dstjean
Colonial Hack Can’t Be Just Another Wake-Up Call
Ultra-broadband internet is almost here
I Predict a Cyber Attack
Bend the Curve – Pandemic Response Simulator
Is a Coronavirus Baby Boom on Its Way? Just Wait 9 Months
Re:Major Windows flaw was reportedly discovered by the NSA
on Tuesday January 14, 2020 @12:09PM (#22046806)
"News of the security flaw comes the same day that Microsoft is ending support for Windows 7. The company has encouraged people to upgrade to Windows 10 to keep their PCs and laptops secure. "
Hummmmm...
Major Windows flaw was reportedly discovered by the NSA
Using Ground Relays with Starlink
Re:Banks deny compensation when hackers steal customers' money
on Monday October 21, 2019 @03:22PM (#21316159)
At what point do they say that? Are those your assumptions? The bank might have failed to provide proper controls to secure the account. As example, 2FA is not common for banks in Canada. If the client's computer was compromised, 2FA should have secured the access to the account.
Banks deny compensation when hackers steal customers' money
Google Chrome Security Exploit Must Be Seen to Be Believed
RBC first bank in Canada to launch a personalized, AI-powered budget solution
Ask HN: What Is Your Experience with PA-DSS and PCI Compliance?
I have an idea and was wondering if you've achieved PA-DSS and PCI compliance? How was your experience? Painful? How much did you end-up paying? Did you become compliant before going live? Any advice?Thank you
Re:Deep packet inspection is dead, and here's why (2017)
on Tuesday January 15, 2019 @11:37AM (#18912404)
IMO relying 100% on the end devices to protect themselves is too risky.
Layered security seems to work best.
Also I prefer to heavily monitor/secure two appliances/systems than heavily monitor thousands of end devices
Re:Deep packet inspection is dead, and here's why (2017)
on Tuesday January 15, 2019 @09:35AM (#18911335)
I don't think NOT performing packet inspection due to privacy concern is a good idea. (Good security controls should exist over its administration)
One reason why organizations use packet inspection is to protect its staffs, customers and vendors from malicious actors who could cause data breaches leading to huge privacy issues.
Privacy over Security? The right balance must be found
Re:Deep packet inspection is dead, and here's why (2017)
on Tuesday January 15, 2019 @09:26AM (#18911277)
In a corporate environment, managed devices can be configured to force the use of specific DNS settings. The same type of implementation (MITM) could be used to analyse the requests.
That being said, this is at the OS level. An app such as Firefox could still override those settings or provide their own implementation.
Holiday Hack Challenge 2018
Re:ForgJs – A lightweight object validator
on Monday December 03, 2018 @02:59PM (#18592335)
Any attributes for required/optional fields?
Re:Ask HN: Are advertisers stealing Christmas?
on Tuesday November 27, 2018 @10:52AM (#18543288)
Wondering if the way to go is in Incognito mode from a different IP. But then the moment I authenticate with Amazon for example, my profile (and associated data points [All IPs used, cookies, etc.]) could be used to target advertisement.
Ask HN: Are advertisers stealing Christmas?
I've started my Christmas shopping and a few years ago my partner wanted a VR headset. So I did some research and purchased one this year.Now my partner mentioned to me that VR headset advertisements are being shown and found that "odd". That is on a different device/profile in the house. Same IP though.I didn't mention anything. "I guess it's a popular gift for Christmas"How are you doing your...
Re:LastPass Outage
on Tuesday November 20, 2018 @01:05PM (#18496009)
Was wondering why I was seeing:
"An error occurred while logging into LastPass. Please check your Internet connection" That would explain it.
LastPass Outage
Microsoft Edge Remote Code Execution
Re:Ask HN: What is your best advice for a junior software developer?
on Wednesday October 03, 2018 @08:48AM (#18129631)
Make sure you don't stay in the same position for over 3-4 years. Make sure you get promoted or look elsewhere.
IMO: Being too comfortable in the same position is not good enough
Re:Found hooked up to my router
on Thursday September 27, 2018 @05:10PM (#18088716)
To name a few:
- ARP Poisoning
- DNS Poisoning
- LM Hashes gathering
- Packet Sniffing
- Packet Interception (and modification)
NewEgg cracked in breach, hosted card-stealing code within its own checkout
Re:Ask HN: Codebase at my work is a complete mess, what should I do?
on Wednesday August 22, 2018 @07:33PM (#17823201)
Are there tons of global variables?
UofA scientists develop memory that could exceed hard drive capacity 1000-fold
Re:Show HN: Hacker News job trends
on Friday July 06, 2018 @10:13AM (#17471508)
Good job.
Why did you prefer using the HTML format instead of HN API? https://github.com/HackerNews/API