• 0 Posts
  • 8 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle


  • “And immediately after we had removed them from the environment, another attack set off, which we attributed to the same group trying to get back in through other means,” he added.

    This happened within 24 hours, with a credential-stuffing attack. “There was no opsec, no slow-and-low,” Dwyer said. “They put the persistent in APT. Once they identify a target as valuable to them and their goals and objectives, they will continue to try to get back in.”

    And this is from a company that seems to at least sort of take security seriously (ignoring the glaring error that got them in this situation). Responding to this threat seems like a challenge for most companies down the supply chain.






  • Basically just a pitch for Gemini. The problem with Gemini is that we could do all that now with the web. They’re just stripping features to enforce what they think the Web should be.

    I kind of get it. I like the idea of a simplified protocol. No JS engines to be exploited. I like building small static sites and wish more people would.

    But also, there’s a million reasons we moved away from plain rudimentary HTML and terminal browsers. Not least of which is interactivity and writability. You couldn’t create a Lemmy frontend, forum, or any kind of database UI using this protocol.

    Shy of reading documentation like man pages, I don’t really see the value.