit this issue and never had a problem since.
Re:It Was Bad UX, not a “Wrong Button” in Hawaii on Tuesday January 16, 2018 @01:13PM (#16160478)
I think kemitche was saying was they would have two groups. One would be "Test Alerts" and the other would be "Real Alerts" not that we needed to have a philosophical break down of alerts by severity. severity may have not been the best word but He did explain his definition in the next few words.
Re:Doctors' plan for war on sugar on Sunday January 07, 2018 @09:54PM (#16094323)
>Do you know how many oranges you need to make a glass of juice?

Nope but one orange has 12-17g of sugar and one cup of OJ has 21g. So maybe about two. I could easily eat that in one sitting.

Re:Doctors' plan for war on sugar on Sunday January 07, 2018 @09:41PM (#16094266)
Since you brought up Seattle, Washington. I think its crazy that there is a city tax on a substance that also receives a taxpayer-funded government subsidy. It like how much does the tax payer need to bleed itself to the government, all in the name of his\her health I'm sure.

Also I'm sure they will see less soda being bought inside the city, that is a win right? Except people are just shopping outside city limits. Kinda like dry counties were you just pick up your booze on the way home.

Re:Ask HN: What are your steps to protect your privacy? on Thursday January 04, 2018 @07:19AM (#16069778)
Well can't really. Actually my job.

Not sharing your information is a good step and when you do compartmentalize it. Different emails and phone numbers for different things. I have a few google numbers I give out besides my actual number. Lots of my information on online fourms is completely made up but documented. I use keepass to keep strong passwords and notes on accounts. If it doesn't need my real name, it doesn't get it. Limiting information on the web about you is good over all.

Shopping in store doesn't give you security unless you use cash. The Target Breach was all in store and they actually said that "There are no indications at this time that the breach affected customers who shopped at Target’s online stores." Home Depot was malicious software installed on the self-checkout lanes.

As for living life like its 1900, you can as long as your job is not in computers or using one. Grabbing cash from the bank, paying for cash in store. No online bill pay or banking, no hacker news. I have known a lot of guys that do it daily. Even have dumb phones that were super cheap.

You already have an internet connected microphones in your house. Its your computer, your chromecast or firestick, your smartphone has three, your laptop, your smart tv, anything IOT, heck, I once connected a speaker system to become a mic at a friends house and broadcast it over a SRD. It maybe that they don't understand but many "in the know" seems pretty hypocritical when they examined there own self. I know this isn't going to be a popular opinion on HN.

When we start to talk about government surveillance I think people go over board and start looking at IOT devices over aggressively. It not hard to bug a house, people are usually gone for at least 8 hours a day on weekdays. If I was doing an ops, it be easier to break into their Wi-Fi and infect a device that way or break into their house and just plant a bug or two rather than wait and get a warrant for their data from Google or Amazon which is time consuming and filled with paper pushing, plus the added fact that Google and Amazon have both pushed back in recent years in court battles.

When it comes to "Big Brother" you are fighting a rather big monster with zero days, money and time on its side. Even as someone with enterprise grade networking equipment in his house and a security background, I just know its a time game if you fighting the "MAN". I had a friend that was super paranoid. Enterprise gear, no IOT, custom linux router with live patching, some pretty cool stuff. Asked me to pentest him. A door left unlocked (planned to use a bump key) by his wife before leaving the house and a PoisonTap attack on a windows computer and he was pawned. GAME OVER.

I have had a Google Home Mini since they came out and use it daily. Controls lights, multiple outlets, the Chromecasts through out my house, I used it to add stuff daily to my calendar, add items to my grocery list and much more. So I think its pretty practical in an everyday setting.
Simple, they have hit a price range that the average person feels they can spend and not feel to bad about wasting money later if it sits on the shelf.

You would probably need to edit your question to "Why do you think millions of people bought an [Amazon] Echo Dot or a Google Home [Mini]" The evidence is clear both are the lowest costing home assistant device for their respective lines. At $30 on sales this season it could make it even into many gift swaps with that budget. Just as a few years ago the Firestick and Chromecast did.

>Having to say "OK, Google" instead of just "Google" (or "Alexa") is a deal-breaker.

LOL. That is one of the reasons I hated Alexa. She turned on when a podcast said something about her, the TV ad came on, we talked about our friend Alexa and when anything sounded kinda like Alexa. Ended up changing it to Echo, which worked a bit better. Amazon was out of the question when order to much from there and so common conversation have Amazon in them.

I enjoy Googles way more and no one I know still uses "OK, Google" its much simpler and rolls off the tongue to say "Hey, Google!". First world problems after all.

>Google's products don't feel like they are designed by humans.

