* Posts by MONK_DUCK

30 publicly visible posts • joined 21 Dec 2023

Amazon security boss blames Russia's GRU for years-long energy-sector hacks

MONK_DUCK

The tarrifs and sanctions are largely around getting a better trade deal with India and hurting China. The shadow fleet they've done almost nothing against. They've done more against Venezuela than the Russian shadow fleet. They provided some weaponry to the Ukrainian armed forced but a lot of the time through trade deals with Europe. Frankly it hasn't been impressive at all, if the US had wanted to seripusly impact Russia trade and potentially end the war, it could have done this a long time ago.

MONK_DUCK

And yet the US administration is only somewhat pushing back against Russia.

It could have even supported a move away from Russia's primary export product. Especially by it's trading partners close to Russia. But the bribery within the US administration is now so high, it's not even allowed to think that.

TryHackMe races to add women to Christmas cyber challenge roster after backlash

MONK_DUCK

The main problem I see when reading CVs from women is they don't lie anywhere near as much as the guys do.

The guys on the whole lie more and make stuff up or embellish the details, net result is that they get more interviews.

So a result like this really would not shock me at all, and it doesn't mean the guys must be better they just tend to get more interviews (it's a numbers game).

MONK_DUCK

Kind of feel sorry for THM as it seems like they did attempt to onboard a more diverse group. Though 'possibly', if I was being a little cynical, it was a little unwise to not spot this could have the potential get picked up, and they could have pre-empted it first. If I was THM I'd just chalk it up to a learning experience and move on, I don't think anyone is going to get too worked up over it as a one off.

The comments further around remuneration of the influencers of last year event are, to be honest, just contractual issues. It is down to those specific influencers and THM to work through the issues and probably harden up their own contractual positions so both parties are in agreement prior to the work being carried out. Then if there is a further issue it is just a standard case of contract law.

As someone who sees a lot of graduates and CVs come through, it would be nice to tap into all the unused talent out there and not see them run off into the finance industry.

Python Foundation goes ride or DEI, rejects government grant with strings attached

MONK_DUCK

Re: Sounds good

Are you suggesting the Trump administration would enforce hiring based upon merit? I've certainly not seen or heard of any evidence of that. In fact mostly he seems to have enforced cronyism, RFK has hardly been appointed based on merit.

MONK_DUCK

Good on the python foundation, why would anyone trust a seriously corrupt person like Trump.

FBI: Russian spies exploiting a 7-year-old Cisco bug to slurp configs from critical infrastructure

MONK_DUCK

Patched or not, why are these management interfaces open to attackers, this really is the major issue.

IETF Draft suggests making IPv6 standard on DNS resolvers - partly to destroy IPv4

MONK_DUCK

Re: UK government need to start fining

They've mostly been fixed, which is why other ISPs are using it. But if you are virgin, why spend even one pound when you have spare address space. It would just help virgin's position to do absolutely nothing, the cost then sits with the competition who do not have said addresses spare.

Regulation is there to make companies do thing they don't want to do to improve the situation for everyone. If the regulation had been set in 2018 for a 2030 full IPv6 support then they would have had time to slowly and cheaply introduce it as equipment is replaced.

Everybody needs good neighbors – especially ones who sell you solar energy

MONK_DUCK

I got quoted for solar and battery syorage recently and as others have pointed out, just getting rid of gas means the removal of the standing charge pays back 10% of the total install cost. The gas boiler service savings will additionally pay for a few Kwh of electricity a day over the winter months.

We're number 1! Windows 11 finally overtakes Windows 10

MONK_DUCK

Re: 2.17%

With all the major browsers either ending support for Windows 7 this year, or having ended. It would need to be as a stand alone machine, without Internet, maybe a bit of typing and printing etc...

US govt's science foundation purges 37 divisions, equity unit among casualties

MONK_DUCK

Re: Well, ...

Let's be honest a vast amount of America had no idea what they were voting for. They read their social media feed which told them the evil left were plotting. They read that prices would fall day one. They read that the economy would explode and women wouldn't have to work anymore and could go back to the kitchen. They read that nice white boy would have a job rather than the more educated 'other'.

Once the election was over of course, it all turned out to be rubbish. American science is lagging China, economy is dipping, the evil woke plot only seems to be happing in the is media and it turns out nowhere else on the planet.

Americans need to except what they voted for.

X marks the drop for European users

MONK_DUCK

Re: Bsky

Well so far on bluesky I've not seen regular posts from user accounts saying, exactly what they thought should happen to non-whites, women and lgbtq people. From that prospective it does feel very different.

Crypto takes a dip as Trump signs Bitcoin Reserve order

MONK_DUCK

Exactly the same affair with gold, if America dumps in the price crashes and lots of angry people. There is a moral here, stop buying fairy dust.

