nizbit's comments

On: Court finds Fourth Amendment doesn’t support broad search of protesters’ devices

[nizbit]

That’s cool but I just have a feeling that the Supreme Court will be like hold my beer and poof 4th DOES support this.

On: DialUp95 – A 90s inspired nostalgia hit

[nizbit]

Guess I don’t have any mail :(

On: Film students who can no longer sit through films

[nizbit]

Bring back the 90 minute movies!

On: When employees feel slighted, they work less

[nizbit]

I think zfg is a measurable quantity.

On: Start your meetings at 5 minutes past

[nizbit]

Seems like a technical solution to managerial problem.

On: Starlink Hits 9M Customers, Adds More Than 20k Users a Day

[nizbit]

That’s cool I guess if Starlink is your only option but damn if I give Musk a penny…oh wait

On: VPN location claims don't match real traffic exits

[nizbit]

Yeah happens to other “vpn” solutions like zero trust solutions like zscalar. Logs says the user in Buffalo, IP is in Toronto. Same for users on the southern border, us location and Mexican ip.

[ris → nizbit]

Zscaler enrages me with their use of the term "zero trust" in marketing, because due to their MitM-ing of TLS, they become a single-point-of-interception for all your organisation's traffic. "100%-trust" would better describe it for me, as you have to have 100% trust of Zscaler and anyone who has admin access to your organisation's Zscaler account.

On: Going Through Snowden Documents, Part 1

[nizbit]

There is the CIA Publication Review board as described by author and former CIA analyst David McCloskey https://www.npr.org/2025/09/29/nx-s1-5442567/the-new-spy-thr...

Nothing jaw dropping but he surprised on what get through

On: US declines to join more than 70 countries in signing UN cybercrime treaty

[nizbit]

Don’t have to look far to find out why.

Per the article: “Illicit flows of money, concealed through cryptocurrencies and digital transactions, finance the trafficking of drugs, arms, and terror. And businesses, hospitals, and airports are brought to a standstill by ransomware attacks.”

Then there’s this: Inside the Trump family’s global crypto cash machine https://www.reuters.com/investigations/inside-trump-familys-...

On: The Great SaaS Gaslight

[nizbit]

Don’t forget the tiers where security is held for ransom!

[gruez → nizbit]

You mean SSO? I think that's slightly disingenuous because it's still possible to be perfectly secure with username/password login. Sure, having SSO might prevent Barbra from accounting (who failed the last 3 phishing training sessions) from getting phished, but that's the company's problem, not the vendor's.

[JimDabell → gruez]

When a person leaves an organisation, it’s difficult to find all the various team accounts they have been added to in order to remove them. So you end up in a situation where people no longer in the organisation frequently still have access to anything non-SSO.

That’s a very obvious, legitimate security issue, why are you accusing people of being insincere about it?

[gruez → JimDabell]

>When a person leaves an organisation, it’s difficult to find all the various team accounts they have been added to in order to remove them.

Again, that's inconvenient but doable, just like phishing prevention.

>That’s a very obvious, legitimate security issue, why are you accusing people of being insincere about it?

I'm not denying it's a security issue, any more than I'm denying that phishing isn't a security issue. I even specifically mentioned the possibility of employees that fail phishing training. I'm objecting specifically to the "ransom" framing, which is a pejorative way to imply that companies have a duty to offer all security features for free.