Readit News logoReadit News
tortue0 commented on When MFA isn't MFA, or how we got phished   retool.com/blog/mfa-isnt-... · Posted by u/dvdhsu
codebje · 2 years ago
I've had a wide range of responses from people calling me when I tell them I won't give personal details out based on a cold call.

A few understand immediately and are good about it. Most have absolutely no idea why I would even be bothered about an unexpected caller asking me for personal information. A few are practically hostile about it.

None, to date, have worked for a company that has a process established for safely establishing identity of the person they're calling. None. Lengthy on-hold queues, a different person with no context, or a process that can't be suspended and resumed so the person answering the phone has no idea why I got a call in the first place.

(Yet I'll frequently get email full of information that wouldn't be given out over the phone, unencrypted, unsigned, and without any verification that the person reading it is really me.)

The organisational change required here is with the callers rather than the callees, and since it's completely about protecting the consumer rather than the vendor, it's a change that's unlikely to happen without regulation.

tortue0 · 2 years ago
I've had my cable company call me directly about an account issue and told them I couldn't validate it was them and the person got somewhat irate with my response, insisting there was no one I could call to verify them and that it has to be handled on that call. Turns out it was just a sales call (up selling a product) - which probably speaks to the level of talent they hire for that.
tortue0 commented on UK air traffic control meltdown   jameshaydon.github.io/nat... · Posted by u/jameshh
sam0x17 · 2 years ago
Why on earth do they not have GUIDs for these navigation points if the names are not globally unique and inter-region routes are commonplace?
tortue0 · 2 years ago
They do and use lat/lon in some cases. Reviewing and inputting that (when being done manual) is another story - but it's technically possible.
tortue0 commented on AOL pretends to be the internet   thehistoryoftheweb.com/po... · Posted by u/janvdberg
TimJRobinson · 2 years ago
If you use a VPN you get CloudFlare captchas all the time
tortue0 · 2 years ago
ddos as a service providers (aka booters/stressers) proxy L7 request floods via VPN providers. At some point the VPN providers might actually care to kill off those accounts / better tighten up their free tiers, but they don't care at the moment.
tortue0 commented on Flexport CEO resigns a year after joining logistics company   geekwire.com/2023/former-... · Posted by u/chef-steph
dave78 · 2 years ago
Same thing at my company, only it was a former Microsoft employee who brought along all his buddies. They screwed up a bunch of stuff because they didn't understand our market or customers, and then all slowly got let go before having to contend with the full consequences of their bad decisions.

We're now in a multi year recovery process.

tortue0 · 2 years ago
Felt this too with MSFT folks.

I never want to hear "rhythm of the business" again.

tortue0 commented on Get a cable modem, go to jail (1999)   telecom.csail.mit.edu/jud... · Posted by u/resolutebat
thatoneguy · 2 years ago
I was a "broadband technician" around then and AT&T Broadband did not give AF if you were stealing cable or not. I only handled cable modem installs and quit after a year to go major in philosophy and because:

- Getting quietly threatened once (with AR-15 up against the customer's front door) on a troubleshooting call that I wasn't able to leave until "the internet started working".

- Having to increasingly go do cable TV disconnects because people were usually in a bad way and I had more than one colleague that had either had a gun pulled on them or straight-up shot and left to die up a pole for most of a day while trying to disconnect cable.

- Having to increasingly go on cable TV installs because people's shitty TVs backfeeding electricity into the cable line meant I was getting zapped at least once a week.

That said, I met a lot of cool people, gave out a lot of free TV/HBO because I didn't care unless the customer was a dick, wrote down a lot of funny stories and ultimately realized that I could go college in spite of dropping out of high school because I happened to install the non-traditional student advisor's cable modem.

My colleagues said they'd see me back at the shop in four years after I graduated with a philosophy degree. Jokes on them, I dropped out after getting a job at Google.

tortue0 · 2 years ago
When I worked at an ISP in the 90s the amount of threats and verbal abuse from customers was wild.

One guy who ran a event ticket operation (selling tickets to events) we installed a T1 for the phone company wouldn't go out unless they could bring a security guard. The same guy once came to our office and waited outside in the parking lot and followed one of my coworkers home demanding that she fix his internet. Her father came out and confronted him and he took off.

Another time someone was mad that his address didn't qualify for DSL because "the man was keeping him down from getting fast internet".

Later in life I worked at the phone company and linemen told me stories about being high on a pole in rough neighborhoods and being accosted by folks on the ground brandishing pistols demanding to know whose phone line they were tapping (they tried to explain that stuff is done remotely but they didn't understand).

tortue0 commented on ISPs should not police online speech no matter how awful it is   eff.org/deeplinks/2023/08... · Posted by u/mantiq
ehhthing · 2 years ago
I'm not entirely sure about this but I believe that HE may have been null routing rather than just dropping routes.
tortue0 · 2 years ago
Didn't someone actually get the configs that showed it was a bgp prefix filter denying accepting the bgp announcement from a customer? Isn't that a far cry from null routing? They're just choosing not to learn it from a customer. And if you buy the "HE is a tier 1" then whatever other peers were announcing the prefix would have been accepted by HE.
tortue0 commented on NASA mistakenly severs communication to Voyager 2   theregister.com/2023/07/3... · Posted by u/belter
tremon · 2 years ago
it’s probably copied from some Serious Business network OS

I wouldn't know who came first, but it's a feature of JunOS (Juniper) as well: every config apply first applies the config, then waits for confirmation on the terminal where it was ran. If confirmation isn't given within X seconds, it reverts the config change.

tortue0 · 2 years ago
That only applies when you do "commit confirmed".

u/tortue0

KarmaCake day26July 26, 2023View Original