dolorian's comments

dolorian | 2 years ago | on: Ask HN: Freelancer? Seeking freelancer? (January 2024)

SEEKING WORK | REMOTE (Americas)

10 years of cybersecurity expertise. I can help you automate your processes and document things you didn't know you had.

I've worked with most types of security appliances, and in doing so I've noticed that many of them aren't a great fit for smaller businesses. I believe in the "holistic security" concept and working out your organization's security priorities from first principals. In other terms, I'll figure out how the bad people will try to hurt you, and we'll talk about what tools and methods your team can use to avoid that without damaging your productivity. It's generally best if we do this before the bad people do their thing, but I've done a number of remediation jobs before and I'm willing to do more. My focus is not on compliance (standards) security, but I can help you with meeting standards in addition to your (real) organizational goals.

I'm also part of a team that does physical security testing. Obviously these assignments can't be remote, we'll come to you. Our team is diverse in skillset, with backgrounds in IT, military and the regular old non-cyber security industry.

If something's got you worrying, just come talk to me. I'd also like to hear if you have some sort of unusual or interesting problem.

[email protected]

dolorian | 2 years ago | on: Mickey Mouse horror film unveiled as copyright ends

It'll be interesting to see if Disney tries to stop it. If they do (maybe via trademark [which "should" fail]), it'll mean more publicity. If they don't, then the film will probably quietly make a bit of money and we'll see people playing around with more old characters in new lights.

I'm not super into mickey mouse, but the huge variety of rather enjoyable Sherlock Holmes parodies tells me that characters and stories becoming part of the public domain will be a net good for culture.

dolorian | 2 years ago | on: With Firefox on X11, any page can pastejack you anytime (middle button paste)

I couldn't get this working in librewolf, maybe the hardening it uses prevents this. It works like a hot damn in tor browser though, which is supposed to be fairly locked down. Don't forget to turn off javascript before you leave home, kids. In chrome based browsers it rewrites the X11 paste buffer if you select anything on the page that's running the script, which is effectively the old fashioned clipboard rewrite attack. This is a nice find, I like it.

To those wondering who would paste and execute without a second look, there are ways to hide text. You can also paste control characters, so if you pasted into vim the command would get executed without any visible feedback. Same could be true for emacs, someone who knows it better could pipe in.

Any time you run potentially malicious code (like clicking on a random link when you have javascript enabled) on the same computer as data you care about, you're taking a risk. Sandboxing is a compromise, but one that's usually worthwhile.

dolorian | 3 years ago | on: Can you buy the same ticket at a lower price if you buy it from another country?

eadmund's comment doesn't deserve all the hate. Carrying some sort of sharp object has been common since the stone age, and anyone who can't see the value in this has no imagination or life experience. What do you use to prepare food? If you're going carry-on only, your best bet is a small pair of scissors. 4 inch blade in USA, 2.36 (6 cm) in most of the rest of the world. In EU, pocketknives smaller than 6cm are allowed, and CATSA (Canada) was going to follow but USA said no. Americans hate knives and I have no idea why. Obviously, check the regulations yourself, don't just take my word for it.

If you're trying to reduce airline hassle, you kind of have to skip the handgun, mail it to yourself or get (borrow?) one at your destination. Whether or not you "need" one really depends on the purpose and location of your trip, but those details are too specific for this conversation. Also consider taking the train, since if you're carrying a handgun it's probably a domestic USA trip.

A tip for bringing back un-carryon-able items: Pack a simple and low bulk backpack inside your carry-on suitcase. If you decide to bring forbidden items back, check your carry-on suitcase and bring whatever you need for the plane in your backpack. This way you pay checked bag fees only in one direction and only if you really need to.

dolorian | 3 years ago | on: The 15-Minute City: Where Urban Planning Meets Conspiracy Theories

This is the real answer, but we're too used to the game of wealth redistribution, where we're all secretly hoping someone else will pay for what we want. It's very antisocial, it externalizes the costs of your actions onto everyone else.

Trucking causes 99% of damage to roads, but pays only 30% of the bill.

dolorian | 3 years ago | on: The 15-Minute City: Where Urban Planning Meets Conspiracy Theories

Part of the confusion comes from partisan thinking. WEF supports 15 minute cities (aka walkable neighborhoods) because it's a better use of resources, there are benefits for 99%ers and 1%ers alike, urbanists and ruralites. The trouble is that our polarized system means if you think the WEF is evil, then it's impossible for any of their goals to be beneficial to you. Compare: Many people today believe that Hitler was evil, but will accept that projects like the autobahn or innovations in rocketry were mostly beneficial.

Dismissing all opposing views as "hateful misinformation" like the WEF and governments do isn't useful either. It convinces those who were suspicious of your motivations that they were right about you. The WEF videos never really explain any of the potential for good, they just exclaim with glee that this is a great opportunity to change the world the way they want. Completely tone deaf, I'd say some of these causes would receive less resistance without WEF "helping".

When it comes to the walkable neighborhood issue, the real conspiracy is that automakers "convinced" governments to create infrastructure that's miserable to nagivate without a car. If you've never been to cities outside of north america then you probably don't even know what you're missing. Those who think freedom and privacy are important (I certainly do) might want to consider that a car results in licensing, insurance, license plate tracking and gives cops an excuse to detain you arbitrarily.

The last but probably most important issue that gets left unsaid is that the current system won't continue to work. North American cities are broke from (re)building roads to subsidize trucking companies and mcmansion developers, they can't afford to continue doing so without raising taxes 300%. Even bigger: we'll run out of oil in 50 years. We won't run out of energy, just the cheap and easily transportable form that we've become accustomed to. The options are build railways, or quit bothering with silly things like "trade", "travel" and "manufacturing".

page 1