And Amazons does? Over half of the stuff I said to Alexa comes back as "I don't know how to help with that" even simple facts. Alexa seems to be very limited in researching and answering. While google has there powerful search engine. Also with google I can build shortcuts for even the most advanced, long winded commands and wrap it into "Hey google, protocol seven" or whatever I want.

Re:How do you move out of a smarthome? on Thursday November 30, 2017 @09:01PM (#15821362)
Why do you even have a smartphone? If you are so freaked out cause of it why do you leave in it your most private space (your house) with its mic and out of date software. Why don't you save yourself money by not buying a smartphone and get a cheap flip phone for like $30? Which is clearly less hackable then a smartphone. I'm guessing you have wifi, why even pay for a mobile phone when it never leaves your house and use an Internet Telephony which is also way cheaper and more secure then your current setup.
Re:How do you move out of a smarthome? on Thursday November 30, 2017 @08:37PM (#15821277)
There will never be a new generation of offline neural nets. AI will need more and more horsepower as it evolves and that is more then what a normal household would want to spend. Cheap end devices are what the average buy is looking for.

Internet bandwidth and speed are increasing and cheaper which was the main reason for offline in the past.

There is also the fact that they don't have to support outdated or multiple versions of a server or distribute updates. The end devices like Google home, Echo and the video fire stick, Chromecast are basic input > send to server > output. That is cheaper to support. Plus you get all the data to improve your product.

When I was young I setup up my first Home Server. Much like an enterprise server. It had share folders, computers backup to it, print server. Though it was the future and in a decade every house would have one. Now a days they don't but they do have stuff like Google Drive and Google Cloud Print and many more options that give you those options in the cloud.

Re:Facebook Is the Junk Food of Socializing (2015) on Sunday November 26, 2017 @09:17PM (#15784350)
> This seems like an inconvenience you impose on everyone else to do things Facebook handles natively.

If you're important to them, then people will do whatever they need to keep in touch with you. Inconvenience is when they don't care enough to keep in contact with you. While in a perfect world everyone would accept your impose line of communication, in your case Facebook, everyones preference is different.

Re:There are over a billion outdated Android devices in use on Monday November 13, 2017 @11:11PM (#15692589)
You don't have to drop $600 every year and a half. Which would only be $34 a month over that period.

You can drop $600 every 3 years with google devices and have monthly security updates. You could save $17 every month for that 3 year time to buy the next phone.

If you want to stay secure you will, if it not a priority you wont.

Re:There are over a billion outdated Android devices in use on Monday November 13, 2017 @08:02PM (#15691733)
The only impact?

You are a walking vulnerability. KRACK, Blueborne, just to name a few recently highly publicized vulnerabilities.

You are like the perfect exploit, just waiting to get pwned. You are, Bill Harper.

Re:People are keeping their cell phones a lot longer on Thursday November 02, 2017 @10:03AM (#15610440)
I love the egotistical assumption that they have a bad Infosec policy and don't have VLANs based on basically one sentence.

Here is one: "They connected computers to their network" The assumed security risk are endless and 100% of companies do it!! Such idiots, to connect a computer to a network!

Re:People are keeping their cell phones a lot longer on Thursday November 02, 2017 @09:55AM (#15610380)
That sounds terrible.

That is a crazy amount of bandwidth usage to VPN out and then back into the the network through the same pipe is a waste. Not counting the licenses and even the ability to maintain that many connections at a given time. Going off of the use cases I have actually done.

It not hard to setup WPA2 Enterprise with assigned VLAN access, heck you can even assign it based on the device, meaning Joe signs in on his laptop and he gets internal access but when he signs in on his cellphone it goes straight out. Each connection is assigned based on need and checked by the IT department.

The OP doesn't even say they are given internal access just network access, which could be straight out to the internet. The majority of cellphones used in my company are VLAN straight to the internet but there are cases where tablets and cellphones need access to server and shares that they are assigned to a VLAN they are on.

Re:How can you program if you're blind? (2013) on Wednesday July 05, 2017 @10:48AM (#14702789)
" I use windows xp as my operating system"... WTH!!

"Sep 29 '08" ohhh LOL

hmm, that is the opposite of my experience. My mom has an original fitbit and me and my wife have the fitbit charge HRs. I actually thought when I read the title that it was due to lack of demand as everyone I know has one and sees no reason to get a newer one.
Yea, I asked an advanced Java question and got downvoted -20 with no answers. It was downvoted because it was something you actually had to have understanding of Java and the API. That has been my experience with stackoverflow. Ask a simple question get love. Ask something advance get downvoted and sometimes trolled. So sad people can't just move on if they don't know and answer and have to downvote to make them feel better.