As a counterpoint, Troy Hunt recently posted this: https://www.troyhunt.com/banks-arbitrary-password-restrictions-and-why-they-dont-matter/ An interesting quote from the post: Password Limits on Banks Don't Matter That very first tweet touched on the first reason why it doesn't matter: banks aggressively lock out accounts being brute forced. They have to because there's money at stake and once you have a …
Continue reading New comment on reddit
New comment on reddit
Here's the baseline SSL conf I use with Apache: https://antipaucity.com/2017/07/07/ssl-configuration-for-apache-2-4-on-centos-7-with-lets-encrypt/#.XYy9zyUpChY Here're a bunch of security tips for Apache: https://geekflare.com/10-best-practices-to-secure-and-harden-your-apache-web-server https://www.petefreitag.com/item/505.cfm https://www.techrepublic.com/article/how-to-secure-your-apache-2-server-in-four-steps https://help.dreamhost.com/hc/en-us/articles/226327268-The-most-important-steps-to-take-to-make-an-Apache-server-more-secure https://www.cisecurity.org/benchmark/apache_http_server https://www.tecmint.com/apache-security-tips And for IIS: https://calcomsoftware.com/hardening-iis-server-guide https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd450371(v=ws.10)?redirectedfrom=MSDN https://docs.microsoft.com/en-us/previous-versions/tn-archive/dd163531(v=technet.10)?redirectedfrom=MSDN https://techcommunity.microsoft.com/t5/Exchange-Team-Blog/Exchange-TLS-038-SSL-Best-Practices/ba-p/603798 https://www.cisecurity.org/benchmark/microsoft_iis https://www.upguard.com/articles/10-steps-for-improving-iis-security https://www.davidfroud.com/pci-going-beyond-the-standard-part-8-configuration-standards https://support.microsoft.com/en-us/help/324069/how-to-set-up-an-https-service-in-iis And, of course, there are guides from places like DISA: Apache 2.4: https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apache_Server_2-4_UNIX_STIG.zip IIS 8.5: https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_IIS_8-5_Server_V1R8_STIG.zip September 26, 2019 at …
Continue reading New comment on reddit
@danielpetisme I used to make this erroneous claim, too Then I realized: I indent *anyway*, so you’re *saving me time and characters* by just using indentation to mark blocks
I used to make this erroneous claim, too Then I realized: I indent *anyway*, so you're *saving me time and characters* by just using indentation to mark blocks — Warren Myers ?? (@warrenmyers) September 26, 2019 from Twitter https://twitter.com/warrenmyers September 26, 2019 at 09:47AM via IFTTT
New comment on reddit
Headline could equally read, "Mostly no one actually uses DNSSEC" … and be about as helpful September 26, 2019 at 08:57AM via reddit https://www.reddit.com/r/security/comments/d9gtn4/study_indicates_most_large_banking_institutions/f1hxnzl?utm_source=ifttt
New comment on reddit
Not sure as to why u/moasredbrook wouldn't, but the two biggies for me are: intentionally blocking traffic to their customers' sites just because you're on a VPN or proxy they do nothing to even try to prevent fraudlent account creation and DNS hijacking September 26, 2019 at 08:58AM via reddit https://www.reddit.com/r/security/comments/d9ccib/introducing_warp_by_cloudflare/f1hxw7e?utm_source=ifttt
New comment on reddit
