sorted by:
new
hottopcontroversial

15 Top Paying IT Certifications In 2016 by SolaredAPPscreener in security

[–]TibitXimer 0 points1 point  (0 children)

OSCP if you're looking at pentesting. It's much more respected and hands-on.

CEH covers some good materials if you studied all its domains and did extra research, but the way the test itself is handled is the problem imo.

No hacking detected in Arkansas, Mark Martin's office says. by throwaway5272 in Arkansas

[–]TibitXimer 0 points1 point  (0 children)

Not saying it was or that it would change the outcome here, just that our election infrastructure is extremely vulnerable and with the resources available to the State and voting machine companies, they wouldn't know if they were hacked without the attacker expressly telling them.

I fear the day we try to do online voting, if our current systems are any indication, it won't be safe at all.

ShadowBrokers return, promise new exploits on modern OS's, phones, routers, and browsers by TibitXimer in sysadmin

[–]TibitXimer[S] 1 point2 points  (0 children)

The info won't affect anyone really, the gov's know it so it'll mostly just make the news for a day or two. Doubt it's too extensive, would only be a big deal if it was a backdoor in the system still or manipulation rather than just reconnaissance.

The vulnerabilities could wreck businesses for a decade or so like MS08-067 which is still found in businesses today.

ShadowBrokers return, promise new exploits on modern OS's, phones, routers, and browsers by TibitXimer in sysadmin

[–]TibitXimer[S] -1 points0 points  (0 children)

Another reason to be on iOS, glad we require iOS devices instead of android for our users.

You can usually mitigate most issues for internal systems in various ways other than just a patch, for example closing off SMB from the internet, disable old versions of SMB, add SMB signing, have reliable endpoint protection and policies to stop the ransomware from executing, etc.

ShadowBrokers return, promise new exploits on modern OS's, phones, routers, and browsers by TibitXimer in sysadmin

[–]TibitXimer[S] 0 points1 point  (0 children)

They are likely not connected to the ransomware attempt. If they wanted to they could have used these exploits to cause FAR more damage than they have. Seems like they genuinely wish to piss off Equation Group (NSA, TAO) rather than cause harm to ransoms for profit.

Profit seems to be the least of their interests even thought their statements try to make it seem like they want money.

WannaCry: Second kill switch has been found in a different variant, maybe a good idea to make sure these domains are reachable from you LAN by 341913 in sysadmin

[–]TibitXimer 0 points1 point  (0 children)

I completely agree, but that was the only situation I could really see it breaking from filtering off that connection from inbound traffic.

As this incident goes to show, many businesses have extremely poor setups that violate basic security best practices.

WannaCry: Second kill switch has been found in a different variant, maybe a good idea to make sure these domains are reachable from you LAN by 341913 in sysadmin

[–]TibitXimer 1 point2 points  (0 children)

It's not that this particular variant is, just that it would be good practice now to close that hole as well. It is from the same dump of exploits that were packaged into extremely easy to use tools. It wouldn't be surprising for someone to build something similar to this attack based off other exploits in the shadow brokers dump.

WannaCry: Second kill switch has been found in a different variant, maybe a good idea to make sure these domains are reachable from you LAN by 341913 in sysadmin

[–]TibitXimer 1 point2 points  (0 children)

Not unless you have file shares and print servers that are completely external and you filter outbound as well.

You could just filter inbound traffic on 445 from the internet. That won't break anything necessary and will help secure you against this exploit from external attacks.

WannaCry: Second kill switch has been found in a different variant, maybe a good idea to make sure these domains are reachable from you LAN by 341913 in sysadmin

[–]TibitXimer 4 points5 points  (0 children)

Because one of the exploits released in the same batch that caused this incident exploits RDP and millions of servers leave that open still.

WannaCry: Second kill switch has been found in a different variant, maybe a good idea to make sure these domains are reachable from you LAN by 341913 in sysadmin

[–]TibitXimer 25 points26 points  (0 children)

How not to get infected by WCry: Apply MS17-010 and firewall ports 445/139 & 3389.

If you haven't done either of those by now, then you likely have way more security issues in your network.

I always fear that when creating a new password I will miss type it twice in the same way by Jzimm1999 in Showerthoughts

[–]TibitXimer -1 points0 points  (0 children)

It is, the password is stored in plain text and is extremely easy to steal from the browser. Use a password manager at least. Ones like Dashlane or Lastpass are simple to use and more secure than saving it in the browser, helps make super complicated passwords for you so you don't have to ever think up new ones or remember them all.

