Question, if I log onto a windows computer using a smart card and then retrieve my domain credentials with $creds = get-credential -credential “$ENV:username” and echo out my username with echo $creds.username I get a string of gibberish that starts with two @@. What is that string? Is it some kind of hashed/encoded value?
@TerryChia If it returns true/false for valid password or not, then GET. If it returns some sort of a temporary key, then POST
@LucasKauffman Technically speaking, a token generated after authentication and used to track authentication for subsequent request is the definition for keeping a state.
@TerryChia Just to be sure. You send a password to service A, which sends it to your microservice. If the microservice says the password is okay, then service A generates a token and sends it to you?
@Adnan I want to remove the need for me to write the password handling stuff for every single webapp. I'm gonna wrap this in an easy to deploy Docker container. No real advantage, just making my life simpler.
Absolutely no. It goes back to the "chicken and the egg" thing.. One of the things that Microsoft as well as other vendors warn against is installing/re-installing the OS when you have a virus/malware/or other rogue software. You ** MUST ** have the "bad software" removed and/or disinfected fi...
Reinstalling is not always enough to kill malware because it can hide outside the normal hard disk space. Perhaps in the bios/efi, perhaps in some firmware (harddisk, network card etc.).
Though in practice almost everybody assumes reinstalling is enough.
for some hardware these are persistent, for some it only lasts until the next reboot.
If you just naively format+reinstall the virus might survive in parts of the harddisk outside the partition you format. Perhaps he's referring to that.
@Xander No, it's Sierra Entertainment (responsible for series such as Police Quest and Leisure Suit Larry) returning to life after it was butchered by Vivendi and Activision mid-2000s.
> TO WHOM DOES THE LAND OF ISRAEL BELONG?? An Israeli Sense of Humor at United Nations set the record straight. An ingenious example of speech and politics occurred recently in the United Nations Assembly and made the world community smile. A representative from Israel began: 'Before beginning my talk I want to tell you something about Moses: When he struck the rock and it brought forth water, he thought, "What a good opportunity to have a bath!" Moses removed his clothes, put them aside on the rock and entered the water.
@FEichinger Forcing an OS update is hard. Forcing a browser update, not so much. Apple, Mozilla, and Google all manage it just fine. There's no reason Microsoft can't have success with the same model.
@kalina And while Activision is known for failing to produce anything new and original, bringing back these old IPs would still be a different move. And, unlike EA, they actually bring their dead studio back to life in a way.
everything in the early days of computing was cross platform
Game released! For the following platforms:
BBC Micro, Acorn Electron, Apple II, Amstrad CPC, Commodore 64, ZX Spectrum, MSX, Tatung Einstein, IBM PC compatible, Acorn Archimedes, Amiga, Atari ST, Nintendo Entertainment System
nowdays if you ask a developer to create something for consoles and PC they start crying
Ok. so the way I understand PAT (from a security standpoint) would help with security through obscurity, i.e. the source address/path taken may be harder to determine. Is this correct?
I am unsure how else it could be used as a security measure
@NoTime The security aspects of a point-after-touchdown can be summed up by the quote "The best defense is a good offense." The fact that you get an extra point means that the opponents have a harder time catching up, thus, a more secure position for you.
If you're talking about port address translation, however, I've always thought of it like any other form of NAT. It's a network management tool. The security benefits, when any, are more or less incidental.
Speaking of inscrutable acronyms, anybody using SNI in Internet-facing production systems? Any anecdotes on how well it's working, and any problems you've seen?
Man Atmel is really annoying. They have a bunch of pretty cool crypto chips, but in order to get your hands on a datasheet they whine at you to sign an NDA
Absolutely no. It goes back to the "chicken and the egg" thing.. One of the things that Microsoft as well as other vendors warn against is installing/re-installing the OS when you have a virus/malware/or other rogue software. You ** MUST ** have the "bad software" removed and/or disinfected fi...
