Hacker News new | ask | show | jobs
by DelaneyM 360 days ago
It’s not much harder to just harden your system to not be vulnerable in the first place, and that protects your from a lot more.
5 comments

> It’s not much harder to just harden your system

'just' harden the system is not easy.

But installing something like a vmware guest driver is easy, as even a non-technical user can do it following some basic instructions.

Defense in depth
Agreed - like using a non admin account.
How does that protect against ransomware?
Limits the blast radius to only the files that the more limited user has write access to.
The files I normally have write access to are my important files though.

Immutable snapshots/offline backups help with those.

It's more important in a corporate setting. Lateral movement inside the network is much more likely if the attacker has local admin.
Why would local admin have relevance to network movement?
on the flipside i feel like privilege escalations are a dime a dozen
Please tell me what tools you use to receive future zero-day vulnerability patches.
To be fair the vast, vast majority of exploitation that we see (especially in the news) comes from sub-par security setups and poor training/architecture. That’s no even going into security monitoring which most companies don’t or barely have.

Zero days account for very small amount of exploitation in comparison and by definition are unpatched so I think the commenter was right to point out the basics.

Qubes OS should protect you even from unknown vulnerabilities as long as you use its compartmentalization approach. Works for me (or so I hope).
Wikipedia's page on "just intonation" is, oddly, about music.
OK. You've lost me.
I apologize for making you feel dumb. Just try practicing some mindfulness.
And it is so too that “just deserts” are rarely desserts at all.
... as is "Just for Men"