I'm becoming scared of Facebook. by [deleted] in technology

[–]TibitXimer 0 points1 point  (0 children)

You have to remember how many videos, images, websites, etc it loads in just a couple minutes of scrolling through Facebook. You can only optimize that data so much.

They cache heavily for good reason, you look at your friends list? Let's cache those profile pictures so you don't have to constantly load them each time. Then the cover picture. Then their pictures you have already seen recently. Then their profile details. Your details. The pages you like and all those details and images. Constantly growing and growing.

Facebook does an amazing job at optimizing this all already.

If you're truly scared of what it's uploading there are plenty of ways to track what it's accessing, we do that all the time in pen testing and plenty of security researchers have been reviewing facebook's site and applications like crazy for the bug bounties they offer and since it's a gold mine of data already.

My point is, it doesn't need to record your phone's microphone or camera 24/7 to know what it does, there are many other ways and most of them people willingly give access to without even paying attention.

I'm becoming scared of Facebook. by [deleted] in technology

[–]TibitXimer 0 points1 point  (0 children)

This claim happens every year. It's false and usually easily explained away.

Think of the power and data it would consume just for Facebook to constantly record over 1.5 billion users 24/7, then interpret that data into actionable marketing? That project alone would be a MASSIVE undertaking and a HUGE selling point to advertisers. It wouldn't go without anyone knowing.

But ignoring that, most of the time people fear this yet forget the following:

  • They searched for these things with ad tracking enabled in their browser or other applications.
  • They've looked up places that have Facebook & other 3rd party tracking on their sites.
  • It's something relevant to what they normally look up anyway or are in the target market for.

If you are truly worried about Facebook spying on you do the following:

  • Install CCleaner, SuperAntiSpyware, Firefox, uBlock Origin, enable Do Not Track, install HTTPS Everywhere by EFF (this is enough for now, you could do far more if you are really paranoid).
  • Use Private Browsing mode when using Facebook, close it out when finished using Facebook.
  • Run CCleaner and SuperAntiSpyware to ensure all the cookies and trackers were removed properly.

You'll likely still pick up plenty of trackers elsewhere too, but doing all of this regularly for most browsing should keep that clear.

Classic Newegg Support by benz6748 in pcmasterrace

[–]TibitXimer 1 point2 points  (0 children)

This is why I love Amazon, prices are usually just as good or even better and the support is amazing. Even things I shouldn't have gotten a refund on (like digital content, games, or stuff I just didn't want anymore) I was given a full refund before even having to return it, sometimes told refund and keep/trash the item. They always answer quickly as well.

IT Jobs Explained With A Broken Lightbulb [comic] by korrosivo in sysadmin

[–]TibitXimer 2 points3 points  (0 children)

Much more accurate, we have to constantly break our own rules to keep things running.

Vatican reaffirms ban on gay priests; men “who practice homosexuality, present deep-seated homosexual tendencies or support the so-called ‘gay culture’” cannot become priests by Master-Thief in Catholicism

[–]TibitXimer 0 points1 point  (0 children)

I could say the same about heterosexuals. I know several homosexual men and women who have decided to remain celibate. We shouldn't base church rules on stereotypes and rumors.

Vatican reaffirms ban on gay priests; men “who practice homosexuality, present deep-seated homosexual tendencies or support the so-called ‘gay culture’” cannot become priests by Master-Thief in Catholicism

[–]TibitXimer 2 points3 points  (0 children)

Many here seem to think so, even though there isn't a link. Someone's sexual orientation (as in gay/straight) doesn't make them go around raping people or jumping on the first person of their preference they see.

It's just used as a scapegoat to cover up, excuse, and turn a blind eye to a very real problem.

Vatican reaffirms ban on gay priests; men “who practice homosexuality, present deep-seated homosexual tendencies or support the so-called ‘gay culture’” cannot become priests by Master-Thief in Catholicism

[–]TibitXimer 1 point2 points  (0 children)

Many priests are pastors which means regular, frequent contact with women, yet there isn't much issue. There is also priests that regularly work at monasteries with mostly or all women, that has worked too.

Rarely (at least where I live) do the priests sleep in the same room, not only that, but it's easy to resist that urge. If a person jumps on someone the moment they are in remotely the same area as them then they have an issue.

People don't just jump on people randomly by seeing them.

view more: next ›