abritishguy

6 ms·

1.
by abritishguy 1y ago
*she
2.
by abritishguy 2y ago
It's a very good question. The stand-in system itself has been built to have basically no external dependencies itself. So, the question you are really asking is "to what extent are the other parties involved in the processing of
3.
Tolerating full cloud outages with Monzo Stand-in(monzo.com)
64 points by abritishguy 2y ago|41 comments
4.
by abritishguy 7y ago
Personal accountability only applies to execs and is already a thing in financial services in the UK post financial crisis.
5.
by abritishguy 9y ago
That's correct.
6.
by abritishguy 9y ago
Just in case it is relevant for anyone here this is what our security team have established thus far: - Can be mitigated by enabling the root user with a strong password - Can be detected with `osquery` using `SELECT * FROM plist WHERE path
7.
by abritishguy 9y ago
If you have `osquery` deployed to your fleet you can detect compromise with this query: SELECT * FROM plist WHERE path = "/private/var/db/dslocal/nodes/Default/users/root.plist" AND key = &q
8.
by abritishguy 9y ago
Is there any way to store state?
9.
by abritishguy 9y ago
I use ligatures in atom and they are 100% aware of context. I disable them in contexts where they don't make sense e.g comments and I disable them on the line the cursor is on. I've not had any issues. The => ligature looking l
10.
by abritishguy 9y ago
But if you aren't paying then they must be making money elsewhere.
11.
by abritishguy 10y ago
Wirecard are the issuing bank but not the card processor.
12.
by abritishguy 10y ago
The illusion of knowledge about crypto is very dangerous. People get this stuff wrong all the time and introducing more examples with really bad mistakes will only make the situation work.
13.
by abritishguy 10y ago
Latency from my London flat: 8.8.8.8 ~4ms 80.80.80.80 ~95ms
14.
Apple's response to the WoSign incidents(groups.google.com)
133 points by abritishguy 10y ago|38 comments
15.
by abritishguy 10y ago
Google has one repository, not one monolithic codebase.
16.
by abritishguy 10y ago
Kinesis is very poor
17.
by abritishguy 10y ago
In general, yes. But I'd consider posting an anonymised email demonstrating such incompetence to be whistleblowing.
18.
by abritishguy 10y ago
Name and shame, this auditor is actively damaging security and should be shut down.
19.
by abritishguy 10y ago
OAuth is a framework not a protocol. The security it provides can vary greatly between implementations. Fosite (which is what this is based on) is a very good implementation from a security perspective: https://github.com/or
20.
by abritishguy 10y ago
Maybe you should read? The secure enclave is completely separate to TrustZone on an iPhone and has nothing to do with Qualcomm.
21.
by abritishguy 10y ago
I think this shows a fundamental difference between Amazon (AWS) and Google Cloud. AWSs offerings seem fairly vanilla and boring. Google are offering more and more really useful stuff: - cloud machine learning - custom hardware - live migra
22.
by abritishguy 10y ago
When I read the title I thought this would be a toolkit for writing databases. A lot of the work involved in writing a database is systems stuff such as being sure that a commit log has actually been committed. Having a toolkit that does al
23.
by abritishguy 10y ago
Not everyone has a fibre connection. I get 250KB/s at home.
24.
by abritishguy 10y ago
2-factor authentication does not protect against that. The victim does not know they are being MITMd and enters the 2FA code.
25.
by abritishguy 10y ago
The aim is therefore to remove the reliance on it being genuine. If you don't have passwords then there is no passwords to steal.
26.
by abritishguy 10y ago
r/bitcoin is calling bullshit: https://www.reddit.com/r/Bitcoin/comments/4hflr3/craig_wrigh...
27.
by abritishguy 10y ago
Xbox live runs on azure
28.
by abritishguy 10y ago
The more I find out about Stephen Deerhake the more I don't want him anywhere near anything important.
29.
Ghost Desktop(ghost.org)
2 points by abritishguy 10y ago|0 comments
30.
by abritishguy 10y ago
As a factor in a multi-factor authentication scenario it is pretty good.

More ›