Recent submissions

Comment · 7 months ago
Usually through service accounts. Those are single factor.
Comment · 1 year ago
Monetize first is their strategy given this included statement:

> Our future plans include letting you save a secure backup archive to the location of your choosing

Comment · 1 year ago
Looks like AdGuard allows for same, thanks for mentioning dnsmasq support! I overlooked it on setup.
Comment · 1 year ago
Comment · 1 year ago
Wrong. Their profile clearly states high school teacher. Why assume?
Comment · 1 year ago
Wiz is closer to the CNAPP field instead of the software composition analysis tools you mention, Snyk would fit here for SCA.

Sysdig, Palo Alto's Prisma Cloud, or a few others compete with Wiz's CNAPP offering. Wiz also strays into some SCA and SCA-alike tooling for containers, code or XDR with their CDR/XDR products log ingest and agents available for response/quarantine.

Comment · 1 year ago
Wiz uses various API's via read access in your accounts/orgs/subscriptions to assess risk of configuration.

They also snapshot your disks, cloning them to Wiz accounts to provide secrets scanning / vuln scanning / etc against your infra.

These resulting risks / findings are scored and provided in their SAAS Wiz console via dashboards / APIs / integrations with remediation guidance.

Comment · 1 year ago
Yes folks do and I can't understand it either. Have asked / talked through their rationale but frankly humans are irrational is my clear takeaway. I experience it mostly when folks are prompting search in family settings. These usually overlap with the no-earbuds watch-videos crowd while others are reading / napping, etc.
Comment · 1 year ago
Certainly not the UK, they're spearheading much of the privacy problem.
Comment · 1 year ago
Comment · 1 year ago
> I am using CloudFlare for my DNS.

Based on this it sounds like you exposed your resource and advertised it for others. Reverse dns, get IP, scan IP.

Probably simpler, you exposed resource on IPV4 publicly, if it exists, it'll be scanned. There's probably 100s of companies scanning entire 0.0.0.0/0 space at all times.

Comment · 1 year ago
Why isn't your name in your profile here or why aren't you easily identified if that's the case? You're not all that identifiable here.
Comment · 1 year ago
1. Is github the best place to report bugs / issues for Waterfox?

2. When (not in your lifetime obviously) Waterfox is broken, what canaries do you have deployed that we can archive now, like Mozilla's tell here?

3. What keeps waterfox afloat? Where/how do you accept funds?

4. How do I find a sync alternative or provide my own? Such that, I'm not reliant on Mozilla sync/backend? ... If none exists, how much would it cost for you to embed one? Would you accept a serious bounty for it assuming the focus is self hosted / no Waterfox backend services?

Comment · 1 year ago
Veracrypt works just fine on M$ Windows 11 for FDE.
Comment · 1 year ago

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton