141–150 of 170 posts
What sort of vetting does Microsoft do on drivers written by manufacturers that ship with Windows?
Traditionally they have done testing for WHQL certification. It may make sense for them to do analysis or reversing in order to raise the bar. Or maybe change the design of the NT kernel to isolate device drivers better.
Now the world will see Google & Facebook & Apple as security threats.
Earlier quoted context omitted.
Please don't post unsubstantive comments here, and certainly not nationalistic flamebait. We don't need yet another nationalistic flamewar. https://news.ycombinator.com/newsguidelines.html
I'm not sure that's fair. To me GP comes over as jingoistic nationalism, but it also seems to have a substantive basis - the idea that foreign nations should be ejected at all levels from a governments internal systems? I'd really like to ask "should other nations eject all USA companies products from their governmental systems too?" (because I'm really curious how an apparent ultra-nationalist sees that?), but you'v…
Sino bashing is apparently an acceptable form of racism in 2020. This is no different than the "jap bashing" of the 80s. What coercive things China does do, is mostly for internal stability, a few small border disputes with neighboring areas that were arguably at one point Chinese, and to maintain harmonious trade arrangements. It's a kitten compared to what the CIA has done internationally.
Doesn't matter, they have it on their personal phone. App security is so bad that you pretty much need to virtualize the phone and feed it fake sensor data. The whole idea of unrestricted network access is stupid.
> App security is so bad that you pretty much need to virtualize the phone and feed it fake sensor data. Yeah, this is really bizarre to me. I was trying to check on volume levels through walls in my apartment, so I wanted to find some random decibel measuring app and lock it down so I don't have to worry too much about trusting it. But somehow Apple's permission model, which provides a whole pile of privilege switch…
Earlier quoted context omitted.
A simple approach is to just ban personal phones while at work. You can forward your number to a work phone while you're on duty, you don't need to carry a personal device with you.
That is what all units in USSOCOM do. No personal cell phones, smart watches, etc allowed in the office. Guests have lock boxes outside main entrance to secure their phone. About once a week security folks wander through the offices looking for phones with some type of detector. God help the person who brought their phone in.
That's when you check the TOTP code on your phone, put it back on the stack of phones, and race as fast as you can back to your desk to enter the code before it expires.
Doesn't matter, they have it on their personal phone. App security is so bad that you pretty much need to virtualize the phone and feed it fake sensor data. The whole idea of unrestricted network access is stupid.
How would restricted network access help? If you permit a dodgy app to talk to only one remote endpoint, it can exfiltrate whatever it wants.
(Advertising.)
Earlier quoted context omitted.
Installing a firewall app and checking the connection log on my Android phone really spooked me. There's a ton of traffic in the background that shouldn't be there. It's absolutely crazy that Android doesn't have a first party firewall or the ability to disable internet access permission per app, but that would impact Google's ad revenue, so of course we can't have that.
I don't know if this is a feature of Android or of the alternative ROM I'm using, but I can disable network access on a per app basis. In my Android Pie based ROM, in Settings / Network & Internet / Data Usage / App data usage I can select any app and disable WiFi, Cellular data or both.
Earlier quoted context omitted.
wouldn't surprise me if the military makes you strip naked, put your clothes in a microwave, then put them back on before getting on the plane to the black site. Each and every time. Anything less than such ridiculous methods would be insecure. You can literally embed chips in the fabric of your clothing. https://www.rfidjournal.com/articles/view?11587
... Why would you not simply issue them new clothes instead of (potentially dangerously) microwaving theirs?
I'd assume they give them new clothes & microwave said new clothes. along with other precautions.