preinheimer

12 ms·

1.
by preinheimer 2mo ago
Great post. Anyone who talks, and actually implements, client key rotation gets a +1 from me. Far too many systems don’t have a zero downtime key rotation.
2.
by preinheimer 3mo ago
You want to use a lot of electricity? Great! We sell electricity. We will need cash in advance to handle some upgrades, rather than passing those costs on to other rate payers.
3.
by preinheimer 3mo ago
Stripe is at I. I think they’ll ipo.
4.
by preinheimer 3mo ago
Lots of endowments come with strings attached. We made a charitable donation to a local university for them to buy some specific science outreach equipment, they bought it. This all seems reasonable to me. If you want my money or things, yo
5.
by preinheimer 4mo ago
No, they came up with some legal theory in which they’d bought the assets of some company, including the company’s ownership of some art, but not obligations like paying royalties.
6.
by preinheimer 4mo ago
> I have absolutely no doubts a court would consider it impossible to transfer goods under consignment to a different entity free of the burden of the consignment contract. Reminds me of the whole "disney must pay" debacle.
7.
by preinheimer 4mo ago
IPInfo did a report on this: https://ipinfo.io/blog/vpn-location-mismatch-report From our side we noticed a VPN provider had a location we'd been trying to get, but had been unable to, so we started digging to fin
8.
by preinheimer 4mo ago
I mean, most “residential proxy” providers are selling access to hacked devices, or sneaky plugins https://medium.com/@xianghangmi/resident-evil-understanding-... Technical paper: https://ieeexplore.ieee.org
9.
by preinheimer 4mo ago
I discovered Terry Pratchett's books my summer in New York. I was a university student, and I'd gotten a job at eDonkey doing technical support. I lived in a crappy apartment in Brooklyn (this was circa 2004 or so), and worked nea
10.
by preinheimer 4mo ago
Heads up: there's audio. It does add something.
11.
by preinheimer 5mo ago
I think the OP is presenting themselves as the cryptographer, and the authors behind Forgejo as the amateur. At this point they've only filled one envelope but believe there is many more to find, and are hoping that in the process of t
12.
by preinheimer 5mo ago
They may not advertise “getting you there at 1.2x legal speed” but the sooner they drop you off, the sooner they can get another fare. Over a whole fleet it will add up to changing the size of the required fleet. If getting a ticket one rid
13.
by preinheimer 5mo ago
There’s an old cryptography story. A cryptographer friend tells the story of an amateur who kept bothering him with the cipher he invented. The cryptographer would break the cipher, the amateur would make a change to “fix” it, and the crypt
14.
by preinheimer 5mo ago
We used to run some servers in a colo, we had 4u. The problem with actually owning hardware is that you need a lot of it, and need to be prepared to manage things like upgrading firmware. You need to keep on top of the advisories for your n
15.
by preinheimer 5mo ago
I find short form content really addictive. It’s so easy for me to lose half an hour to it, and at the end just feel like I’ve wasted my time. Lacking better options I’ve turned on parental controls on my phone to block YouTube, and install
16.
by preinheimer 5mo ago
This feels like it would run against the “I bought my device, I should control how it behaves” line of thinking.
17.
by preinheimer 5mo ago
Stripe supports 3d secure and has for years. https://stripe.com/en-ca/guides/3d-secure-2
18.
by preinheimer 5mo ago
There was a research paper several years ago showing that the "residential IP" stuff is powered by botnets and compromised devices. Luminati is specifically called out. Paper: https://xianghang.me/files/resi_p
19.
by preinheimer 6mo ago
I mean it’s a template, but in theory someone went and checked stuff. Did you actually have a quarterly security team meeting? Was there minutes? Was there an invite? Did someone actually go and confirm your role based access control matrix
20.
by preinheimer 6mo ago
We did SOC 2 a few years ago, I'm glad we did it. In my mind getting a clean report required three kinds of work: 1. Work that actively improved our security posture. 2. Work that didn't change much, but made our security posture
21.
by preinheimer 6mo ago
Looking at our SOC 2 report (we don't use Delve, our auditor isn't on their list) I don't think this is quite the smoking gun it might look like if you're not reading SOC 2 reports for a living. There's a fair amoun
22.
by preinheimer 6mo ago
What about a “right to create act” giving people the right to create things and not have their creation be ingested to train ai for billion dollar companies?
23.
by preinheimer 8mo ago
> AI moderation is currently a "black box" that prioritizes safety over accuracy to an extreme degree. I think there's a wide spread in how that's implemented. I would certainly not describe Grok as a tool that's
24.
by preinheimer 9mo ago
You're right. I agree.
25.
by preinheimer 9mo ago
I think it’s important to test these systems. Let some % of candidates who get this wrong through to the next stage and see what happens. Does failing this test actually correlate with being a bad fit later? If you want to ineffectivly filt
26.
by preinheimer 9mo ago
We really don't want to operate our own hardware. The situation in Peru at the time was that there wasn't anyone offering the bandwidth we needed who could actually back up their bandwidth claims. Forget 95th percentile, bandwidth
27.
by preinheimer 9mo ago
We've got detailed global ping data here: https://wondernetwork.com/pings One of our competitors was claiming a server in a middle eastern country we could not find any hosting in. So I figured out what that server&#x2
28.
by preinheimer 9mo ago
I'm a co-founder at WonderProxy, we didn't make their list (we target people doing application testing, not consumer VPNs). We're in 100+ countries, and I'll stand by that claim. It's a huge pain in the neck. In our
29.
by preinheimer 10mo ago
Ive installed a browser extension to remove them on the desktop. There should absolutely be a better answer here.
30.
by preinheimer 10mo ago
"Your data belongs to you" but we can take any of your data we can find and use it for free for ever, without crediting you, notifying you, or giving you any way of having it removed.

More ›