andrew

I'd love it if there was a way to make sweat not turn my touchscreen into a game of roulette.

I doubt he has a crypto wallet of his own. Probably an account on coinbase though.

Not to mention you really can't hide that other drive from windows, and I'm sure a lot of the security tools would start screaming about new storage added when not expected. Data Loss Prevention is a big deal and random storage showing up doesn't often mean the user has good things planned.

Yeah, this is an important point tbh. Vlans alone don't add any security if your firewall doesn't do something to prevent it, as your router will happily forward packets to the next vlan. It should be on a DMZ vlan, meaning traffic is allowed in at the firewall but not to any other internal vlans.

He wouldn't get anything, officially. He'd be off the books in some offshore military prison.

Everyone starts somewhere and learns as they go. You did too.

And you can even do this with luks on lvm.

Hire more lawyers for the rest of his crimes?

u/spocktacular

This vulnerability has nothing to do with password strength or security and everything to do with password reset security, i.e. email and improper handling of parameters to that reset API call.

Passkeys are interesting and potentially quite strong but they're going to have to fall back to the same old reset mechanism if you e.g. drop your passkey device (phone) into a lake.

This feels like a data issue then. Maybe one of the formerly top N instances had a weird unexpected Unicode character that caused a parse failure and it just fell out of the top N.