tag:blogger.com,1999:blog-5110371362758565708.post5119688937149879518..comments2023-10-03T03:42:11.662-07:00Comments on La Esquina de un Migrante a Linux: Learning from the Hacking of MintMegatotorohttp://www.blogger.com/profile/02268018256762186695noreply@blogger.comBlogger6125tag:blogger.com,1999:blog-5110371362758565708.post-24352684458618758682016-02-27T16:07:42.453-08:002016-02-27T16:07:42.453-08:00Thanks for the trick! And I agree: you can't k...Thanks for the trick! And I agree: you can't know if they will force their entry or not, but you can always try to make things more difficult for them.Megatotorohttps://www.blogger.com/profile/02268018256762186695noreply@blogger.comtag:blogger.com,1999:blog-5110371362758565708.post-4302566381301855282016-02-27T16:04:41.049-08:002016-02-27T16:04:41.049-08:00I totally agree. I was impressed by the honest an...I totally agree. I was impressed by the honest and prompt response by those at Mint HQ. That shows that they value each Mint user and that each one of them counts. Instead of trying to fool everyone to save face, they disclosed the problem directly and investigated it quickly. You cannot say the same of big software giants these days. Megatotorohttps://www.blogger.com/profile/02268018256762186695noreply@blogger.comtag:blogger.com,1999:blog-5110371362758565708.post-63791250157731442062016-02-27T15:58:30.007-08:002016-02-27T15:58:30.007-08:00Your observation about fingerprints is right. Sti...Your observation about fingerprints is right. Still, I do not think your signature is ill-advised. First, not all Linux Mint releases were compromised; second, the professional way in which those at Mint HQ handled the problem shows their high level of commitment to Mint users. They can rest assured that Mint will get past this unfortunate issue. Megatotorohttps://www.blogger.com/profile/02268018256762186695noreply@blogger.comtag:blogger.com,1999:blog-5110371362758565708.post-41697801779828540592016-02-27T12:44:27.835-08:002016-02-27T12:44:27.835-08:00We can also learn from the convenience of using Wo...We can also learn from the convenience of using Wordpress. It's a very potent web site engine and very wide-used. It wouldn't be uncommon for someone who knows how WP stores everything (which by the way is pretty straight forward) to have no trouble finding security info (once it has breached inside).<br /><br />You want a well known though still cool way to check if a site might be running wordpress? Just add /wp-admin to the home url.<br /><br />See this example: <br />http://www.myrath.com<br /><br />that's a band page that runs wordpress. And this is where you would login as a user.<br />http://www.myrath.com/wp-admin<br /><br />Many might say that changing the login directory would accomplish little against a hacker, but I'd say at least it shows you're trying xD.Santiagohttps://www.blogger.com/profile/10169923258769397177noreply@blogger.comtag:blogger.com,1999:blog-5110371362758565708.post-6069636371693124612016-02-27T11:14:48.784-08:002016-02-27T11:14:48.784-08:00Good post!
PV is right. Biometrics is not what p...Good post!<br /><br />PV is right. Biometrics is not what people think it is. Similar faces unlock phones, for example.<br /><br />I think the people at Mint handled the breech as very few do: with absolute honesty. I believe that the negative impact on Mint will be minimal thanks to that.Mechatotorohttps://www.blogger.com/profile/15816943718402270287noreply@blogger.comtag:blogger.com,1999:blog-5110371362758565708.post-77290429620703789662016-02-27T09:52:41.703-08:002016-02-27T09:52:41.703-08:00Don't forget that in the specific case of fing...Don't forget that in the specific case of fingerprints, people think that fingerprints are uniquely identifiable, but in reality the captured print images can be very similar between different people (even without tricks like extracting and printing a mold of someone's fingerprint). With all of this in mind, I realize that my standard comment signature [below] may seem a bit ill-advised.<br />--<br />a Linux Mint user since 2009 May 1PVhttps://www.blogger.com/profile/03204919785416600206noreply@blogger.com