People still multiboot? I thought that had pretty much gone away 10+ years ago TIL ??♂️ ? The "correct" answer is one of the following: fully separate boot devices (eg run each OS off its own encrypted USB drive) use VMs (running, of course, in a parent OS (whether full or hosted hypervisor) that's also …
Continue reading New comment on reddit
New comment on reddit
Better yet: Created forensic system device evidence images for potential malicious activity investigations September 26, 2019 at 09:16AM via reddit https://www.reddit.com/r/security/comments/d97x6y/need_help_creating_a_resume_bullet_point/f1i053a?utm_source=ifttt
On Chinese “Spy Trains” https://t.co/2QxGRLQ62Y
On Chinese "Spy Trains" https://t.co/2QxGRLQ62Y — Warren Myers ?? (@warrenmyers) September 26, 2019 from Twitter https://twitter.com/warrenmyers September 26, 2019 at 07:28AM via IFTTT
“A single #WSE uses 15 kilowatts of power. For comparison, a recent survey by #AFCOM found users were averaging 7.3 kw for an entire rack, which can hold as many as 40 servers. #Hyperscale providers average about 10-12kw/rack.” https://t.co/Mzfl6QIdLG https://t.co/sX4FKgEblv
“A single #WSE uses 15 kilowatts of power. For comparison, a recent survey by #AFCOM found users were averaging 7.3 kw for an entire rack, which can hold as many as 40 servers. #Hyperscale providers average about 10-12kw/rack.” https://t.co/Mzfl6QIdLG pic.twitter.com/sX4FKgEblv — Warren Myers ?? (@warrenmyers) September 26, 2019 from Twitter https://twitter.com/warrenmyers September 26, 2019 at …
Continue reading “A single #WSE uses 15 kilowatts of power. For comparison, a recent survey by #AFCOM found users were averaging 7.3 kw for an entire rack, which can hold as many as 40 servers. #Hyperscale providers average about 10-12kw/rack.” https://t.co/Mzfl6QIdLG https://t.co/sX4FKgEblv
@agoX Mongers As in ”tool mongers”
Mongers As in ”tool mongers” — Warren Myers ?? (@warrenmyers) September 25, 2019 from Twitter https://twitter.com/warrenmyers September 25, 2019 at 02:03PM via IFTTT
@Moz_zoM @Dadsaysjokes In your opinon ;)
In your opinon 😉 — Warren Myers ?? (@warrenmyers) September 25, 2019 from Twitter https://twitter.com/warrenmyers September 25, 2019 at 12:04PM via IFTTT
@Moz_zoM @Dadsaysjokes LOL You still can’t take the joke Also: we don’t have a Prime Minister in my country
LOL You still can't take the joke Also: we don't have a Prime Minister in my country — Warren Myers ?? (@warrenmyers) September 25, 2019 from Twitter https://twitter.com/warrenmyers September 25, 2019 at 12:00PM via IFTTT
@artcarden @IndependentInst Never understood how people are *surprised* when a hurricane is coming their way …when they live in a hurricane zone! Just like people in colder climes keep supplies handy in the event of power outages in the winter Is it *that* hard to be even slightly prepared?
Never understood how people are *surprised* when a hurricane is coming their way …when they live in a hurricane zone! Just like people in colder climes keep supplies handy in the event of power outages in the winter Is it *that* hard to be even slightly prepared? — Warren Myers ?? (@warrenmyers) September 25, 2019 …
Continue reading @artcarden @IndependentInst Never understood how people are *surprised* when a hurricane is coming their way …when they live in a hurricane zone! Just like people in colder climes keep supplies handy in the event of power outages in the winter Is it *that* hard to be even slightly prepared?
