101–110 of 136 posts
Earlier quoted context omitted.
Wow. I’ve never seen this class of ISP censorship. Is this some sort of government mandated system or has Vodaphone taken it upon themselves to do this?
The UK government told ISPs to put the filtering in place voluntarily, or else the government would make a law requiring it. All of the major ISPs and mobile networks now do it on a voluntary basis.
Earlier quoted context omitted.
>(I don’t need tips to get around this or anything, I can just connect to another network or use a VPN) A better solution would be to tell Vodafone to switch off the censorship on your service.
The best solution would be the remove whatever stupid law allowed for that kind of censorship in the first place. As a bonus, if the UK puts up a better fight against this stuff it'll make it harder for it spread. Any nation where people have a vote should be strongly rejecting that crap.
People who delete system binaries due to whacky CVEs deserve a broken system. I don't even know who else to blame for this.
> I don't even know who else to blame for this. The people who told them that deleting system binaries would fix their problems? > I have been pointed to responses on the Microsoft site answers.microsoft.com done by “helpful volunteers” that specifically recommend removing the curl.exe executable as a fix. Don't trust strangers on the internet with advice you don't understand the implications of. Even if they are sin…
If you are responsible for the security posture and compliance in your organization, reading and acting on security assessments, and yet you do random changes based on random comments on forums, you deserve the blame.
I don't think we're not talking about individual end-users here. Those do not scan their systems for CVEs and do not have a requirement to get to 0 alerts.
Earlier quoted context omitted.
> "You can't just disable this 'feature' from Vodafone? I'm in the UK and my ISP doesn't do this." Yes, you can disable it quite easily. Usually by entering a credit card number in their app or website to prove you're 18, or alternatively by contacting their customer service chat. But of course, only pervs who want to access porn would do that, right? In my experience it's a good idea to disable it regardless, it as…
> But of course, only pervs who want to access porn would do that, right? No? Why would you say this? I disabled this back with my old carrier and it was pretty painless - I don't recall there being any stigma attatched to turning off the filters. I've since moved carriers and I don't remember having to disable filters - maybe I did or maybe something about signing up turned it off?
Painless based on provider, otherwise what described above is a pain.
Earlier quoted context omitted.
> I don't even know who else to blame for this. The people who told them that deleting system binaries would fix their problems? > I have been pointed to responses on the Microsoft site answers.microsoft.com done by “helpful volunteers” that specifically recommend removing the curl.exe executable as a fix. Don't trust strangers on the internet with advice you don't understand the implications of. Even if they are sin…
> The people who told them that deleting system binaries would fix their problems? If you are responsible for the security posture and compliance in your organization, reading and acting on security assessments, and yet you do random changes based on random comments on forums, you deserve the blame. I don't think we're not talking about individual end-users here. Those do not scan their systems for CVEs and do not ha…
Are you sure about that? From TFA:
> Lots of Windows users everywhere runs security scanners on their systems with regular intervals in order to verify that their systems are fine. At some point after December 21, 2022, some of these scanners started to detect installations of curl that included the above mentioned CVE. Nessus apparently started this on February 23.
> This is not helpful.
> Lots of Windows users everywhere then started to panic when these security applications warned them about their vulnerable curl.exe.
That sounded like it included individual end-users to me.
Anectodally, I know a few Windows users who don't trust Microsoft to do security well, but can't bring themselves to move off Windows for whatever reason, so run 3rd party AV and security tools to help protect themselves.
Earlier quoted context omitted.
> I don't even know who else to blame for this. The people who told them that deleting system binaries would fix their problems? > I have been pointed to responses on the Microsoft site answers.microsoft.com done by “helpful volunteers” that specifically recommend removing the curl.exe executable as a fix. Don't trust strangers on the internet with advice you don't understand the implications of. Even if they are sin…
> The people who told them that deleting system binaries would fix their problems? If you are responsible for the security posture and compliance in your organization, reading and acting on security assessments, and yet you do random changes based on random comments on forums, you deserve the blame. I don't think we're not talking about individual end-users here. Those do not scan their systems for CVEs and do not ha…
It's not as easy. Of course experienced sysadmins know it's bullshit. The problem is that cybersecurity insurance policies require "immediate action" on alerts and no one, even assuming a competent CTO, wants to be stuck with the bill should a security incident arise and the insurance say "audit says no of your machines had mitigated issue xyz, claim denied". Deleting a flagged binary is evidence of mitigation.
The amount of utter bullshit, not to mention the literal spyware that is insurance-compliant antivirus solutions, that insurances force clients to comply with is insane.
The core problem is that insurances don't have the time to actually do deep dives to check if their clients have decent or no IT security. Hell, I'd wager everyone here knows of "that one server that never got updates, was in no inventory or whatever, and once the last disk failed suddenly everything else came crashing down". And so, insurances go with a 12 pound hammer to which everything is a nail, as it is the best way for them to be able to underwrite policies with the insane amount of coverage that GDPR and friends expose the clients to.
Earlier quoted context omitted.
You can't just disable this 'feature' from Vodafone? I'm in the UK and my ISP doesn't do this. I'm not sure why you would want your ISP interfering with your traffic like this. To me, it seems like a dealbreaker.
> "You can't just disable this 'feature' from Vodafone? I'm in the UK and my ISP doesn't do this." Yes, you can disable it quite easily. Usually by entering a credit card number in their app or website to prove you're 18, or alternatively by contacting their customer service chat. But of course, only pervs who want to access porn would do that, right? In my experience it's a good idea to disable it regardless, it as…
Earlier quoted context omitted.
I noticed that "curl" in PowerShell is an alias, so you would have to deliberately say "curl.exe" to get System32\curl.exe C:\> alias curl CommandType Name Version Source ----------- ---- ------- ------ Alias curl -> Invoke-WebRequest
That's not the case in the latest versions of powershell.