11–20 of 51 posts
Earlier quoted context omitted.
Maybe a common user for chef automation and chef client runs ? https://www.chef.io/
Interesting, well I guess folks using it should be just as careful as the rest of us. Someone with a 116.90.81.14 ip was really interested in it. Username "bernard" is also a new one on me.
Looking at one of my servers that services an external address, I see about 100 IPs listed in the authlog file that are trying various passwords and such to break in. Its not even a main server (www, mail, dns, etc.). Of course, I use keys only for login, but it is a bit annoying. I guess I am getting quite a block list built. So, does the author expect me to report all these IPs? Who would I send them to? Is there a…
Many, if not most, crimes go unreported offline. Is it really a shock that the same might be true online? It’s not as though police are likely to find and return your stolen property from a mugging or burglary. Above all, policing needs “better systems for gathering data,” the report said. Oooooh. Well that was predictable. Stingrays and lobbying for cryptographic backdoors not enough to do the job hm?
Had a similar issue with a hacker that found a way around our billing systems. Ran up $90k of charges. He was in Montreal and we even had his ID. What're we gonna do, waste time trying to go after someone that'll claim it was our bug and he didn't know anything was wrong?
Earlier quoted context omitted.
Interesting, well I guess folks using it should be just as careful as the rest of us. Someone with a 116.90.81.14 ip was really interested in it. Username "bernard" is also a new one on me.
Lets make a big database of the popular usernames and passwords as of this moment. Has no one done this?
tech crimes are so much easier to commit than to solve, prevent, or punish that they represent a huge threat to the rule of law. in the West, crime hasn't had this kind of advantage over law enforcement since the Middle Ages. in particular, C and C++ could literally become the downfall of Western civilization.
Even C++ is miles ahead of the "legalese" that forms traditional laws. Being executable by the common person, it avoids one glaring violation of equal protection that modern legalese limps along in spite of - legalese is only interpretable by specialized lawyers, who still generally default to "ambiguous no".
The real problem driving this article is the legacy ambient authorities wanting to expand their role, insisting that the informal intentions behind the design of (and decision to run) the code should carry more weight than the code itself! One of the implications of the End to End principle is that messages on the network carry no "universal" denotational meaning, but are purely what the endpoints make of them. Ambient authority has little place in a connected post-jurisdictional world, and so we must resist its attempts to further invade where it is simply inappropriate.
Earlier quoted context omitted.
Interesting, well I guess folks using it should be just as careful as the rest of us. Someone with a 116.90.81.14 ip was really interested in it. Username "bernard" is also a new one on me.
Lets make a big database of the popular usernames and passwords as of this moment. Has no one done this?
tech crimes are so much easier to commit than to solve, prevent, or punish that they represent a huge threat to the rule of law. in the West, crime hasn't had this kind of advantage over law enforcement since the Middle Ages. in particular, C and C++ could literally become the downfall of Western civilization.
Actually, the situation is complete opposite. Code is formal, deterministically executable rules. That's a boon for the rule of law, as the vast majority of "crimes" can be prevented a priori , rather than chased down post facto. Even C++ is miles ahead of the "legalese" that forms traditional laws. Being executable by the common person, it avoids one glaring violation of equal protection that modern legalese limps a…
Just because I accidentally left my door unlocked today doesn't mean that entering my house, and taking all my stuff isn't burglary. You don't have to be a telepath to know that is wrong.
Under the 'code is law' doctrine, just because you could do something, you can do something. This is incompatible with anything resembling civilized society.
Society only functions because we respect the informal intentions of other people.
Looking at one of my servers that services an external address, I see about 100 IPs listed in the authlog file that are trying various passwords and such to break in. Its not even a main server (www, mail, dns, etc.). Of course, I use keys only for login, but it is a bit annoying. I guess I am getting quite a block list built. So, does the author expect me to report all these IPs? Who would I send them to? Is there a…
Would be nice if cloud providers automatically had a fence around your subnet with an ssh proxy that did this stuff already. Seems crazy that typically you open up ssh directly to everyone.
There actually is some security through obscurity, despite everyone loving to bandwagon otherwise.