@Moz_zoM @Dadsaysjokes Yes – you not taking a joke gets tiring :)
Yes – you not taking a joke gets tiring 🙂 — Warren Myers ?? (@warrenmyers) September 25, 2019 from Twitter https://twitter.com/warrenmyers September 25, 2019 at 11:56AM via IFTTT
@Moz_zoM @Dadsaysjokes also, fwiw, your urbandictionary link shows “whino” as being a misspelling of “wino” :) #jussayin #canttakeajoke
also, fwiw, your urbandictionary link shows "whino" as being a misspelling of "wino" 🙂#jussayin#canttakeajoke — Warren Myers ?? (@warrenmyers) September 25, 2019 from Twitter https://twitter.com/warrenmyers September 25, 2019 at 11:55AM via IFTTT
@Moz_zoM @Dadsaysjokes Apparently you missed the smileys Smh
Apparently you missed the smileys Smh — Warren Myers ?? (@warrenmyers) September 25, 2019 from Twitter https://twitter.com/warrenmyers September 25, 2019 at 11:52AM via IFTTT
@Moz_zoM @Dadsaysjokes Two can play that game: https://t.co/jTYRuaIyC7
Two can play that game: https://t.co/jTYRuaIyC7 — Warren Myers ?? (@warrenmyers) September 25, 2019 from Twitter https://twitter.com/warrenmyers September 25, 2019 at 11:45AM via IFTTT
“Earlier this month, Norwegian defense giant #Kongsberg announced it had mounted and demonstrated a remote weapon launcher on the #THeMIS, an #Estonian-made ground 3robot.” https://t.co/11aV2IhrEJ #tanklet #autonomouswarfare https://t.co/PSZoqRbysO
“Earlier this month, Norwegian defense giant #Kongsberg announced it had mounted and demonstrated a remote weapon launcher on the #THeMIS, an #Estonian-made ground 3robot.” https://t.co/11aV2IhrEJ #tanklet #autonomouswarfare pic.twitter.com/PSZoqRbysO — Warren Myers ?? (@warrenmyers) September 25, 2019 from Twitter https://twitter.com/warrenmyers September 25, 2019 at 11:23AM via IFTTT
What the First Amendment really grants is the power of society to maintain its own standards over those of government. https://t.co/G2N7m1CBTo https://t.co/pctPHOw3Cc
What the First Amendment really grants is the power of society to maintain its own standards over those of government.https://t.co/G2N7m1CBTo pic.twitter.com/pctPHOw3Cc — Warren Myers ?? (@warrenmyers) September 25, 2019 from Twitter https://twitter.com/warrenmyers September 25, 2019 at 11:14AM via IFTTT
“More than a week has passed since the attacks on Aramco facilities in Abqaiq and Khurais.” https://t.co/wNbaGIyopT https://t.co/wAU0tzWa4S
“More than a week has passed since the attacks on Aramco facilities in Abqaiq and Khurais.” https://t.co/wNbaGIyopT pic.twitter.com/wAU0tzWa4S — Warren Myers ?? (@warrenmyers) September 25, 2019 from Twitter https://twitter.com/warrenmyers September 25, 2019 at 11:10AM via IFTTT
@Dadsaysjokes And here I was expecting an epic showdown between Philadelphia, Denver, and San Francisco
And here I was expecting an epic showdown between Philadelphia, Denver, and San Francisco — Warren Myers ?? (@warrenmyers) September 25, 2019 from Twitter https://twitter.com/warrenmyers September 25, 2019 at 10:57AM via IFTTT
@Moz_zoM @Dadsaysjokes I know .. so was my reply ?
I know .. so was my reply ? — Warren Myers ?? (@warrenmyers) September 25, 2019 from Twitter https://twitter.com/warrenmyers September 25, 2019 at 10:56AM via IFTTT
@PaychexService sent DM
sent DM — Warren Myers ?? (@warrenmyers) September 25, 2019 from Twitter https://twitter.com/warrenmyers September 25, 2019 at 10:40AM via IFTTT
@CareFirst left contact request
left contact request — Warren Myers ?? (@warrenmyers) September 25, 2019 from Twitter https://twitter.com/warrenmyers September 25, 2019 at 10:39AM via IFTTT
@DrOakley1689 butbutbut… #CLIMATECHANGE!!!!!! #PEOPLEBAD!!!!!!! (unless you’re one of the liberal-socialist-communist “progressives”)
butbutbut… #CLIMATECHANGE!!!!!!#PEOPLEBAD!!!!!!! (unless you're one of the liberal-socialist-communist "progressives") — Warren Myers ?? (@warrenmyers) September 25, 2019 from Twitter https://twitter.com/warrenmyers September 25, 2019 at 10:38AM via IFTTT