johngalt

5 ms·

1.
by johngalt 1mo ago
That is not the way human beings typically evaluate risks. 'Acceptable risks' are more about psychology and not a statistical calculation. A self driving car that is twice as safe as the human average would be considered an unacce
2.
by johngalt 2mo ago
Think of it like SSH authorized keys but automated for the web. Instead of storing the keys in a file; it stores them in a hardware security module (yubikey, or TPM). Registration generates an asymmetric key pair between your passkey, and t
3.
by johngalt 2mo ago
If you want a consistent, and seamless authentication experience, then one party has to own that experience. Go federation/SSO. Sign into everything with microsoft, or google as your identity provider, and live with the privacy implica
4.
by johngalt 4mo ago
The largest disconnect between then and now, is the degree to which the internet was many things (telnet, ftp, usenet, finger, gopher, http, irc, mail, etc...), and not just webpages. Each with their own specific flavors. The article is t
5.
by johngalt 9mo ago
FYI, the included cartridges in a new printer are typically a 'low capacity' type. This has been true for 20+ years. You may find yourself both spending a large amount of money, and generating a significant amount of e-waste if yo
6.
by johngalt 1y ago
Probably not, but some games it is better to lose.
7.
by johngalt 1y ago
This problem is why so many organizations will do an SSO tax.
8.
by johngalt 1y ago
The strangest part to me about the current trends: why do all these business leaders all do the same things at the same time? E.g. Layoffs + micromanagement + cost focus etc... Is this truly about macroeconomic forces that every business is
9.
by johngalt 1y ago
Intel has been cooked for years. Observable back in 2017, but more visible today. https://news.ycombinator.com/item?id=14588429 The top of the market will go GPU and the bottom will go ARM, and the middle will be an ever s
10.
by johngalt 1y ago
We can certainly imagine a limiting factor based on our prior development. Imagine a world where large amounts of coal or oil never formed, or formed in a manner that made it inaccessible to a pre-industrial revolution society. Without easi
11.
by johngalt 1y ago
Organized crime would be more... organized. There would be servers, infrastructure and documentation. Designed to say exactly the right thing to whoever was looking. This is garden variety, SMB fraud. "We trust Tim, and never had a pro
12.
by johngalt 2y ago
What sort of fraud in 2008 would be similar to just wiring millions of dollars out of the bank to a personal investment/scam? The most egregious stuff in 2008 was mispricing MBSs. Incorrectly pricing risk is pretty far from stealing mo
13.
by johngalt 2y ago
No problem at all with the concept of price discrimination. The economics make sense. In any scenario where unit costs are low, but development costs are high, the ideal situation is where everyone gets the benefit of having the product a
14.
by johngalt 2y ago
>If you look at a state like Colorado, the energy usage is vastly different than Florida or Texas with lots of heat and humidity. Electricity usage yes. Energy usage no. Household energy usage is lower in the warmer states, and highe
15.
by johngalt 2y ago
The connection not drawn here is about capability and flexibility. You can make a drill without the clutch/torque adjustment, and it will be simpler to use but less capable. Or using the car example, knowing how to manually select gear
16.
by johngalt 2y ago
100% That is exactly how it is playing out. People do not register (2passkeys * 20 services). They sign in with Google or Microsoft and call it a day. Privacy implications ignored. Even more true in Corp IT. People will learn to use pass
17.
by johngalt 3y ago
Draw a square around the X or O.
18.
by johngalt 3y ago
Startup locked in haphazard political power struggle. Microsoft is executing at high speed over a weekend. Next week: Chrysler cars now more reliable than Toyota.
19.
by johngalt 3y ago
If you are involved parents, it is difficult to make a wrong choice. There is nothing wrong with homeschooling and it works best when you have a network of people who are doing the same to add-in social opportunities. The only thing that I
20.
by johngalt 3y ago
> stop splitting the job of dev and ops into separate roles Specialization is the key to managing complex projects effectively. Effective teams will increase specialization where possible, and improve the feedback mechanisms between sp
21.
by johngalt 3y ago
Mechanisms like this exist, but they probably aren't integrated into whatever system you are using, and delays which involve an approval workflow add a lot of overhead. In most cases the engineering time is better spent pursuing phishi
22.
by johngalt 3y ago
Off-the-cuff; there are certainly more categories. Notes related behavior is a good place to find ideas, but not a good goal itself. 'Notes' is where information lands which isn't being specifically captured. Looking at your
23.
by johngalt 3y ago
It's not about hierarchy or flexibility, but the ill-defined nature of what 'notes' are. Ask people to share notes and you'll observe several different types with disparate goals: 1. Shorthand: A memory mechanism to simp
24.
by johngalt 3y ago
Looks... Noisy. Giant engines next to the passengers with an angled pocket reflecting sound back towards the cabin. -Not an aerospace or sound engineer
25.
by johngalt 3y ago
Excellent checklist. Anyone who is directly accountable for operations but only a non-voting advisory role for platform selection will have flashbacks reading this list.
26.
by johngalt 3y ago
At a certain point, you aren't doing a cold restart, but a high speed recreation of the system based on prioritized needs.
27.
by johngalt 3y ago
Berkeley Open Infrastructure for Network Computing (BOINC) https://boinc.berkeley.edu/ https://boinc.berkeley.edu/projects.php Has a unified management experience with the ability to subscribe to various pr
28.
by johngalt 3y ago
Agree 100% with this and your other comments. These frameworks often create risks by obscuring reality behind procedure. Sucking up all the air that would go towards more direct security objectives. Businesses think they are done with cyb
29.
by johngalt 3y ago
NIST CSF = The encyclopedia which breaks security down into as many areas/steps/sections as possible. If you are planning a 500-person security department, this is how you give them all something to do. The idea is to accomplish t
30.
by johngalt 3y ago
The proliferation of security vendors is similar to the proliferation of weight loss clinics and gyms. There are plenty of fads, with new businesses popping up to either chase or create the interest. The people buying these services despera

More ›