Local Networks Go Global When Domain Names Collide (krebsonsecurity.com)

submitted 3 weeks ago by BrikoX@lemmy.zip to c/cybersecurity@sh.itjust.works

13 comments fedilink hide all child comments

The proliferation of new top-level domains (TLDs) has exacerbated a well-known security weakness: Many organizations set up their internal Microsoft authentication systems years ago using domain names in TLDs that didn’t exist at the time. Meaning, they are continuously sending their Windows usernames and passwords to domain names they do not control and which are freely available for anyone to register. Here’s a look at one security researcher’s efforts to map and shrink the size of this insidious problem.

you are viewing a single comment's thread
view the rest of the comments

[-] Disaster@sh.itjust.works 2 points 3 weeks ago

I dropped truenas, ran fedora server + zfs dkms module. It's been perfectly fine for a couple of years (even accounting for that nasty silent data corruption bug..)

And domain permissions work properly now. People have been asking Ix for proper support for IPA for over a decade, they aren't interested in solving it.

[-] magic_smoke@links.hackliberty.org 2 points 3 weeks ago* (last edited 3 weeks ago)

Which is why I'm no longer interested in supporting them lol.

You don't get to run a commercial entity under the guise of open source software, and giving back to the community, while prioritizing inter-compatibility with the king of EEE over the most popular FLOSS alternative.

Rocky has been good to me, but I still miss centos.

Honestly the only thing I've had trouble getting working with freeIPA with no alternative is some sort of centralized ROM management. Then again they all kinda lack any sync features with retroarch which is what would really bring me to them anywho.

this post was submitted on 24 Aug 2024

29 points (100.0% liked)

Cybersecurity

5408 readers

85 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !cybersecurity@lemmy.capebreton.social !securitynews@infosec.pub !netsec@links.hackliberty.org !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 1 year ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social