• 0 Posts
  • 13 Comments
Joined 5 months ago
cake
Cake day: May 20th, 2024

help-circle


  • This is true. If you have DMARC and your RUA set up (with a working email (or one that doesn’t bounce at least)) along with SPF and DKIM, Google and MS will accept your mail. The only time it won’t at that point is if your IP is in the same /24 as a known spammer but so long as the spam stops, you’ll fall off the list. Some of the common spamlists allow you to request your IP be removed by request and I can only recall one list that almost nobody uses that makes you pay for the removal though there may be more I don’t recall.







  • There are a couple of OEMs like System76 and Starlabs that sell laptops with Linux on them, provide tech support for customers and so on.

    And no, installing most distros aren’t hard. You just click the buttons to proceed and fill out the username and password box, select your time zone and select your wi-fi network if you’re using wifi.

    You can do manual partitioning but why would you if you don’t know what you’re doing?

    Installing software in the GUI is as easy as installing software from the Microsoft Store. Just search or look around and when you see something you want, just click the Install button.


  • Well it isn’t actually a confirmed case. Ruiu, the original person reporting the issue wasn’t sure exactly what the surface area of attack was at the start. Ruiu Dragos, who is a security researcher believed it infected via speakers.

    Eventually Errata CEO, Robert Graham, said that if he spent a year, he could build malware that did the same and that it was ‘really, really easy’

    Eventually, Ruiu noticed that the initial stage of infection was from one of his USB sticks.

    The speakers part comes in that he found that the packets transmitted between badBIOS infected machines stopped if he disconnected the internal speaker and microphone.

    Meaning, that sure, badBIOS may communicate data with each other via speakers but that it has never been proven that it could actually infect another machine via speakers. However, that hasn’t stopped articles from conflating things.


  • I get the sentiment but defense in depth is a methodology to live by in IT and auto updating via the Internet is not a good risk to take in general. For example, should Crowdstrike just disappear one day, your entire infrastructure shouldn’t be at enormous risk nor should critical services. Even if it’s your anti-virus, a virus or ransomware shouldn’t be able to easily propagate through the enterprise. If it did, then it is doubtful something like Crowdstrike is going to be able to update and suddenly reverse course. If it can then you’re just lucky that the ransomware that made it through didn’t do anything in defense of itself (disconnecting from the network, blocking CIDRs like Crowdsource’s update servers, blocking processes, whatever) and frankly you can still update those clients anyway from your own AV update server which is a product you’d be using if you aren’t allowing updates from the Internet in order to roll them out in dev first, phasing and/or schedules from your own infrastructure.

    Crowdstrike is just another lesson in that.



  • Avatar_of_Self@lemmy.worldto196@lemmy.blahaj.zonemicrulesoft
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    4 months ago

    I regularly meet Linux elitists not understanding that I want a UI for my debuggers, not an automated script.

    I don’t know. It doesn’t make any sense that someone would be against a UI for something. It is just mostly a bunch of volunteers working on their own projects. I could see a volunteer saying something like “nah, I’m OK with it the way it is” because they are working on something for free, usually for themselves and sharing it for others to use and/or contribute to.

    It seems odd that you’d complaining to some project maintainers and calling them elitists for not working on your suggestion and even odder still because I’d imagine many would be thrilled for someone to contribute to building a UI, even if it’s just mock-ups. Unless you’re talking about some random people in the Linux community but I don’t really see any point in doing that since they probably have nothing to do with whatever projects you’re talking about.

    What would adding a GUI to a command line app even change about it as far as the command line? It isn’t as if you either get one or the other; you can have both. It just doesn’t make sense.