Viewing profile — abritishguy

*she

It's a very good question. The stand-in system itself has been built to have basically no external dependencies itself. So, the question you are really asking is "to what extent ar…

Personal accountability only applies to execs and is already a thing in financial services in the UK post financial crisis.

That's correct.

Just in case it is relevant for anyone here this is what our security team have established thus far: - Can be mitigated by enabling the root user with a strong password - Can be d…

If you have `osquery` deployed to your fleet you can detect compromise with this query: SELECT * FROM plist WHERE path = "/private/var/db/dslocal/nodes/Default/users/root.plist" AN…

Is there any way to store state?

I use ligatures in atom and they are 100% aware of context. I disable them in contexts where they don't make sense e.g comments and I disable them on the line the cursor is on. I'v…

But if you aren't paying then they must be making money elsewhere.

Wirecard are the issuing bank but not the card processor.

The illusion of knowledge about crypto is very dangerous. People get this stuff wrong all the time and introducing more examples with really bad mistakes will only make the situati…

Latency from my London flat: 8.8.8.8 ~4ms 80.80.80.80 ~95ms

Google has one repository, not one monolithic codebase.

Kinesis is very poor

In general, yes. But I'd consider posting an anonymised email demonstrating such incompetence to be whistleblowing.

Name and shame, this auditor is actively damaging security and should be shut down.

OAuth is a framework not a protocol. The security it provides can vary greatly between implementations. Fosite (which is what this is based on) is a very good implementation from a…

Maybe you should read? The secure enclave is completely separate to TrustZone on an iPhone and has nothing to do with Qualcomm.

I think this shows a fundamental difference between Amazon (AWS) and Google Cloud. AWSs offerings seem fairly vanilla and boring. Google are offering more and more really useful st…

When I read the title I thought this would be a toolkit for writing databases. A lot of the work involved in writing a database is systems stuff such as being sure that a commit lo…

Not everyone has a fibre connection. I get 250KB/s at home.

2-factor authentication does not protect against that. The victim does not know they are being MITMd and enters the 2FA code.

The aim is therefore to remove the reliance on it being genuine. If you don't have passwords then there is no passwords to steal.