pluto_modadic

9 ms·

1. 241.▲
   by pluto_modadic 2y ago

   this reminds me that stoicism was written by leaders in govt and didn't consider classism or economic disparity. Sure, they might have started from broke, but they were important.
2. 242.▲
   by pluto_modadic 2y ago

   projects that import the SDK /written by and (un)maintained by the matrix org/ e.g.: https://github.com/matrix-org/matrix-python-sdk (dependents doesn't work on this python project I guess) or matrix-org
3. 243.▲
   by pluto_modadic 2y ago

   oh. ohhh damn. matrix... well then.
4. 244.▲
   by pluto_modadic 2y ago

   I was curious if someone would build something that allows the DCAP datacenter attestation to be exposed to applications, e.g. "prove via intel that the SHA of the software running on the machine is XYZ"
5. 245.▲
   by pluto_modadic 2y ago

   solid points!
6. 246.▲
   by pluto_modadic 2y ago

   damn, only for new GPUs.
7. 247.▲
   by pluto_modadic 2y ago

   3 points: 1. yes, ALL AWS security products have hilariously bad performance and shortcomings, and aren't fit for purpose. 2. this article is too short and doesn't do it justice, and 1/8th of it is dedicated to pitching their
8. 248.▲
   by pluto_modadic 2y ago

   or, we should spend less electricity on AI, big data, and blockchains.
9. 249.▲
   by pluto_modadic 2y ago

   Okay, let me get this straight. So, Rails will neither patch security vulns, nor bugs, because Rails isn't a community? lol.
10. 250.▲
    by pluto_modadic 2y ago

    I think DHH tries to also speak for ruby, not just rails.
11. 251.▲
    by pluto_modadic 2y ago

    mataroa is quite... grumpy, but with good cause. I like these kinds of pragmatic, burned out posts from engineers. Sometimes VCs are too much about hype and so very, very distant from reality.
12. 252.▲
    by pluto_modadic 2y ago

    AWS codepipeline/codebuild still takes a really long time. think 1 minute to notice a commit, 2 minutes to download code, 3-8 minutes to get a codebuild runner, however long your build is, and 30 seconds to update the lambda. Especiall
13. 253.▲
    by pluto_modadic 2y ago

    last time I checked, functions were part of the "minimum $50/month" thing. This doesn't look like a free tier, it's a trial period.
14. 254.▲
    by pluto_modadic 2y ago

    I honestly don't understand why someone would pay a ransom. They just hacked you. Do you think they'd actually follow through with keeping quiet?
15. 255.▲
    by pluto_modadic 2y ago

    I think they mean regenerating servicenow's own tokens/cookies, without hitting okta. so SN's session would still be valid.
16. 256.▲
    by pluto_modadic 2y ago

    Monitor the transactions, collect evidence, get warrants, seize things, collect evidence, get arrest warrants, etc. if someone is dumb enough to register with a real name, the amount of time needed to coordinate it can be reduced. like with
17. 257.▲
    by pluto_modadic 2y ago

    or to get criminals to swap to a bugged service. This happened before with a darknet market.
18. 258.▲
    by pluto_modadic 2y ago

    this is pretty awesome. the warrant for seizing the domains is similarly awesome.
19. 259.▲
    by pluto_modadic 2y ago

    Hmmm... Is having a status page a sign of engineering maturity?
20. 260.▲
    by pluto_modadic 2y ago

    Good. as someone who works in cybersecurity, I think hackers should get $0 from the victim, possibly get caught by police, and I think companies that get hacked should have to sit with their actions and DO BETTER for their customers.
21. 261.▲
    by pluto_modadic 2y ago

    I guess I wouldn't use the "watch" command. ever. no thanks.
22. 262.▲
    by pluto_modadic 2y ago

    ./some_command | jq '.memory_use' vs: okay, run it once with head (assuming we have a --dry option...) ah, that's the column. okay cut -d"," -f0, ah whoops it's starting at 1. ah, damn, there's a weir
23. 263.▲
    by pluto_modadic 2y ago

    JSON is so much more usable sometimes. Especially when things don't neatly parse into cut -d splits!
24. 264.▲
    by pluto_modadic 2y ago

    Tailscale's ACLs (attach users to groups, attach objects to groups, cross link the two in policies) does a bit of indirection to reduce that volume. e.g.: many objects <-> object tag <-> policy <-> user group attachme
25. 265.▲
    by pluto_modadic 2y ago

    this doesn't help victims who are stressed like crazy with threats. "oh you'll be fine"
26. 266.▲
    by pluto_modadic 2y ago

    My (limited) understanding supporting developers for two years is that product does not take no for an answer, and controls everything from budget to sprints, and can insist on whatever they like, whenever they like. So... I'm going to
27. 267.▲
    by pluto_modadic 2y ago

    how do you get that from just that sentence?
28. 268.▲
    by pluto_modadic 2y ago

    I mean... if people prefer a GUI that's not a bad thing...
29. 269.▲
    by pluto_modadic 2y ago

    is this a good amount of not overwhelming the system? e.g. they recommend 60 days? https://letsencrypt.org/2015/11/09/why-90-days - and folks say the bot process won't let you do it unless it's with
30. 270.▲
    by pluto_modadic 3y ago

    Nix as package management, yes - you're waiting on someone else to make upstream work. Where Debian/PIP/NPM/Cargo already do work. Nix as an instruction set, no, you still have to declare what you want, same as a dockerf