21–30 of 114 posts
I highly recommend reading the actual audit[1]. There's a lot of good details in there, similar to the Senate report on the Equifax breach a few days ago. There were several problems: the inventory tracking issue was particularly enlightening: >system administrators did not consistently update the inventory system when they added devices to the network. Specifically, we found that 8 of 11 system administrators respon…
Assume that the physical networks are compromised, and have all privileged resources only accept connections over VPN. Is it perfect? No, but it makes further compromise harder. The assumption of no trust also means acknowledging that you need gate incoming connections.
Working at a large engineering organization, I have given up and now do all engineering work on a stand alone computer, with dongle licensed software. I feel bad about the piles of CDR I burn through to transfer files, but it’s the only solution to getting work done.
Wow. Try to opt out of their data tracking, an option they're required to add. "This may take up to a few minutes to process" They make you wait at this long ass loading screen while they "process" your request not to have cookies. Here's the outline for people who don't want to wait minutes to read an article. https://outline.com/TZSBv4
https://oig.nasa.gov/congressional/FINAL_written_statement_f...
Sadly, it doesn’t seem like things have changed.
Wow. Try to opt out of their data tracking, an option they're required to add. "This may take up to a few minutes to process" They make you wait at this long ass loading screen while they "process" your request not to have cookies. Here's the outline for people who don't want to wait minutes to read an article. https://outline.com/TZSBv4
Opting in or out must not be a condition for accessing content, so a popup that covers the page is problematic. Opting out should also be as simple as opting in, not a maze of options with progress spinners.
File a complaint folks.
And so the the cycle continues. Now we'll have hearings; "it was Republican budget cuts; we need a more funding."
I highly recommend reading the actual audit[1]. There's a lot of good details in there, similar to the Senate report on the Equifax breach a few days ago. There were several problems: the inventory tracking issue was particularly enlightening: >system administrators did not consistently update the inventory system when they added devices to the network. Specifically, we found that 8 of 11 system administrators respon…
In this case, you wouldn't allow a device to access any information on the network without a proper certificate. The public systems need to learn from private companies in this regard.
Earlier quoted context omitted.
I discussed this recently here on HN [0], the fake spinner is a dark-UI to 'punish' you for opting out. If you just accept the popup disappears immediately. [0] https://news.ycombinator.com/item?id=20131381
I don't think that's actually true. Rather, it's an architectural thing — because all these ad systems were designed without consent in mind, accepting is a no-op, whereas refusing consent requires an outbound request to set some sort of "do not track" flag somewhere (presumably as a cookie).
I highly recommend reading the actual audit[1]. There's a lot of good details in there, similar to the Senate report on the Equifax breach a few days ago. There were several problems: the inventory tracking issue was particularly enlightening: >system administrators did not consistently update the inventory system when they added devices to the network. Specifically, we found that 8 of 11 system administrators respon…
The printout I was handed on my first day had not been updated in several years. It basically contained a tracking ID, what building/room the device was supposedly located, and who it was assigned to.
I spent every day walking building to building, room to room, interviewing employees, trying to track down devices. I never finished updating the list simply because I was never able to track down over half the devices. Outside of a few secure areas I did not have access to, I pretty much turned the campus upside down looking for devices. I can only imagine where all those devices ended up.