* Posts by OrangeDog

13 publicly visible posts • joined 12 Apr 2016

NVD slowdown leaves thousands of vulnerabilities without analysis data


It gets worse

Meanwhile, the NVD API basically died a week ago, with major outages causing various scanning tools to fail, and people to scrabble about looking for mirrors and caches.

For password protection, dump LastPass for open source Bitwarden


Learning from experience

On the other hand, LastPass has been attacked multiple times, and have recovered and fixed the issues that lead to them. Resulting in a stronger product and experienced security staff.

How can you tell whether alternatives aren't more vulnerable but simply haven't been targeted yet, as they're not currently as big?

Meltdown The Sequel strikes Intel chips – and full mitigation against data-meddling LVI flaw will slash performance


Re: How long before a meaningful exploit arrives

If you trust everything that runs on your cloud then you're fine. If, however, you are relying on multi-tenant isolation to then it becomes an issue.

The major impact is on the big cloud providers, whose clients all have to suffer performance degradation to avoid leaking secrets to each other.

Grab a towel and pour yourself a Pan Galactic Gargle Blaster because The Hitchhiker's Guide to the Galaxy is 42


Most of the most recent series was adapted from And Another Thing, by Eoin Colfer.

Micro Focus chairman Kevin Loosemore cuts himself loose as merger with HPE Software continues to haunt biz


Some former Autonomy assets

The bulk of HPE Software was the bulk of Autonomy.

The bits HP Inc took were the CMO-facing friendly frontend stuff (mostly from previous Autonomy acquisitions), which quickly had the core Autonomy software stripped back out of it.

Iowa has already won the worst IT rollout award of 2020: Rap for crap caucus app chaps in vote zap flap


> It had to be side-loaded onto the phones

I don't know about Android, but Apple wouldn't allow an app this broken to be published.

Firefox 72: Floating videos, blocking fingerprints, and defeating notification pop-ups


Re: I hate that Firefox is the least terrible option

Strange. I've never seen any video bypass it.

Maybe I just don't go anywhere that doesn't use <video>.


Re: I hate that Firefox is the least terrible option

> Ditto that for audio.

Yep, it has that setting too.


Re: Floating Videos? Arrrrgggh!

Firefox does that too.

Stack Overflow makes peace with ousted moderator, wants to start New Year with 2020 vision on codes of conduct


Re: The article is...not great

> She merely questioned if it was still acceptable to use gender neutral pronouns if she was unsure of which pronoun the poster would prefer.

No, she asked if it was acceptable to not use any pronouns even if the subject has explicitly stated their preference.

Slack cuts ties to IRC and XMPP, cos they don't speak Emoji


Re: Emojis... where's the one for *vomit* ?

There is, but apparently El Reg doesn't do Unicode.

> The post is required, and must contain letters.

> The post contains some characters we can’t support

GitLab.com luckily found lost data on a staging server


Re: +-

I assume they think ± means "approximately"

Windows 10 debuts Blue QR Code of Death – and why malware will love it


"to prevent damage to your computer"

All (good) systems do this, just with more technical messages about why exactly damage would occur otherwise.