• 1 Post
  • 60 Comments
Joined 2 years ago
cake
Cake day: June 22nd, 2023

help-circle
  • DNSSEC is a means of authenticating the data receives was not tampered with, such as MITM attacks, thus ensuring data integrity. It uses PKI but it’s not an alternative to DoH or DoT which encrypts the DNS traffic, either over HTTPS or TLS, providing confidentiality.

    DNSSEC can be used in conjunction with DoH or DoT to achieve the Security CIA triad - Confidentiality, Integrity, Authenticity.




  • As a Sysadmin I would be immediately looking for a new job if management wanted to snoop on employees machines via a screen recording/capturing software. I wouldn’t want it done to me and I sure as hell wouldn’t feel right deploying such spyware!

    Not to mention it immediately errodes the fragile trust between IT and the rest of the company and troubleshooting or implementing changes becomes that much harder.

    What I tell EVERY person, not just coworkers, is DO NOT TREAT THIS AS A PEROSNAL DEVICE. Keep your personal stuff off the work machine.

    It’s not even because of snooping by the company. What if the company performs a remote wipe after an unexpected termination? If that device is the only place you kept important documents… Well, you are up shit creek without a paddle.

    Now, the type of remote assist tools we have make it very clear to the other person we are connected and can see their screen(s) - connection notifications, persistent banners and disconnect notifications. Every team I’ve worked on makes it protocol to ASK the employee if we can remote in.

    It might seem like a formality but honestly if someone hasn’t heeded our advice and is logged into their banks site I don’t want to see it! It’s very much a CYA policy for IT, but it also shows respect for other employees privacy.


  • And then those “enterprise features” get borked on the next major macOS release.

    Oh you wanted to ensure your remote assist tool could be granted the proper permissions to work? Well screw you! We took away the ability to grant Screen Recording permissions through a MDM profile. Suck it!

    In case you didn’t know the Screen Recording permission is needed to be able to view the display/screen in applications like Zoom when screen sharing or for remote assist through Screen connect.

    Apple’s “reason” was essentially “… Think of the users! It’s for their security”.





  • You make the damn laws! Could you make it any more obvious you are beholden to your corporate overlords?!

    A strongly written letter ASKING these profit driven companies to stop doing something that increases profit?!

    This is the laziest attempt to appear as though these senators are doing something and care. In reality they don’t want their money spigot turned off when elections roll around so no real action will be taken.

    Maybe you should actually do your jobs and pass right-to-repair and data privacy legislation with the best interest of your constituents in mind?

    You don’t ask the robber barons to do something. You drag their ass to the table while they kick and scream all the way.




  • Even if the FBI does catch this guy, the Feds are still gonna have a helluva time trying to cobble together an impartial jury, not to mention alternatives. One question will eliminate a large portion of the jury pool…

    “Do you currently, or previously had UHC as a health insurer?”

    I could see this case having a hung jury or even seeing jury nullification occur - though it’s highly unlikely for nullification to happen.

    The Feds will put ungodly amounts of pressure to accept a plea deal.

    Edit: added the missing ‘y’ to ‘currently’ and added a space between ‘previously’ and 'had