jand

6 ms·

1.
by jand 5mo ago
> Too many of these projects become viral hits that stop making any progress after the first symbolic success. Cynics would say these projects all too often stop exactly at the point where the actual challenges start. What can you do to
2.
by jand 10mo ago
I have not test-driven adk-go. But if you - like me - have not toyed around with agents until now, there is a readable, nice example in [1] which explains itself. [1] https://github.com/google/adk-go/tree/main
3.
by jand 11mo ago
This becomes much clearer with a balance sheet in front of you. What is saving? _Spending less_, that's all. Saving generates no income, it makes you go broke slower. Independent of the price or the product, you can never save more tha
4.
by jand 1y ago
Who do you mean with "many people"? Developers who do not care or middle management that oversold features and overcommitted w.r.t. deadlines? Or both? Someone else?
5.
by jand 1y ago
> Even if you don't notice the pot being boiled there are those of us that do. Tangent: To me that sounds like a reference to the "frog boiling" story. This has been debunked [1], a healthy frog will not remain in a gradua
6.
by jand 1y ago
I get your point, but according to [1] ASML was a bad example. There is no kill switch which might be pressed only under circumstances that may never be "adapted to current situations". So who does said plow belong to? [1] https:
7.
by jand 1y ago
Are users allowed to copy the referenced egg-shell.png and host it themselves or is this connected to some sort of metric you like to gather?
8.
by jand 1y ago
And it enjoyed some popularity. [1] [1] https://en.wikipedia.org/wiki/Beer_boot
9.
by jand 1y ago
More than US. From EU i can't even reach https://github.com/<user>/<repo> .
10.
by jand 1y ago
> I am a bit confused on the "bypass" though. Wouldn't the adversary need push access to the repository to edit the workflow file? So, the portion that needs hardening is ensuring the wrong people do not have access to pus
11.
by jand 1y ago
The community edition is not robbed of its value by this move. They provide a CLI tool (mc) for those admin tasks which previously could be solved via dashboard. I have several minio instances deployed to k8s for small to medium, and non-pr
12.
Wolfspeed prepares to file for bankruptcy within weeks(reuters.com)
4 points by jand 1y ago|0 comments
13.
by jand 1y ago
> How is this not the same issue? Although not explicitly stated, i read previous comments as using dick.less@privateequity.com to cancel his personal Netflix account. (Let's say that privateequity.com allowed personal usage of comp
14.
by jand 1y ago
As we are sharing anecdotes: One of my school math teacher had the same approach in another way: We were expected to use greek letters, not latin ones. Same reasoning: It showed us kiddos that the letter was insignificant compared to the co
15.
by jand 1y ago
"Unreliable" is a bit harsh - the problem arises imho not from the websocket ping itself, but from the fact that client-side _and_ server-side need to support the ping/pong frames.
16.
by jand 2y ago
sry to be that guy (with a snarky comment): > Over the 20+ years, I witnessed a few security incidents. As you said, the attackers who breached your system had ssh root access and you had no chance to detect them.
17.
by jand 2y ago
> ... because you cannot attach an Authorization: Bearer header to a websocket. Well, not properly. You can abuse the Sec-Websocket-Protocol header to pass an initial token to the server.
18.
by jand 2y ago
Was there a specific reason to use AGPL-3.0? Not critizing, just asking. Tried to read about the license and was greeted by a tl;dr summary of the AGPL-3.0 license [1]. I am no lawyer but my gut tells me that providing such a summary is an
19.
by jand 2y ago
Another option is to have a read-, and a write-pump goroutine associated with each gorilla ws client. I found this useful for gateways wss <--> *.
20.
by jand 2y ago
> They will still be a game changer for workplace safety. Sure. The robots could be used to distribute shoes and safety equipment to the less fortunate child laborers around the world.
21.
by jand 2y ago
"support or engage in terrorist or violent extremist offences" What constitutes "support"? Hopefully your next government is OK with you back then liking the post of that one organization previously not classified as ter
22.
by jand 2y ago
> 9 Verifiers SHALL verify the entire submitted password... Is this "don't microwave your hamster"-requirement a result of the bcrypt trouble [1] or how comes? [1] https://security.stackexchange.com/questio
23.
by jand 2y ago
> The response has been what's called "safety certification": This is the most scary part for me. Certifications are mostly bureaucratic sugar and on the other hand very expensive. This seems like a sure way to strangle yo
24.
by jand 2y ago
Is there an existing comparison between pgManage and pgAdmin somewhere? At first glance, it seems they serve the same purpose. Am i missing something? (besides the support for some other DBs - but pgManage states to target postgres primaril
25.
by jand 2y ago
I am not very good at telling jokes. But even i can tell, that this is low effort. You really get a laugh out of it? Like "hahahaha, they said PHP 5"?
26.
by jand 2y ago
half-serious question: What is the omnipresent "defined by a domain name" in the "claims"-section of the patent (see [1]) all about? To me it seems unfit as a defining criterion for a network. [1] https://port
27.
by jand 2y ago
"Was Hans nicht lernt, lernt Hänschen nimmermehr." german, roughly - "What Hans did not learn, his son will never learn." It is so obviously wrong as a generalized truth but painfully accurate on occasion. Cool about it:
28.
by jand 2y ago
> They will get all the data collected by the service, which is none. (disclaimer: not rooted in knowledge, but in pessimism) If the web service / whatever cannot provide the requested data, it would be in violation of the order. So
29.
by jand 3y ago
Devmem TCP sounds a lot like direct memory access. Am i mistaken if i think of it as a security nightmare? Do you have by chance any links to security considerations?
30.
by jand 3y ago
Even in (the official) docker image, a nginx user is created: (latest, layer 6) /bin/sh -c set -x && groupadd --system --gid 101 nginx && useradd --system --gid nginx --no-create-home --home /nonexistent --com

More ›