Msurrow

19 ms·

1.
by Msurrow 1mo ago
Privacy. Controlling your own data.
2.
by Msurrow 2mo ago
Honest question: For let’s say a senior developer having to go through all of these steps for the model to implement a feature: > Product Design > System Architecture > Program Design > Vertical Slices By the time it takes to go
3.
by Msurrow 3mo ago
> month ago there was a wave of posts and tweets about engineers walking around cafes and parks with their MacBooks propped half-open, as fully closing the lid forces sleep that stops their AI agents Why don’t they just ask the agents to
4.
by Msurrow 7mo ago
> They would NEVER admit any failure in their society, no matter the hard evidence in front of their eyes. That must be the swedes. Danes complain constantly, about everything. Edit: if you need examples.. DSB trains are slow/never
5.
by Msurrow 7mo ago
I think he meant that at that time all users were programmers. Yes, _all_ .
6.
by Msurrow 7mo ago
I agree that yes most just want PnP and basically don’t care about security. But it seemed on the posts above that there was an engineering complexity, and a robot vaccum needs local WiFi, so there will be a setup flow. Whats preventing a p
7.
by Msurrow 7mo ago
I have not knowledge of this kind of software dev/hw production, so can you please explain why the units cant just be born with a default pass and then have the setup process (which is always there) Force the owner to set a new passwor
8.
by Msurrow 7mo ago
Yeah was thinking the same thing. I wonder if the author didnt known that passpory chip == fingerprint. And FP is a much worse modality to have registered because, as opposed to Face image, fingerprint is not affected by age. So that will m
9.
by Msurrow 7mo ago
That that is exactly why [more] regulation is necessary! Regulation is not done with the purpose of preventing companies from profits. It is done because companies cannot be expected to act in society’s best interest, so society has to make
10.
by Msurrow 7mo ago
No, they are not. Doesn’t matter how many LoC; it only take 1 LoC to introduce a vulnerability. Wireguard is a protocol. So what implementation is “very intentional about its choice of …”? Are you talking about my own WG client implementati
11.
by Msurrow 7mo ago
You are still implying that wireguard are somehow different from ssh in its suceptibilty to vulnerabilities existing or being introduced into its codebase. And it simply is not. Edit: codebase of ssh/wireguard implementations, just to
12.
by Msurrow 7mo ago
I’m calling it consultant speak because your response to an argument is to bring up something else, instead of actually responding. The same with this last reply; you can keep throwing out new points all you want, but thats not going to mak
13.
by Msurrow 7mo ago
Sure, no one said it wasnt layered. But saying ssh is a risk “on principle” due to possible vulnerabilities, and then implying that if wireguard is used then that risk isnt there is wrong. Wireguard, and any other software, has the same vul
14.
by Msurrow 7mo ago
But doesn’t your argument that the principal risk [with ssh] is vulnerabilities also apply to the alternatives you say is best practice? Firewalling off ssh (but not http(s)) has the risk of vulns in the FW software. Tailscale, wireguard et
15.
by Msurrow 8mo ago
You cant.
16.
by Msurrow 9mo ago
Depends on environment variable P=NP
17.
by Msurrow 9mo ago
> *If you don't want your LG TV quietly snooping on what you watch and using it to serve you ads, here's how to turn Live Plus off. If LG makes money from snooping on you, what makes you think the “off” button actually turns it
18.
by Msurrow 9mo ago
Yes, it does. First of all: occam's razor. Political theatrics seems simpler than the US defence/intelligence forces sudenly realizing that drones can be launched from ships. Esp. with the timing involved. Second: Established&#x2F
19.
by Msurrow 9mo ago
The construction on some of these windmill farms started years ago. Before that permits & legal has been in the works for a long time. This surely included security clearances. The orange shrimp pulling the “national security” card now
20.
by Msurrow 9mo ago
Man, I got my rope out for this..
21.
by Msurrow 9mo ago
If the employer says so and I do so anyway then that’s a employment issue. I still have to follow company rules. But the point is that the company needs to delete the collected data as soon as possible. They are still not allowed to store i
22.
by Msurrow 9mo ago
Yes. GDPR covers all handling of PII that a company does. And its sort of default deny, meaning that a company is not allowed to handle (process and/or store) your data UNLESS it has a reason that makes it legal. This is where it becom
23.
by Msurrow 10mo ago
If that’s the case why give the OSS project any time to fix at all before public disclosure? They should just publish immediately, no? Warn other users asap.
24.
by Msurrow 10mo ago
My takeaway from the article was not that the report was a problem, but a change in approach from Google that they’d disclose publicly after X days, regardless of if the project had a chance to fix it. To me its okay to “demand” from a for
25.
by Msurrow 10mo ago
In addition to your point, it seems obvious that disclosure policy for FOSS should be “when patch available” and not static X days. The security issue should certainly be disclosed - when its responsible to do so. Now, if Google or whoever
26.
by Msurrow 11mo ago
The OP/article is very clear and very direct on what the problems are. The response is so typical american conflict-shy “let’s talk so we can slowly dimish your critique, and also let’s do talking instead of writing so we cant really b
27.
by Msurrow 11mo ago
Koda, the danish music copyright organisation just sued Suno.ai [1] calling it the “biggest music theft in history”. Apparently suno can almost completely reproduce some “big” songs made by danish bands eg D-A-D, Aqua. Edit- and from the ar
28.
by Msurrow 11mo ago
See, now that’s a proper f** you in corporate-speak.
29.
by Msurrow 11mo ago
What’s really laughable about this is that they wanted politicians to be exempt from Chat Control regulation. As if politicians never do anything wrong. If CC were ever implemented it should have a x year trial period where ONLY policymaker
30.
by Msurrow 11mo ago
Familiarize yourself with your company’s decision process on strategic decisions like this. Ensure you have a way to submit a proposal for a decision on making the change (or find someone who has that access to sponsor your proposal), build

More ›