Please fasten your seatbelts. A third of US air traffic control systems are 'unsustainable'

MONK_DUCK

Re: Get it Effin' Done

Maybe but then again maybe you are the only customer of a custom tape drive and, the company doesn't want to repair them 20 years after they went end of life.

UK government spends another £1B on cloud migration and services

MONK_DUCK

Re: Security?

As we all know, every workload in the cloud is 100% secure and completely impenetrable, and nothing needs to be proven as the vendor has iso 27001 compliance and a soc2.

Andrew Tate's site ransacked, subscriber data stolen

MONK_DUCK

Re: Hurrah

The numbers don't lie,

Admins using Windows Server Update Services up in arms as Microsoft deprecates feature

MONK_DUCK

Well that's just useless for everyone that needs the ability to roll out new machines without relying on an unreliable cloud or internet. I guess it does push us more towards RHEL etc... but that is a lesson in how to shoot yourself in the foot.

White House thinks it's time to fix the insecure glue of the internet: Yup, BGP

MONK_DUCK

It really just comes down to legislation, once a few of the bigger counties or blocks demand it, it will start to shift. If India or EU makes it a requirement then the revenue hit will force many companies hand. It really just comes down to how much they care about it and the time frame. Wouldn't surprise me to see them start with the ISPs, move to critical national infrastructure next and onwards from the large to small caps.

AT&T sues Broadcom for 'breaking' VMware support extension contract

MONK_DUCK

Completely agree the conversations from the mid and large caps all seem to be around accelerating their migration plans, rather than if they are moving away from vmware.

Nvidia's latest AI climate model takes aim at severe weather

MONK_DUCK

Re: Weathermarket

Of course they can, in fact they already are doing it, and once several finace houses are doing the at scale the benefits of it will be gone and we will just go back to looking at the fundamentals.

Raspberry Pi Pico 2 lands with (drum roll) RISC-V cores

MONK_DUCK

Should help get risc-v out to more developers in an easy to access manner, which can only be a good thing.

Under-fire Elon Musk urged to get a grip on X and reality – or resign

MONK_DUCK

Re: So what?

They advised the companies not to go on a platform full of crazy conspiracy theorists, run by a guy who supports crazy conspiracies.

MONK_DUCK

Musk only has one ability, to make hype, he is trashing his companies. True he is very good at making little to nothing grow but when reality come he mucks it up. He grew Tesla and now it's massively overvalued with mediocre product line coming up. He arranged to buy Twitter and wrecked its revenue.

They really need to find a way to remove him from the board of Tesla and X, he's wrecking them both and wiping out shareholder value.

Twitter tells advertisers to go fsck themselves, now sues them for fscking the fsck off

MONK_DUCK

I can't imagine many companies I've worked with wanting to be associated with a lot of content on twitter, there are no laws that say they have to advertise next to nazi incels.

Starlink offers 'unusually hostile environment' to TCP

MONK_DUCK

"The CUBIC TCP network congestion avoidance algorithm could also do a job, in harness with Selective Acknowledgement (SACK – aka RFC 2883)."

Interesting analysis though cubic tpc came out 2007 and is used by all the major desktop OS' and probably server. Likewise Selective ACK has been around for decades so as long as you are using a recent patched OS and not building your own tcp stack, you're probably fine.

Exchange Server SE set to debut just before 2019 version breathes its last

MONK_DUCK

Costs

Aside from extreme privacy or regulatory requirements running an on premise email server is one of the more expensive options these days, especially if you've got under a 100 users.

I loved running a lot of mail servers 20 years ago but it's starting to feel like admins could be doing other things for a commodity service.

Dating apps kiss'n'tell all sorts of sensitive personal info

MONK_DUCK

The regulators have a lot to answer for allowing companies to request, store and share unrequited data.

The fines need to be massively hiked and criminal charges made possible against the executives, legal team, security team, testers and developers if they haven't acted appropriately e.g. By not raising issues, concerns, lack of testing or not dealing with those identified issues.

Google One VPN axed for everyone but Pixel loyalists ... for now

MONK_DUCK

Let me guess that they don't cut the price of Google One when they do turn it off. For those who did buy it with that feature included. To be fair it worked pretty well in hotels and the few odd places with open WiFi.

Cyber sleuths reveal how they infiltrate the biggest ransomware gangs

MONK_DUCK

Re: The solution being a read-only USB device

Good luck at running infrastructure for 10k users without some form of central AAA. Your point stands but you need something otherwise users could be required to have hundreds of different passwords to various data sources. Most of the issue seems to be excessive privileges, especially around access to data and network resources.

SSH shaken, not stirred by Terrapin vulnerability

MONK_DUCK

Can this be fix though

Trying to figure out if the fix can actually work fully, the article mentions the server and client both must both be patched. Could not a MITM simulate an unpatched client or server.

Guess I'll have to read the paper itself.