Hacker News: fname

New comment by fname in "Bomb threat causes mass evacuation at DEF CON hacking convention"

fname — Mon, 14 Aug 2023 14:36:48 +0000

Allegedly owned by someone that attended the DEFCON Shoot event where gun powder was transferred to the package, tipping a dog doing a random search in the Forums.

New comment by fname in "Microsoft has detected nation-state activity associated with NOBELIUM"

fname — Wed, 27 Oct 2021 15:41:59 +0000

This might help: https://www.securityweek.com/whats-threat-group-name-inside-...

For Microsoft specifically, we leverage the periodic table of elements when naming nation states.

Important Update from Mimecast

fname — Tue, 12 Jan 2021 13:44:58 +0000

Article URL: https://www.mimecast.com/blog/important-update-from-mimecast/

Comments URL: https://news.ycombinator.com/item?id=25746745

Points: 1

# Comments: 0

New comment by fname in "Yahoo discloses hack of 1B accounts"

fname — Wed, 14 Dec 2016 22:19:25 +0000

Maybe that can get Verizon another $1B discount.

New comment by fname in "OS X is now macOS and gets support for Siri, auto unlock"

fname — Mon, 13 Jun 2016 18:08:18 +0000

Tabs across all windows, all apps.

New comment by fname in "Microsoft Cloud Strength Highlights Second Quarter Results"

fname — Fri, 29 Jan 2016 00:22:19 +0000

> Personally, I'd never put a MS project between me and the cloud, or my data and the cloud

Why?

New comment by fname in "Apple Unveils the iPad Pro"

fname — Wed, 09 Sep 2015 17:51:00 +0000

+ the pencil @ $99 and the smart keyboard at $169. > $1k for the entry level model to be comparable with the Surface Pro 3 at ~$930 (which starts at 64GB, btw).

New comment by fname in "“EPIC” fail–how OPM hackers tapped the mother lode of espionage data"

fname — Mon, 22 Jun 2015 12:47:48 +0000

> but DISA can't enforce STIGs across the entire government can they?

No, with a small caveat: If that civilian agency (say DHS) is connected to the GIG[1], then DISA has a say-so and can threaten to disconnect them for failing security audits.

Something to keep in mind is that the STIGs are merely implementation guides to secure a system. Therefore, different agencies have different interpretations. In some cases specific secure implementations break systems and applications (mostly legacy ones), so they avoid securing those particular settings all together.

1: https://en.wikipedia.org/wiki/Global_Information_Grid

New comment by fname in "“EPIC” fail–how OPM hackers tapped the mother lode of espionage data"

fname — Mon, 22 Jun 2015 10:51:18 +0000

I don't disagree. Unfortunately, this all falls on DoD-DISA. The NSA works with DISA to write the policy for how to secure systems (called STIGs) and also has 'Red Teams', but they aren't the arm that certifies these systems before coming online, nor are they the ones the ensure the systems stay secured as new vulnerabilities are found and patched -- that's DISA again.

New comment by fname in "Cardinals Face F.B.I. Inquiry in Hacking of Astros’ Network"

fname — Tue, 16 Jun 2015 17:06:26 +0000

I'm guessing they mean they had a break-glass list of passwords for accounts to access those systems.

U.S. Suspects Hackers in China Breached About 4M People’s Records

fname — Thu, 04 Jun 2015 21:34:23 +0000

Article URL: http://www.wsj.com/articles/u-s-suspects-hackers-in-china-behind-government-data-breach-sources-say-1433451888

Comments URL: https://news.ycombinator.com/item?id=9662259

Points: 2

# Comments: 0

New comment by fname in "Hello World: Windows 10 Available on July 29"

fname — Mon, 01 Jun 2015 11:27:10 +0000

> Also on whether WinXP users are going to qualify for the free upgrade?

Nope. There is no upgrade path from XP -> Windows 10. You will have to go from Win7/8 to qualify for the free upgrade to 10.

New comment by fname in "Hello World: Windows 10 Available on July 29"

fname — Mon, 01 Jun 2015 10:59:22 +0000

Yes, both can be disabled. However, I'm not sure if it's dependent upon which 'edition' though. For example, you can turn it off in Enterprise, but not Professional.

New comment by fname in "[dead]"

fname — Tue, 31 Mar 2015 13:44:32 +0000

That links to the Surface Pro 3, which has been out for sometime now. You wanted: http://www.microsoft.com/surface/en-us/products/surface-3

Announcing Surface 3

fname — Tue, 31 Mar 2015 13:40:34 +0000

Article URL: http://blog.surface.com/2015/03/announcing-surface-3/

Comments URL: https://news.ycombinator.com/item?id=9296035

Points: 7

# Comments: 0

New comment by fname in "Lenovo's Response to Its Dangerous Adware Is Astonishingly Clueless"

fname — Fri, 20 Feb 2015 17:43:47 +0000

This is really great, but the real question is will users actually see this on a default Lenovo OS build? Can anyone confirm that Defender doesn't get disabled in favor or say... McAfee or Symantec?

New comment by fname in "Google discloses another Windows security issue after deadline exceeded"

fname — Fri, 16 Jan 2015 01:05:25 +0000

From the comments in the article

Microsoft informed us that a fix was planned for the January patches but has to be pulled due to compatibility issues. Therefore the fix is now expected in the February patches.

So, they met the deadline and fixed the vulnerability, but due to compatibility issues had to pull it before being released through Windows Update.

Possible orphan black hole lies just 90M light-years from Earth

fname — Thu, 20 Nov 2014 13:47:44 +0000

Article URL: http://news.sciencemag.org/space/2014/11/possible-orphan-black-hole-lies-just-90-million-light-years-earth

Comments URL: https://news.ycombinator.com/item?id=8635641

Points: 2

# Comments: 0

Here's How Scientists Can Save Philae from Its Rough Comet Landing

fname — Fri, 14 Nov 2014 08:40:12 +0000

Article URL: http://www.popularmechanics.com/science/space/deep/two-ways-philae-could-be-saved-17424664?click=pm_news

Comments URL: https://news.ycombinator.com/item?id=8606322

Points: 3

# Comments: 0

New comment by fname in "Microsoft fixes '19-year-old' bug with emergency patch"

fname — Wed, 12 Nov 2014 15:24:32 +0000

Depends on the IE Zone settings. I believe that if you set the a zone to 'Low', a web page can execute a VBSCript code, with or without ActiveX being enabled.