Viewing profile — jlkinsel

While it is great, Wazuh is not close to a static analyzer.

Actually, the www was working. It's a cname to tp.47cf2c8c9-frontier.amazon.com, which should have been a cname to d3ag4hukkh62yn.cloudfront.net, but that record was broken for abo…

I think that was a message from the rebel base?

sudo, ssh certs, egress firewalling. Congrats - you've covered about 4 pages from the NSA's 200 page hardening benchmark. Off to a good start! http://www.nsa.gov/ia/mitigation_guid…

I've seen more compromised boxes than one can shake a stick at. There's all sorts of reasons that blocking egress is a great idea. Compromises are usually automated bots, and no, t…

Time to write a little VBScript to port scan me some Dropbox servers...

Soo they didn't forsee how teh hackers would compromise accounts without 2FA...but passwords are dead. Well, I for one, am sold!

To go a little further - at a glance, it's not clear if they've been fined yet or not, but either way there's soft costs to all of this - being in the news in a negative light, som…

Last year when KC shot themselves in the face, they were running trading algos that hadn't been well tested. When dropped into production, things blew up fairly quickly. I probably…

Stanford's a little more than a college. There have been at least 5 HIPAA breaches, with at least 70k people's information compromised. http://www.healthcareitnews.com/news/stanfor…

man how'd I forget hb gary...that's my other favorite

Let's see... TJ Max, UBS, Knight Capital, Heartland Payment Systems, Visa, Sony (already mentioned, but it's my fave), Stanford, Countless other hospitals, e-commerce vendors, bank…

I'm a little surprised this is on HN? To me this is the equivalent of a blog post about using %d with printf. Not complaining, just a little surprised something so novice would get…

A problem for security geeks is they frequently forget about 2 things: 1) the balance between usability and security, and 2) The risk acceptance/appetite of the person for the secu…

In theory if your'e going to the trouble of having different OSes on the two systems, you'll have separate admin staff, as well...

Yeah...this is nice, but really who's gonna implement it? Only folks with a lot of resources and need to protect something more serious than passwords on a social network. Or organ…

I say the post is nicely done, and note that I'm happy he took security into account, and people downvote. WTF???

Hmm...that seems to have potential, but it requires custom integration and users to use your app. Is there an open protocol for this? Looks like you're doing something similar to t…

Nicely done. I was worried when I saw the headline that he wasn't going to take security into account...

I use a safari/firefox mix, all that's in that db for me is a short list of things I don't care about...