Help & FAQs    Search BCF    Members    Groups    Events Calendar
Resend my activation email : Register : Log in 
BCF: Bike Chat Forums


Security

 Reply to topic
Bike Chat Forums Index -> The Geek Zone Goto page Previous  1, 2
View previous topic : View next topic  
Author Message

P.
Red Rocket



Joined: 14 Feb 2008
Karma :
PostPosted: 19:10 - 29 May 2025    Post subject: Reply with quote
My first proper job was configuring switches for M&S, they didn't take security seriously then, you could simply plug into a port and be on their network, zero security, full intersite, just wild.

I imagine they have tightened it since 2010 but jeez they couldn't care then Laughing
 Back to top
View user's profile Send private message Send e-mail You must be logged in to rate posts

Robby
Dirty Old Man



Joined: 16 May 2002
Karma :
PostPosted: 08:01 - 30 May 2025    Post subject: Reply with quote
P. wrote:
My first proper job was configuring switches for M&S, they didn't take security seriously then, you could simply plug into a port and be on their network, zero security, full intersite, just wild.

I imagine they have tightened it since 2010 but jeez they couldn't care then Laughing


I wouldn't be at all surprised if some of that is still there. Maybe with some fig-leaf VLANs layered on top, but with a whole load of people able to access everything as if they have a big flat network. Geoff refuses to change his ways of working, and it's easier to add him into a bunch of security groups.

Buying or building new stuff with pretty good security is easy. Adding security to existing systems/networks without breaking anything or upsetting anyone is difficult. Even more difficult when sorting out security on the corporate network costs as much as a brand new website, and a brand new website makes money.

The recent spate of attacks may be a wake-up call. Whilst I agree with the sentiment of blaming the attackers and not the victims - that mindset is what allows victims to be public about getting attacked - the victims are still somewhat to be blamed. If I park my bike in a Croydon car park and go off to the arcade for 5 hours, it's somewhat my fault if my bike isn't there when I come back.

I have heard anecdotally of at least one big tech company that is equally chaotic behind the scenes. A sprawling network with poor overall security is not limited to UK retail companies.
 Back to top
View user's profile Send private message You must be logged in to rate posts

P.
Red Rocket



Joined: 14 Feb 2008
Karma :
PostPosted: 10:12 - 31 May 2025    Post subject: Reply with quote
Robby wrote:
Adding security to existing systems/networks without breaking anything or upsetting anyone is difficult.


Thats a definite 100% fact, we went full hardcore at one point and it was a faff for most people that didn't know where they were accessing and shit broke.
 Back to top
View user's profile Send private message Send e-mail You must be logged in to rate posts

GettinBetter
Crazy Courier



Joined: 20 Jun 2019
Karma :
PostPosted: 18:48 - 22 Jun 2025    Post subject: Reply with quote
I can't belive you're talking security, and then have the gall to include Microsoft passkeys and anything Google in the same sentence.

God help you when TPM gets upgraded to lock you out of your own PC, should you ever want to install a program not on Microsofts allowed list (as per Apple).

All Microsoft OS's will be locked down primarily for their use. They will use and abuse all access to your PC via the TPM. You've obviously never listened to Bill Gates' rantings about controlling humans.

Again Dystopia dressed up as Utopia, as per usual, with the all too familiar "it's all for your security, safety, and to protect your files", all the time you're sticking all your files on their computers. AI are particularly good at scraping web files, and if it's not AI ripping them, it'll be the data centres storing your files that sell them.

In a previous thread I saw you guys talking about NAS, and I thought you actually weren't as stupid as I thought, and was ready to give you some serious credit, then I read this shitty thread. (BTW, Synergy are locking you into their OS only, Ugreen allow you to use quite a few other OS's to run the server. Just saying.)

How the fuck, can you talk about security, then hand all your data and passkeys over to some unknown entity??? and still think you have security.
 Back to top
View user's profile Send private message You must be logged in to rate posts

Easy-X
Super Spammer



Joined: 08 Mar 2019
Karma :
PostPosted: 01:36 - 23 Jun 2025    Post subject: Reply with quote
Well yes, I think I did say I wanted to get away from Google. I now have a system - which shall remain nameless for reasons of security Wink - totally in my own hands and locked with a physical key. I've cleared out all the passwords from Google but I expect the c*nts probably have a backup somewhere. There's not much I can do about that, eventually it'll age out and be irrelevant.

