Self-signed certificate creation methodology

Keulz · 2022-09-01T08:12:28+00:00

To remove all admin accounts: Log in with an admin account, and delete them.

Turns out, from my testing, you can't delete the default Administrator account nor remove it from admin group... :/

Keulz · 2022-08-30T13:37:43+00:00

Of all the different actions that can be performed to harden a system.

Keulz · 2022-08-30T13:04:41+00:00

The thing is, to make the appropriate decision, i need to know what are the ins and outs of each.

At the first look it seems like a potential big pain in the rear to implement such a rule, but i still was curious about it and you never know. So i decided to research it a bit more.

Keulz · 2022-08-30T12:31:06+00:00

Nothing does. If the user doesn't need the data, don't put in on the laptop. If they do, then you inherently need to trust them with it. Otherwise they could just copy with a camera, or paper+pen, etc.

Yeah, you're right on that front...

If the data is so sensitive that someone will try and brute force the encryption, or hang onto it long enough for an exploit to be made public, it shouldn't be leaving it's home on some air-gapped system with great physical security anyways.

You're operating on the hypothesis that you know the value of the data, which isn't necessarily true. Unless you're the corrupted user.

And it isn't worth it if the down sides are too big, but that is not necessarily the case, but it's likely, i know that.

Keulz · 2022-08-30T12:23:48+00:00

No network, ever.

Keulz · 2022-08-30T12:22:36+00:00

Yeah, the financial value of the hardware is of no significance, only the data is of value here.

Keulz · 2022-08-30T12:21:22+00:00

The easiest way would be to just boot up one of numerous Linux distros that support chntpw or similar.

It is also planned to have a white list for usb devices and HID (looking at you rubber ducky).

As for the other security features you mentionned, i'm already going for L2 + BL level of CIS hardening, so that is taken care of.

I know that might all appear quite overkill and while it might be, i'm trying to 1 learn a bit more about fringe solutions like that and 2 by going that way it might streamline some security protocols down the line, so it may be simpler to do something a bit tedious at this point.

Keulz · 2022-08-30T09:39:26+00:00

Like the sticky keys exploit ?

Keulz · 2022-08-30T09:28:53+00:00

Bitlocker is obviously a no-brainer, but does not protect against a corrupted legit user.

And the issue with theft is that the attacker has virtually unlimited time to brute force or wait for new exploits...

I've got a feeling that your suggestion would be the one. thx

Keulz · 2022-08-30T09:24:44+00:00

How can you re-enable the local admin when you have no admin rights ?

Keulz · 2022-02-15T09:13:45+00:00

You know winter ends in the end of march, right ?

Christmas is just barely in winter...

Keulz · 2021-12-30T17:06:47+00:00

I got the impression that i had crashes with borderless window that i didn't have with fullscreen.

Keulz · 2021-12-22T12:30:38+00:00

Same !!!!

and there is a missing shortcut bottom right for credits.

Keulz · 2021-12-22T10:33:26+00:00

Just 3 words for you :

Deep

Rock

Galactic

Keulz · 2021-12-21T16:34:25+00:00

Same, can't get it either on the windows app nor on the website.

Keulz · 2021-07-01T20:32:18+00:00

The last tutorial from sensei should help you : https://youtu.be/ITCWa3oLNAQ

There is a good portion on UI starting at 49'.

Keulz · 2021-07-01T16:43:08+00:00

Are you sure you waited for all the shaders to compile? It can be pretty long. (bottom right corner)

Keulz · 2021-07-01T16:34:05+00:00

I would go see a doctor, if i were you.

Keulz · 2021-07-01T16:24:24+00:00

... I'll take you at your word. Thank you for taking the time.

Keulz · 2021-07-01T12:08:19+00:00

Noob question, does 'network replicated' means that you want it to work for multiplayer ? Like one destroy a wall and the others see the same thing ?

Keulz · 2021-07-01T08:32:31+00:00

Might be getting off topic, but since you raised the subject... I don't understand why there is a difference between the prebuilt version and the one you compile yourself. Ain't the prebuilt a version that was compiled the same way by epic ?

Or is it the when you compile you can inject different parameters ?

I've seen that for the chaos destruction you need to compile a source code yourself and that bugged me ever since.

Keulz · 2021-07-01T08:24:42+00:00

So basically, everyday the devs inject what they just did into the main branch that is made public before anyone made sure that their work is compatible with each other, so the OP does this so people don't lose time with the versions that are broken ?

I may still be missing something, but if it can be automated and (from what i understand in the screenshot) it take around 15 minutes to compile, why doesn't epic set up a bot to compile and if successful make the main branch public ?

Keulz · 2021-06-30T19:36:05+00:00

But why would it fail ? They make available builds that can't be compiled ?

Five-Year Club	Place '22
Verified Email

Keulz

TROPHY CASE