ian_d

7 ms·

1.
by ian_d 2mo ago
The author is aware of that, the PoC requires interaction from the creator using the studio AI: > When the creator clicked the link, I received a request with the video title in the URL parameter.
2.
SpankMatch, Secrets, and (Everyone's) Orphaned Google Container Registry Layers(amenbreakpoint.com)
1 points by ian_d 5mo ago|0 comments
3.
by ian_d 5mo ago
Evergreen advice from the design side: https://www.youtube.com/watch?v=jVkLVRt6c1U (Mike Monteiro: F*ck You, Pay Me)
4.
by ian_d 6mo ago
The _really_ fun bucket squatting attacks are when the cloud providers themselves use deterministic names for "scratch space" buckets. There was a good DC talk about it at DC32 for AWS, although actual squatting was tough because
5.
Zigazoo: GCP Security at "The Largest Social Network for Kids"(amenbreakpoint.com)
1 points by ian_d 7mo ago|0 comments
6.
by ian_d 7mo ago
Mountain View recently turned off their Flock installs after they discovered Flock had enabled data sharing without notice and other agencies were searching through MV data. https://www.malwarebytes.com/blog/privacy&#x2
7.
A16Z hires acquitted former Marine Daniel Penny as an investor(techcrunch.com)
5 points by ian_d 8mo ago|2 comments
8.
by ian_d 8mo ago
If you don't remember, Daniel Penny is the ex-Marine that killed a homeless man on the NYC subway then was found not guilty of criminally negligent homicide.
9.
by ian_d 1y ago
There was actually a good DC31 talk called "Snoop On To Them, As They Snoop On To Us" kinda in this vein, but with Bluetooth devices that are part of a lot of cop's gear. https://www.youtube.com/watch?v=cO1JSz
10.
Zigazoo, A Firebase Boogaloo: Security at "The Largest Social Network for Kids "(amenbreakpoint.com)
2 points by ian_d 1y ago|0 comments
11.
by ian_d 2y ago
Elon is also now claiming to have "deleted" 18F ( https://18f.gsa.gov/ ): https://x.com/elonmusk/status/1886498750052327520
12.
by ian_d 7y ago
I'd go check the YNAB forums, there's a lot of v4 users who really hate the cloud version. I tried to switch and gave it up for two reasons: - Import from v4 is super broken for credit card accounts and I ended up with weird posit
13.
by ian_d 8y ago
Since ECS is missing k8s configMap/secrets style integrations for SSM and KMS I wrote this small tool to help get secrets into place without a bunch of ECS-specific custom entrypoint code. Scratches a particular itch I've encounte
14.
Show HN: SSM/KMS/ENV-aware Go template file fetcher and parser for AWS ECS(github.com)
1 points by ian_d 8y ago|1 comments
15.
by ian_d 8y ago
I could really see something like France's "tickets restos" / meal voucher system benefitting everyone. Fitting for smaller companies who want to provide a perk w/out an on-site cafeteria, puts some money into the l
16.
by ian_d 8y ago
The DHS Press Secretary's response is particularly infuriating. https://twitter.com/SpoxDHS/status/1009502457058201600
17.
by ian_d 8y ago
It's Record Store Day again and I thought I'd share the site that I've been running for a few years now. It collects vinyl auctions and sales daily (with sound clips), and is at >10M items and >500k sound clips. I'
18.
Show HN: Gripsweat, rare vinyl auction and sales with sound clips(gripsweat.com)
3 points by ian_d 8y ago|1 comments
19.
by ian_d 8y ago
Missing the real-life seller grades: EX- / VG++(+) M+ Skip on A2, otherwise MINT SOLID PLAY COPY (Kidding, nice tool!) Goldmine does have a bit of a no-man's-land between NM and VG+, though.
20.
by ian_d 9y ago
Nice tool, thank you for releasing it. Unfortunately, in my experience it's a pretty normal strategy to over provision EBS gp2 volumes to get the IOPS since they scale linearly up to ~10k. I think that's the break-even point where
21.
by ian_d 9y ago
I like Carlin's cadence, but I really wish they would run everything through some compression. The volume range between his "speaking" voice and when he's quoting someone is HUGE and sometimes requires mucking around wit
22.
by ian_d 9y ago
Yeah, here in the slums of higher-ed dev/IT just having a github repos of any original code makes an applicant novel. We never really discussed an applicant's github code with them, but we absolutely read through and took it as
23.
by ian_d 9y ago
Pressing a one-off record isn't worth the cost because of the requirement of creating a pressing mother. (Mastering, creating a lacquer, a mother, a stamper, then finally pressing.) However, for one-offs your options are basically an
24.
by ian_d 9y ago
I'm in higher-ed infosys and we see a number of automated registration sniping hacks in our monitoring / metrics. We usually don't run it up the chain unless it's malicious or impacting the service for other students. Ot
25.
by ian_d 9y ago
I've been using terraform for a couple of months now (love it), but honestly our biggest pain was just project organization. It looks like a lot of people make a file per-resource type (elb.tf, ec2.tf, rds.tf) but we thought that would
26.
by ian_d 9y ago
There are some really amazingly rare and sought after tax scam records. I've been lucky enough to find/have a couple (Newban 2 & Jay-T - Party Time) but there's some heavy 4 figure LPs out there: https://gripsw
27.
by ian_d 11y ago
There's also the vinyl-only availability of a lot of recordings, especially if you're interested in niche pre-80/90s genres. I collect private press / avant jazz from the 60s and 70s along with some soul/funk, and
28.
by ian_d 11y ago
I think getting sued is really dependent on the size of the company you're scraping vs. what kind of 'business' you're cutting out from under them. There's a number of sites like https://gripsweat.com (m