raesene6

5 ms·

1.
by raesene6 9y ago
well it's a view of the world that adding two words to a sentence is unreasonable, but (and this is just a suggestion) I think you'll find that you get less negative feedback if you make it clear when something is an opinion rathe
2.
by raesene6 9y ago
If they like a drink (or several) and a party, indeed it's a good place to go. I've been to Shetland 7-8 times for holidays, lovely place, but not really in the winter. Apart from anything else the crossings can be really rough,
3.
by raesene6 9y ago
Saying that you're part of the culture doesn't really remove the suggested universal negative, it just implies that you feel that you are part of that demographic. The point I was going for was that I'd suggest that all humor
4.
by raesene6 9y ago
I would suggest the backlash would likely be due to the wording of your original comment. you stated that "Programmer humor is really cringey." Cringey is generally a negative sentiment and saying "is" implies that this
5.
by raesene6 9y ago
Up Helly Aa isnt' designed to capitalise on credulous foreigners, it's very much a festival for the local population of Shetland. Apart from anything else, I can't imagine many people wanting to go to Shetland in January for
6.
by raesene6 9y ago
Savitech didn't rebel against control, they were just lazy in not revoking/limiting something they, by their own admission, did not need any more. If you don't want to participate in mainstream computing with it's certif
7.
Postmortem on a Kubernetes Microservices based banking platform outage(community.monzo.com)
4 points by raesene6 9y ago|0 comments
8.
by raesene6 9y ago
that looks like an interesting guide :) One thing you might want to add is a bit of a warning about the risks of exposing a Docker daemon to the network with tlsverify=false as that would enable anyone who can reach the port on the network
9.
by raesene6 9y ago
I guess it depends on what you consider high profit. From https://techcrunch.com/2017/05/18/patreon-pushes-as-youtube-... looks like Patreon has 50k creators and 1M+ patrons. The challenge could well be that
10.
by raesene6 9y ago
So to elaborate. Many Internet facing systems are application servers (e.g. web servers). They typically have very few local users, administrative/Ops staff are the primary users. At that point an attack requiring the ability to exec
11.
by raesene6 9y ago
malicious local user is a slightly different threat model though with a number of other possible controls.
12.
by raesene6 9y ago
Do you think there's any benefit in reduced log noise making a serious attacker more obvious to SoC analysts? I.e. if I run SSH on 24956/TCP and start seeing attacks, it's a fair bet this is targeted (someone has taken the ti
13.
by raesene6 9y ago
I don't think it gives you nothing. As an example, say a 0/1-day gets dropped and someone starts compromising systems. You're trying to get round your estate ensuring patches are in place, but that takes time. The bots are st
14.
by raesene6 9y ago
So to me the answer there might be to address the complacense which is the real problem and not remove obscurity ... The idea of revealing all to improve paranoia rather sounds like the idea of attaching a sharp spike to your steering wheel
15.
by raesene6 9y ago
eh? runnning a service on an alternate port is generally extremely easy to do and has several benefits 1) It makes it easy to pick out the serious attackers. If you run SSH on 34985/TCP for example and start getting password brute for
16.
by raesene6 9y ago
There are start-ups in the "hearable" marketplace. Things like https://www.nuheara.com/ have products out already and there's various ones like http://www.waverlylabs.com/ coming along focus
17.
by raesene6 9y ago
I've used screen to GIF for this http://www.screentogif.com/ it worked pretty well for me.
18.
by raesene6 9y ago
if a keyboard requires compressed air cleaning to function, that sounds like a design defect to me. I've used PC keyboards for ~25 years now and I've never had one that would break if not treated ...
19.
by raesene6 9y ago
I've not look too much at Mesos and DC/OS, so could be wrong, but my understanding is that where Openshift is focused on managing containerized workloads using Kubernetes and Docker or CRI-O , Mesos and DC/OS are more widely
20.
by raesene6 9y ago
As InTheArena says, both Docker EE and Openshift have Open source cores and then supply commercial support and additions to suppplement them. It's a pretty common model amongst these companies, and hey they've got to make money so
21.
by raesene6 9y ago
Not really sure I see the vendor lock-in here. If you use Docker EE sure you're going to be locked in to their solutions to an extent but then that's true of adopting any commercial supported solution that provides layers on top
22.
by raesene6 9y ago
I like minikube for some things, but I'm hoping this will be better by allowing for multiple K8s nodes to be spun up which is handy for some learning/training scenarios
23.
by raesene6 9y ago
This looks really cool from the videos that they've got up on their Youtube channel. I'll be very interested to see what choices they made for Kubernetes configuration as there's a lot of options there and they're pitchi
24.
by raesene6 9y ago
it's 3 of 9 barcode ( https://en.wikipedia.org/wiki/Code_39 ) that says "BearSSL"
25.
by raesene6 9y ago
To be honest I'm a external security assessor/pentester and I've not had much pushback from clients on this. That said I don't always get visibility of whether they implement our recommendations or not :) To me, it&#x27
26.
by raesene6 9y ago
Loading third party JS is increasingly common for a lot of sites, and I tend to raise it when doing security reviews, for this reason, you're trusting the security of those 3rd parties. There are some defenses that can be put in place.
27.
by raesene6 9y ago
Yeah my main time with them was early 90's when I spent two summers working in arcades at the Santa Cruz beach boardwalk. We often got to play after hours for free, and Street fighter and mortal combat were favourites.
28.
by raesene6 9y ago
http://www.investopedia.com/ask/answers/100115/why-luxembour... suggests that the basic rate is 21%? and http://www.grantthornton.lu/online/www/navMain/publications/... su
29.
by raesene6 9y ago
interesting read. One thing I'm surprised about is that they didn't assess the Slack chat that's mentioned throughout the document, to assess what information might have been uploaded/shared there. From what I've s
30.
by raesene6 9y ago
Indeed. Another useful technique, which has been recently introduced, is Multi-Stage Builds https://docs.docker.com/engine/userguide/eng-image/multistag... . This lets you avoid putting tools needed for compi

More ›