heartsucker

9 ms·

1.
by heartsucker 9y ago
Funded by the government != The government has their hands all over it
2.
by heartsucker 9y ago
Berlin was calling to me. There were somethings about SF I didn't like, but it wasn't so much "I moved out of SF" as "I moved in to a new city."
3.
by heartsucker 9y ago
Philz and Skeggs are both in SV, and I was contributing what I could because OP said "SF and SV."
4.
by heartsucker 9y ago
Don't let perfect be the enemy of good. Some people can't not own a car and just bike everywhere or take public transit.
5.
by heartsucker 9y ago
Poor documentation is a bug in itself.
6.
by heartsucker 9y ago
Slightly off topic, but this is hardly the biggest blunder of the airline industry. A company I worked for last year absolutely tore them apart in a talk at 33c3. In short, information like your address or passport number is easily accessib
7.
by heartsucker 9y ago
Because the children have no control over who their parents are, and we shouldn't punish with a lifetime of diminished opportunities because their parents aren't as "good" as others.
8.
by heartsucker 9y ago
> A theatre in New York was showing the 1995 film, so I watched it for first time on big screen on Wednesday, then saw the live action on Friday > Did you ... even see the '95 movie recently? Dude...
9.
by heartsucker 9y ago
I maintain a Debian packager for nodejs [0] & two Rust libs for CSRF protection [1] [2], and contribute to SecureDrop [3]. [0] - https://github.com/heartsucker/node-deb [1] - https://github.com/hear
10.
by heartsucker 10y ago
git checkout 0.1.0 git tag -v 0.1.0
11.
by heartsucker 10y ago
Sure, and if we imagine a hypothetical entity that has 10 products with security holes and then releases and 11th, it might be worth looking at the 11th more suspiciously. Things don't happen in a vacuum.
12.
by heartsucker 10y ago
The tool phones home. Their website doesn't have HTTPS. It's plausible that the tools phones home over an unencrypted channel (I didn't look, so I could be wrong). My overall impression is that they don't do security ver
13.
by heartsucker 10y ago
Wow, and your website isn't even HTTPS for what appears to be a security company. Get it together.
14.
by heartsucker 10y ago
> We also collect a few anonymous data (CLI errors, most frequently used commands and count of resources). Looks cool, but this is an instant no for me. Sorry guys.
15.
by heartsucker 10y ago
> you can’t compile your own client from source According to the docs in the git repo, you can do a `./gradlew build` and there you have it. > you can’t verify anything They have docs on reproducible builds[0]. Anyway, I'd s
16.
Paid Security Research Trip to Goa(hack-the-beach.com)
6 points by heartsucker 10y ago|0 comments
17.
by heartsucker 10y ago
Yes, but in theory some sort of MAC could stop it from accessing important files, or anti-virus could detect it and stop it too. But once the password leaves the computer, it's going to take a lot more effort to mitigate the damage. Al
18.
by heartsucker 10y ago
> What makes an attack like this so effective is that you never expect to see something as convincing as this I've been working on phishing and counter-phishing recently, and if someone is actually putting any effort in, you have to
19.
by heartsucker 10y ago
> F.B.I. agents on the case, advised by N.S.A. technical experts, do not believe Mr. Martin is fully cooperating, the officials say. He has spoken mainly through his lawyers, James Wyda and Deborah Boardman of the federal public defender
20.
by heartsucker 10y ago
Since this is all about docs, having gone from Java/Scala to Rust, I cannot emphasize enough how much better Rust is at this. With `cargo doc` I get a local set of static files for the exact version of the libraries I'm using. Why
21.
by heartsucker 10y ago
It certainly worked, whether or not it worked "well" is up for debate.
22.
by heartsucker 10y ago
Those seem to be legitimate complaints that seem to be "take something specialized that caters to a small crowd, then water it down so it appeals to everyone." That said, sometimes such complaints are clearly a bit whiny, but then
23.
by heartsucker 10y ago
The post seemed to claim that because each small change didn't ruin it, it's not ruined. I'm saying that it's ruined to some because it's no longer the thing they fell in love with.
24.
by heartsucker 10y ago
I feel like this takes the term "ruining" too literally. Yes, clearly nothing was completely ruined with each subsequent change, but the current incantation is certainly not the same as the first, and people are right to criticize
25.
by heartsucker 10y ago
Yes, because this gives them the chance to say no and pretend to walk through it slowly showing how "smart" they are.
26.
by heartsucker 10y ago
When we used this, we used the first directory to be the env, so it looked like. /prod/... /stage/... /dev/... /feature-xyz/... It's not elegant, but it made for really simpl
27.
by heartsucker 10y ago
I think the author meant packages output of pip, like this issue: I want to install the pip package cryptography. I need to make sure Python.h is available. I need to make sure (on Debian) that lib-ffidev and lib-ssldev are available. This
28.
by heartsucker 10y ago
Replying to this again. Using Scala and Scalding or Spark makes it super simple to do algorithmic stuff. I haven't used Pregel/Giraph ever, so I can't say how it stacks up. And OP, if you see this, using raw M/R to do th
29.
by heartsucker 10y ago
I read the O'Reilly books on Hadoop and Hvae in 2013. That was helpful, but I still think Hive is a good place to start. If you know how a join and an aggregate work, you can see how Hadoop turns those into into M/R operations. If
30.
by heartsucker 10y ago
I would second this. I've used Hadoop at two jobs, and both times the added overhead in terms of operational and programming complexity wasn't worth it. Most everything could have been done on a beefy machine with the most basic k

More ›