MS Word conduit?
398 posts • joined 14 Sep 2010
One or two banks perhaps, but so many different businesses within a short space of time should make one think is there more to this than meets the eyes? Or is that just my normal suspicious self?
Still, glad I never made the decision to move over to using a mobile application. Never liked or trusted them.
Today the RBS group of banks (that all use the same firewall with such a single point of failure?), Barclays yesterday, Lloyds not so long ago along with Halifax. And so the list of names goes on. Seems to becoming more prevalent - and at a time when King Cash is being threatened. It does make you wonder if somewhere in the world there is a rubbing of hands.
To secure YOUR sending emails you'll need the SPF/DKIM/DMARC trio applied - but that doesn't stop fraudulent email from coming in to you. In addition to setting up your own email receipt rules (like how can an email purporting to be from your own business be coming in from outside your domain) you need every other email sender to apply the trio - and/or use (read pay for) a propriety protection or alert system. Which is a growing industry.
The IETF have had plenty of time - and examples - to examine how broken email RFCs are and, along with the apwg and MAAWG, could have started to address some of issues (like checks on the header from address in addition to the envelope from address, IP/domain chains....). But perhaps they have realised that as use of email has progressed beyond that envisaged that it may be easier to try to educate to end user. Unfortunately that cannot be applied in many cases.
Had a thought about this way in, extra pay, chance to mess a bit with some more interesting pentest/hack/cracking stuff...then realised that perhaps the joint bit wasn't what I thought it could be when I read about the sailor being busted on HMS Queen Liz for peddling.
Sherlocks bong is the nearest thing
Indeed. "That enabled them to expand from using just BlackBerry devices into support for Android, iOS and Chromebooks. "I was proud of that," he adds" Most still using Blackberry phones, odd bits like MoD accept Apple in "some" places. Some are using Windows OS phones.
Android? CESG passed Samsung Knox a couple of years ago but hasn't got traction yet.
But yes, Seems a nice guy. But why years working in a relatively low paid job!
One of the issues often seen is that "management" are keen to be known as "experts" but do not have the aptitude or passion for the subject.
Once you get "management" to understand that they have to recognise that those with the correct aptitude and passion for the work should have money spent on them to obtain qualifications rather than "managers" who use the cash to attend "cyber" conferences, then you might, just might, get an improvement.
And Senior Management also need to start understanding that they need IT managers in place who also have an aptitude and passion for the work - and these need to be listened to. So often you see IT Dept managers who have no operational interest or ability but know who to appease Senior Management as that is where they have set their target to get to.
“Deploying a DMARC policy where p=none along with a relevant SPF record is simple, but it is only the first step......"
Just having a DMARC record in place is a chocolate fireguard. Perhaps when writing reports like this the folk concerned really should make it clear that you also need a SPF or DKIM as well - as a minimum. But best to have both.
And yes we all know that DMARC+SPF alone "can" break when mail servers forward mail when p=reject. Particularly when mail forwarders or loadbalancers overwrite/insert their sending IP address in the header :-(
You don't need a GGW account for a pension forecast, just a printer attached to your PC to print a form off and post it. Keeps folk employed (post office, drivers, civil servants).
And before you comment - how do you know if your application isn't just printed off at the other end and handled just like a posted application :-)
Inland Revenue service? That's not existed for over 10 years.
If it refers to HMRC then they "got off their arse" and implemented DMARC and SPF back in 2013 and have been trying to get others to follow suit. Looks like their actions have been noticed and now NCSC have taken up the baton.
If only that were true. Trouble with GDS is that this was a Cabinet Office initiative bringing in "experts" from outside the Civil Service to provide expert advice on how IT dev should be done. So althought a number of these are now CS they are not old stream....who have got their hands dirty by keeping legacy systems running and trying to do things on a shoestring as all the funding appears to go to new web functions with "cool" fonts.
£450m given to Depts would result in a lot of infrastructure improvements...but to GDS?!!!
Then again are the Beeb just using Akamai for CDN rather than CDN and DDoS protection? They do have some IP addresses out in plain sight so a DDoS could have gone through the back door
Try looking up without the www and you get
canonical name bbc.co.uk.
canonical name a1733.g.akamai.net.
So either it was a massive DDoS that could overcome Akamai's Edgeserevrs (assuming BBC do not just use European ones) or there was a bit of a cockup in some configuration activity within BBC or Akamai.
I remember breaking ground on this back in 1975 when working for the Brunel Exhibition Rotherhithe through CSV. Two of us a shovel and a sledgehammer working a derelict site. Didn't make much of an impact and annoyed neighbours on a Sunday morning but found interesting hoards of illicit goods buried under rubble on the site.
The thing about BT is that they are causing denials themselves with their CPcloud server acting as a mail forwarder. If you look at BT they are running THREE email services under the name of BTInternet.com, one of which uses the Yahoo! mail service. To direct to mail to the correct service the CPcloud server is stripping off the original header info and substitutes itself as the sender. A great way to get mail be labelled as Spam.
Was watching a demonstration the other week of how raptors (feathered type!) can be trained by dropping lures from quadcopter.
Set up a flying pattern of direction and varying heights then have it drop the lure at a set way point before the 'copter returns to base.
Being from the 'Boomer years' I don't have a telly, don't want one and can't really see the need for one. Laptop and 26" monitor with speakers is quite adequate for watching the rare programme from BBC on iPlayer (didn't get that one Apple! - sorry and the logging in aspect of the commercial channels is a pain) or for watching DVDs/Bluray.
And now Amazon/Lovefilm are introducing unlimited film streaming even less of a need for a telly and the £140+ licence to pay for the extortionate paypackets of lovvies and "DJs". Any sport can be watched in the company of others in the pub - supporting local business and enterprise - as many people who have a telly do as well.
From the latest 3 Price Guide:
All 0800, 0808 and 0500 calls are free.
Your data allowance can be used as a personal hotspot (we used to call this tethering) – if you choose a plan with all- you-can-eat data, you can use up to 2GB of this allowance each month as
a personal hotspot.
So yes you can give up your current contract to get free 0800 calls and lose your unlimited tethering.....or keep the tethering and not call any 0800 etc numbers.
Biting the hand that feeds IT © 1998–2018