Viewing profile — jamesmotherway

I've used favicons (along with analytics IDs) to identify related malicious sites. You can also apply this to detect brand abuse and phishing pages.

See the "Data categories and encryption" section: "The table below provides more detail on how iCloud protects your data when using standard data protection or Advanced Data Protec…

Sorry, I overlooked part of your post earlier - I'm tired. As I previously alluded to, I don't use passkeys due to concerns about their implementation. Whether passkeys are better …

Hardware keys and passkeys are better because they can't be phished. In the case of hardware keys, one should register multiple to prevent lockout. Most implementations of passkeys…

If the vault requires a hardware key and master password to access the encrypted password and token, would you still describe it as single-factor authentication?

China-nexus threat actors tend to be focused on espionage, including intellectual property theft. "Prepositioning" is a more recent observation, but it doesn't mean a war is inevit…

Is your system configured to share analytics and diagnostics? I disable both, and when a crash occurs, I receive a dialog with an "ignore" option.

Bad actors frequently use BuyVM's services, also known as FranTech and Ponynet. Their popularity with Tor operators probably doesn't help how their network traffic is perceived eit…

https://archive.is/NKPrR

I'm assuming by "significant" you mean an attack on critical infrastructure. That's a strategic capability that very likely requires multiple attack chains, not a single exploit. F…

The X230 is still relevant for those who want a ThinkPad that supports Libreboot (an alternative firmware without proprietary components). I personally found this demonstration int…

I'm inclined to believe it. If someone managed to prove Apple's lying about it, there would be serious reputational (and other) risks to their business. I also can't imagine how th…

"All Apple silicon-based Mac notebooks and Intel-based Mac notebooks with the Apple T2 Security Chip feature a hardware disconnect that disables the microphone whenever the lid is …

Threat actors don't create malware to impress people; they do it to accomplish their goals. Apparently, this sample was sufficient for them. Security companies attribute activity b…

The NSA publishes excellent cybersecurity resources: https://www.nsa.gov/press-room/cybersecurity-advisories-guid... I've highlighted advisories that may give you some perspective,…

I understand where you're coming from, but Apple Intelligence is labelled as a beta feature.

The alternative in many cases would be to install MDM software on one's personal device, which seems like the worse option to me.

Banks use various other services such as Early Warning. Still, it's absurd the lengths we need to go to for any level of assurance against fraud.

Thanks for your feedback. I posted this because I've seen many people stop their analysis when they find a site is on Cloudflare. Were you able to solve the challenge at the end?

Satiety is precisely it, and I would not be so quick to minimize its effect. Reasoning by analogy, most would accept that some people are better suited to extended release medicati…

It's frightening to think about the implications of this when generalized toward mainstream topics.

It's certainly interesting, but he's not a hero.