Forgot your password?
typodupeerror

Comment Re:There ARE corporate entities that force chrome (Score 1) 66

Maybe not laziness. Chrome -> Google -> Major PG&E customer.

Back when I worked for Boeing, we were a Macintosh shop. Then, Bill Gates started his annual dinners for the movers and shakers in the IT industry. The more Microsoft stuff your company had, the closer they seated you to Bill. Our CIO had to sit in the back of the room. He came back and announced that we'd be scrapping all the Macs and switching to Windows.

When it comes to corporations, you can never tell from which end the technology is driven.

I still see it as laziness of design. It goes back to the days when sites required you to use Internet Exploder, er, Explorer... because it followed a different implementation track than Netscape/Mozilla, and IE accepted broken HTML because Internet Insecurity Server (IIS) would serve it that way. When you have defined standards and follow them with your site design, the browser a user chooses when visiting your site should be 100% irrelevant, and if it is that is the fault of the browser maker because they do not implement the standard. If you develop your site to require a certain feature of a specific make of browser be used, the fault is yours for developing a browser-specific site.

Comment Re:How did they get initial access to the routers? (Score 1) 64

Yeah, I read through those... and found that while it described a vulnerability, it was still light on actual exploit details.

Did they compromise the inward facing web interface, or an outward web interface? Did they do it through social engineering, or through malware running on devices on the internal network? Was the malware persistent or was it a drive-by instance running a portscanner in a browser instance?

Basically, the question I have is - would flashing say, openWRT on these devices been enough to prevent network intrusion, or were they already inside the gates to begin with?

Comment Re:How did they get initial access to the routers? (Score 2) 64

The linked articles are remarkably light on details of how the routers were compromised. Were they breached from the internet side due to backdoors or poorly implemented services? Was it some sort of configuration default for remote administration that was just bulk abused? Or were the routers compromised from inside the network by malware running locally on machines, or on malware compromised pages? Was it due to remote code execution or was it due to default admin credentials or easily guessable passwords?

Kind of hard to defend against a threat if they won't tell you how the deed was done.

Comment Re:There ARE corporate entities that force chrome (Score 1) 66

Same happens where I work. They default everything to Chrome but allow you to use Firefox and a couple of others as well. I just restrict my use of Chrome to the corporate intraweb stuff (training, help desk, etc). Overall, it's laziness of design of those intraweb sites... they force the developers to use one methodology over another instead of building things to a browser-agnostic standard.

Comment Pay up or wallow in the dump (Score 2) 75

Bots and other bad actors thrive in free (as in beer) environments, for reasons that should be obvious. If we want to do anything meaningful about them, sites will need a nominal but real fee to use.

It's not what anyone wanted, but "free" was always inevitably going to lead to the Internet becoming a dump. The free ride is over.

Slashdot Top Deals

"I have not the slightest confidence in 'spiritual manifestations.'" -- Robert G. Ingersoll

Working...