Cyber

@Cyber@feddit.uk

• ⁨Comment⁩ on ⁨Supply chain attack hits npm package with 45,000 weekly downloads⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  Wow.

  I never knew wordwrap was a vulnerability scanner until now 🤭

• ⁨Comment⁩ on ⁨Nvidia RTX 5090 can crack an 8-digit passcode in just 3 hours — password cracking benchmarks show tremendous performance⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  Yeah, I tried cracking my own pass_phrase_ once… it was doing well until it got to (I think) digit #9 and showed it would take another year…

• ⁨Comment⁩ on ⁨DOGE software engineer’s computer infected by info-stealing malware⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  So… breaking this down…his work laptop has malware on and the gov IT system isn’t finding it… for ~2 years…?!

• ⁨Comment⁩ on ⁨Off-Topic Friday⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  OT…

  Does anyone know how high a cast iron firepit has to be above black limestone patio slabs to ensure they don’t crack from the heat?

• ⁨Comment⁩ on ⁨Off-Topic Friday⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  Well, I disagree <folds arms across chest>

  It works fine, it’s just that there’s layers of bugs on layers of bugs, right down to the silicon.

  If we could just stop innovating new stuff for a while and innovate bug fixing, then just think how stable everything would be, and then there wouldn’t be any logic gaps and then there wouldn’t be any security gaps and then we wouldn’t need… cyber… security… consultants… hmmm… ok… carry on.

• ⁨Comment⁩ on ⁨What are You Working on Wednesday⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  Might be helping a contractor to cut down some willow trees that have gotten out of hand.

  If that doesn’t happen, then frantically pulling together a list of cyber security maintenance tasks for a large client, that I’m a few weeks late on.

  So… backups… er… check the AV… er… firewalls… that’s a good start 😉

• ⁨Comment⁩ on ⁨What are your methods to harden *nix servers?⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  Thanks for the links, I’ll take a look as I’ve never actually played with port knocking.

• ⁨Comment⁩ on ⁨What are your methods to harden *nix servers?⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  Is this for internal facing servers? Not much more than CIS and the usual Best Practices (no root for SSH, etc)

  For a DMZ node, minimal software (ie Arch) and automated defenses like fail2ban, key authentication, etc…

  Firewalls with Geo-IP blocking also help, but that’s not technically what you’re asking for.

• ⁨Comment⁩ on ⁨What are your methods to harden *nix servers?⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  Would you use that on internal LAN connections or only external internet facing connections? I’m not aware (not checked) if any firewalls support it… not sure why?

• ⁨Comment⁩ on ⁨ActiveX blocked by default in Microsoft 365 because remote code execution is bad, OK?⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Good god, is ActveX still alive?

• ⁨Comment⁩ on ⁨4chan Is Down Following What Looks to Be a Major Hack Spurred By Meme War⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  I saw a bird on my lawn today…

• ⁨Comment⁩ on ⁨People think onlyfans is weird⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  Thank you. I went quite light headed laughing about your statement.

• ⁨Comment⁩ on ⁨Millions of smart meters will fail when 2G and 3G turns off⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  I presume the physical device just isn’t capable (like an old phone)

  The SIM doesn’t provide the 3G/4G/5G ability, it just enables it, so swapping the SIM wouldn’t help… unless another provider was holding back the upgrade for longer…?

• ⁨Comment⁩ on ⁨Millions of smart meters will fail when 2G and 3G turns off⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  Because the physical location is not suitable - a 60s house with the distribution units (and old Eco7 termination for night-storage heaters) are right next to the current meter.

  Oh, and it’s in the kitchen, underneath the bathroom… right underneath the bath!

• ⁨Comment⁩ on ⁨Millions of smart meters will fail when 2G and 3G turns off⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  The UK 3G network switch-off: what you need to know

  Timescales vary by provider, but yep.

  I’m still happy with my un-smart meter (which would require an entire house rewire to make a smart meter useful - so much for “free”)

• ⁨Comment⁩ on ⁨Where do you start with Brian Eno?⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  Oh wow… you’ve just picked 2 of my favourite artists & albums. 🙂

• ⁨Comment⁩ on ⁨New North Sea oil and gas licences will send ‘wrecking ball’ through climate commitments⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  Considering that a LOT of gas in the UK came here by boat from the middle east, then, yes, this is actually a good thing.

  Don’t get me wrong, we need to get to NetZero, but the plastic parts on your electric car are made from oil…

• ⁨Comment⁩ on ⁨‘Hands-off, eyes on’: Ford deploys 'hands-free' driving in cars on UK motorways⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  As long as the car can determine that the driver’s eyes are open because they’re paying attention to the road, not watching a film on their phone, perched on the dash…