• 0 Posts
  • 24 Comments
Joined 6 months ago
cake
Cake day: May 20th, 2024

help-circle





  • This is true. If you have DMARC and your RUA set up (with a working email (or one that doesn’t bounce at least)) along with SPF and DKIM, Google and MS will accept your mail. The only time it won’t at that point is if your IP is in the same /24 as a known spammer but so long as the spam stops, you’ll fall off the list. Some of the common spamlists allow you to request your IP be removed by request and I can only recall one list that almost nobody uses that makes you pay for the removal though there may be more I don’t recall.



  • I’m sure laws on this differ everywhere in the world but I assume you’re talking US. It is doubtful an employer could win a law suit against you for not showing your specific methodology unless you have a contract and that was part of it.

    As far as firing goes, there aren’t very many situations that an employer can’t fire you over for cause but obviously also can fire you without cause.

    Would they own the templates? Yeah but they’d also have to know to look for them unless you told them. Otherwise they’d probably already have created some templates and expect you to use and perhaps improve them.


  • Reminds me of a friend of mine. He was promoted to some sort of engineering metrics analyst. His job it turned out, was to take a bunch of different reporting products and then create a presentation once a week to go over all of the metrics and have them in easy to understand graphs on a specific template.

    So of course a month into the job he automates the entire thing and his job now takes a total of 5 minutes because he waits on the actual numbers to be crunched and spit out into the new template.

    He’s super bored and asks me if he should tell his boss what he’s done and possibly get another promotion out of it. I said “Sure, if you want to be promoted to the layoff line.”

    So his boss gave him some extra tasks and he just keeps blazing through them. His boss wants to know how he’s able to be the most productive person they’ve ever seen in that position. He asks me again, if he should tell the boss and his boss’ boss because they are super impressed. I said “No. Absolutely not. Just shrug and tell them you just do your best every day. They’ll eat that right up.” He does. He gets a promotion a couple of months later to a middle manager of some type. Probably due the Peter Principle.

    Don’t ever give out your templates or show your process. If they can hire someone less experienced at a much cheaper rate, they eventually will.




  • I did some digging and it seems like the family’s suit should actually be against the pub that was renting the in-park space from Disney. It’s just unfortunate that the prevalence of corporate propaganda in news media

    He is suing both Disney and the pub. The pub obviously because they were negligent and Disney because it is in Disney World. It is up to the court to decide how much liability Disney should have vs. the pub, if any.

    I doubt Disney would be able to successfully argue that just because the restaurant is leasing space in Disney World that they have zero liability but that’s up to the court.



  • There are a couple of OEMs like System76 and Starlabs that sell laptops with Linux on them, provide tech support for customers and so on.

    And no, installing most distros aren’t hard. You just click the buttons to proceed and fill out the username and password box, select your time zone and select your wi-fi network if you’re using wifi.

    You can do manual partitioning but why would you if you don’t know what you’re doing?

    Installing software in the GUI is as easy as installing software from the Microsoft Store. Just search or look around and when you see something you want, just click the Install button.


  • I get the sentiment but defense in depth is a methodology to live by in IT and auto updating via the Internet is not a good risk to take in general. For example, should Crowdstrike just disappear one day, your entire infrastructure shouldn’t be at enormous risk nor should critical services. Even if it’s your anti-virus, a virus or ransomware shouldn’t be able to easily propagate through the enterprise. If it did, then it is doubtful something like Crowdstrike is going to be able to update and suddenly reverse course. If it can then you’re just lucky that the ransomware that made it through didn’t do anything in defense of itself (disconnecting from the network, blocking CIDRs like Crowdsource’s update servers, blocking processes, whatever) and frankly you can still update those clients anyway from your own AV update server which is a product you’d be using if you aren’t allowing updates from the Internet in order to roll them out in dev first, phasing and/or schedules from your own infrastructure.

    Crowdstrike is just another lesson in that.



  • Having a NAT on a consumer router is indeed the norm. I don’t even see how you could say it is not.

    I never said NAT = security. As a matter of fact, I even said

    It was not designed for security but coincidentally blah blah

    But hey, strawmanning didn’t stop your original comment to me either, so why stop there?

    Let me tell you: All. Modern. Routers. include a stateful firewall.

    I never even implied the opposite.

    To Linux at least, NAT is just a special kind of firewall rule called masquerade.

    Right, because masquerade is NAT…specifically Source NAT.

    I’m just going to go ahead an unsubscribe from this conversation.




  • Because, as I said:

    layer 7 firewalls for the network which are going to be where most the majority of attacks are concentrated.

    The NAT doesn’t have to operate at layer 7 to be effective for this because

    coincidentally it is doing the heavy lifting for home network security because it is dropping packets from connections originating from outside the network, barring of course, forwarded ports and DMZ hosts because the router has no idea where to route them.

    The point is that the SPI firewalls are not protecting against the majority of the attacks we’ve seen for decades now from botnets and other arbitrary sources of attacks, except, perhaps targeted DDoSing which isn’t the big problems for most home networks. They must worry about having their OS’ and software exploited and owned in the background, which doesn’t get much of an assist from a router’s firewall.

    Obviously, this is however true for the NAT since the NAT are going to drop connections originating from outside the network attempting to communicate with that software to exploit it

    barring of course, forwarded ports and DMZ hosts because the router has no idea where to route them.