Viewing profile — rm-rf

The whois for the domain is accurate.

And just for kicks, they accidentally open up your files to anyone who knows your e-mail address.

And - To (hopefully) install a shim that lets them install software that lets their help desk help their customer more effectively. If I were trying to support millions of 'ordinar…

Or - as I picked up from some long forgotten blog post: If you need Oracle, you'll know it. If you don't know that you need Oracle, you don't need Oracle. I run MySQL, Oracle SQL S…

Presumably they have. But given the number of times Safari has been remotely exploitable in the past, that's not necessarily reassuring.

How is this different than Adobe Reader, where the ability to execute code within a document reading application has resulted in world wide exploits of operating systems? If my doc…

So my ebooks can now contain executable root kits. Cool.

Agreed - I certainly don't see anything that I'd call 'innovation', and there is nothing on any open source desktop that would send me off to my friends and relatives houses to swi…

How does a retailer using Square manage PCI compliance? Are retailers using Square automatically non-compliant? My understanding is that PCI Council has not approved mobile applica…

"* Change the SSH port" "Why are you doing this? What will you achieve by it?" Changing the port does not improve security. It does, however: - dramatically reduce the noise associ…

"Are they also counting the extra downtime" With Windows 7, there should be no more (or less) downtime than any other operating system. "anti-malware packages and so on?" Anti-viru…

"Mainly because the enterprise is guaranteed to buy at least a few hundred copies." Or a few thousand, or a few hundred thousand.

One factor likely at play here is the low cost of licensing MS products under the enterprise/volume licensing agreements. Where I'm at it's costing well under $100/person/year to l…

I've seen single line changes cause data loss, corruption, system outages, remote root exploits... I'm not sure that the number of lines makes the change more or less risky.

I wouldn't. Replication yes. A logical backup? no.

Good paper. I've been using hybrid hardware/software load balancers since 2004, and over time I came to different conclusions than the author on load balancing algorithms, SSL offl…

Because of it's market share? Perhaps.

I haven't seen any evidence of that. Do you have some data that you can share? One thing that I have noticed is that Mozilla tends to push Firefox fixes out as soon as they are rea…

And install all it's vulnerabilities on your Mac?

And then Firefox will announce a zero-day. What will you have gained?

The more interesting question: Is IE8 significantly worse than the alternatives? I think not. All major browsers on all common operating systems have exploitable vulnerabilities of…

A globally routable v6 network isn't too hard to do at home with tunnelbroker.net and similar services. A Dlink DIR-825 has enough v6 support to hold up it's end of the tunnel and …

And with that kind of money, they can finally afford to implement secure software development, code review, fuzzing, & vulnerability testing. We'll all be better off when they do.