• 0 Posts
  • 125 Comments
Joined 3 years ago
cake
Cake day: June 15th, 2023

help-circle


  • I’ve seen the server version in action. It hooks into the linux audit subsystem, and traces every system action and operation. The data it collects is super detailed, and designed to track which user, which program, and which servers are connected to, which files are read and written to track and potentially halt lateral movement through networks.

    For regulated enterprise environments, it satisfies IDS/IPS/EDR requirements, and it’s all wired up with their M365/Intune/Defender management portal. It makes some neat reports automatically about how data flows through a network, especially if all the points on your network are licensed ($$) and included in the defender system.

    For personal systems. Yikes. Just Yikes.

    It also relies on modern CPU features, so it would complain loudly about our older servers, and spam logs with messages about how it couldn’t run, even though the system was updated to a current version of linux. It also had (last year?) some bugs that had it spinning wildly on a closed socket, which was fun to find :-/.



  • I had a picture of the device since I was curious, but I spotted at Walmart, and some other stores, a Cellular/Wifi/BT gateway that was branded by some company providing facilities services. As far as I can tell, the device was intended to provide secure connectivity to some service provider. I found a similar device in the freezer section of another store.

    I imagine that there is remote control/remote monitoring of all the freezers or other on-premise machinery (which, is a perfectly sound thing to do), but if the central provider doesn’t take security seriously, and stay on top of their systems operations, can easily be the target for any kind of attacks.

    More practically, I suspect that everyone involved has insurance whose cost is much less than ongoing proactive security + maintenance of their systems, which is why these incidents don’t seem to instantly put these companies out of business.





  • This is the pretext for taking away individual’s rights to general computing – because once all the providers have guard rails and are locked out, individual users with local hardware are the last source for ‘illegal content’. “We have to scan everything you do on your local computer, or you could be doing something we don’t approve of”. https://lemmy.world/post/52743759 <-- see this story up on the front page just now. She (foolishly) thought her prompts in OpenAI were private to her, and now she’s charged with “sending a threat in a way that others can read” – we won’t be able to use our computers for private diaries or planning anymore the more they get locked down to only ‘approved’ data and programs.

    And remember, it starts with CSAM, and then it moves on to “illegal content”, then “terrorist content” – and how many times has the Trump said “if you are against the president and the laws I’m enforcing, you must be a terrorist?” …