FYI "passkey" is the colloquial name for features of the WebAuthn standard for getting rid of passwords. Microsoft supports storing passkeys but they don't own* the system.

*They are part of the W3C consortium but then so are a lot of other people and businesses.
____________________
Royal Enfield Continental GT 535, Husqvarna Vitpilen 401, Yamaha XSR700, Honda Rebel, Yamaha DT175, Suzuki SV650 (loan) Fazer 600, Keeway Superlight 125, 50cc turd scooter
 Back to top
View user's profile Send private message You must be logged in to rate posts

GettinBetter
Crazy Courier



Joined: 20 Jun 2019
Karma :
PostPosted: 07:44 - 23 Jun 2025    Post subject: Reply with quote
Easy-X wrote:
Well yes, I think I did say I wanted to get away from Google. I now have a system - which shall remain nameless for reasons of security Wink - totally in my own hands and locked with a physical key. I've cleared out all the passwords from Google but I expect the c*nts probably have a backup somewhere. There's not much I can do about that, eventually it'll age out and be irrelevant.


Cool, me too. They discredit passwords as difficult & complicated, which is true if you're a lazy thick cunt. What they don't say is that they also rely on private and public keys, which is exactly the same as a passwords do. A good password (one with as few digits, and as many special chars as you can get away with, which will depend on the person who sets up the sites password config, and anyone using less than 20 chars is asking for trouble) is more difficult to find using brute force. This of course is if you assume the hacker is using the ASCII table and starts comparing at 'A' and that all the 'special' chars will be compared last.


Easy-X wrote:
FYI "passkey" is the colloquial name for features of the WebAuthn standard for getting rid of passwords. Microsoft supports storing passkeys but they don't own* the system.


Of course they do. Microsoft & Google helped create it, and use their overwhelming media resources to proliferate it's take up. It's based on Bio inputs (fingerprint or facial recogniton, a pure tracking/control requirement of the WEF) Does ANYONE actually look at WEF policies!! It's all in plain sight, albeit dressed up in nicey nicey language for simpletons.

Easy-X wrote:
*They are part of the W3C consortium but then so are a lot of other people and businesses.


Just remember, when they say they are helping YOU, they mean they are helping themselves, to your data. W3C are part funded by the EU which in turn means the WEF by the back door.
 Back to top
View user's profile Send private message You must be logged in to rate posts

Easy-X
Super Spammer



Joined: 08 Mar 2019
Karma :
PostPosted: 10:17 - 23 Jun 2025    Post subject: Reply with quote
GettinBetter wrote:
They discredit passwords as difficult & complicated, which is true if you're a lazy thick cunt.


Unfortunately most ppl in the world are LTCs Wink Which is why the system was created. And I'd love to hear more about your bugbear with asymmetrical encryption/verification (public/private keypairs).

GettinBetter wrote:
It's based on Bio inputs (fingerprint or facial recogniton, a pure tracking/control requirement of the WEF)


"Can I hand out this passkey?" is the question and the device wants to be really certain its in the presence of its owner. You don't have to use biometrics for this verification step. At the end of the day if you don't want to be tracked then don't use a mobile phone. Not even a dumb phone as even they can be tracked with cell tower triangulation.
____________________
Royal Enfield Continental GT 535, Husqvarna Vitpilen 401, Yamaha XSR700, Honda Rebel, Yamaha DT175, Suzuki SV650 (loan) Fazer 600, Keeway Superlight 125, 50cc turd scooter
 Back to top
View user's profile Send private message You must be logged in to rate posts
  Display posts from previous:   
This page may contain affiliate links, which means we may earn a small commission if a visitor clicks through and makes a purchase. By clicking on an affiliate link, you accept that third-party cookies will be set.

Post new topic   Reply to topic    Bike Chat Forums Index -> The Geek Zone All times are GMT
Goto page Previous  1, 2
Page 2 of 2

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum

Read the Terms of Use! - Powered by phpBB © phpBB Group
 
Debug Mode: ON - Server: birks (www) - Page Generation Time: 0.07 Sec - Server Load: 0.96 - MySQL Queries: 13 - Page Size: 58.23 Kb