[-] biscuitswalrus@aussie.zone 7 points 3 days ago* (last edited 3 days ago)

"If Max wins races again and Sergio can finish third or fourth, things will look different again. But as I said, the focus is primarily on the drivers' title."

Sergio's average finish is 8th.

Asking Max to win is like asking a boulder to be heavy. Asking perez to finish fourth? Might as well ask him to cure cancer too.

[-] biscuitswalrus@aussie.zone 1 points 5 days ago

Gog doesn't* (as often?) sell licenses that can be revoked as part of purchasing eula and therefore shouldn't really have to remove the misleading 'buy' word.

Many steam games you don't own and aren't buying, you're being granted access that can be revoked by the property owner. That's not just steam.

*I'm not a big Gog or games purchaser in general so I'm not sure if that's accurate. I'm sure you get the point though.

[-] biscuitswalrus@aussie.zone 9 points 5 days ago

I think you probably don't realise you hate standards and certifications. No IT person wants yet another system generating more calls and complexity. but here is iso, or a cyber insurance policy, or NIST, or acsc asking minimums with checklists and a cyber review answering them with controls.

Crazy that there's so little understanding about why it's there, that you just think it's the "IT guy" wanting those.

[-] biscuitswalrus@aussie.zone 58 points 2 months ago

At this point we want antivirus and anticheat out of windows kernel. Microsoft killing access to it will genuinely fix Linux compatibility issues.

It couldn't be more win-win.

Microsoft is trying to test that approach. The company tested restricting kernel access to third party security vendors in the past, with Vista OS in 2006, but had to backtrack the move.

Symantec and McAfee then claimed Microsoft’s decision to shut off access to the kernel amounts to “anti-competitive behavior.”

Without kernel access, this software may struggle to perform in-depth behavioral analyses of processes and applications, to meet its objectives, said Varkey. “Blocking this access can limit the software’s ability to detect and prevent sophisticated attacks.”

They can't be trusted, kick out everyone's access to the kernel. Everyone must use API and that can be interpreted.

[-] biscuitswalrus@aussie.zone 29 points 2 months ago

I keep asking the pets for their owners secrets but they don't tell me? I've tried pats, compliments and treats? Am I doing it wrong? How are you getting them to tell you about their owners?

[-] biscuitswalrus@aussie.zone 32 points 2 months ago

Hate to break it to you, but most IT Managers don't care about crowdstrike: they're forced to choose some kind of EDR to complete audits. But yes things like crowdstrike, huntress, sentinelone, even Microsoft Defender all run on Linux too.

[-] biscuitswalrus@aussie.zone 52 points 3 months ago

What do you do with Home Assistant?

"Oh well I automate a noise complaint form submission. It's integrated with my noise level detector and with a custom python lookup for the most recent airplane departure"

(that guy probably)

[-] biscuitswalrus@aussie.zone 33 points 4 months ago

No.... It's malware. It's not a virus, it's malicious. It's malware.

[-] biscuitswalrus@aussie.zone 37 points 5 months ago

I'm not sure what to read into tho whole article, it reads like an onion article from a normal place.

Maybe it's me taking the crazy pills today.

[-] biscuitswalrus@aussie.zone 22 points 5 months ago

The Nintendo lawyers are full time, this is just a Thursday to them. You're keeping those lawyers employed by giving them work.

[-] biscuitswalrus@aussie.zone 21 points 7 months ago* (last edited 7 months ago)

The messaging around this so far doesn't lead me to want to follow the fork on production. As a sysadmin I'm not rushing out to swap my reverse proxy.

The problem is I'm speculating but it seems like the developer was only continuing to develop under condition that they continued control over the nginx decision making.

So currently it looks like from a user of nginx, the cve registration is protecting me with open communication. From a security aspect, a security researcher probably needs that cve to count as a bug bounty.

From the developers perspective, f5 broke the pact of decision control being with the developer. But for me, I would rather it be registered and I'm informed even if I know my configuration doesn't use it.

Again, assuming a lot here. But I agree with f5. That feature even beta could be in a dev or test environment. That's enough reason to know.

Edit:Long term, I don't know where I'll land. Personally I'd rather be with the developer, except I need to trust that the solution is open not in source, but in communication. It's a weird situation.

[-] biscuitswalrus@aussie.zone 36 points 7 months ago

I mean, the rdp is from Linux to Windows for desktop application access, so it's the right tool for that job.

view more: next ›

biscuitswalrus

joined 1 year ago