ragona

5 ms·

1.
by ragona 1y ago
Definitely, but when we're running around sprinkling PQ algorithms all over the place, it's on top of the asymmetric bits, not replacing the "boring" stuff like your symmetrically encrypted backups. Shit certainly does h
2.
by ragona 1y ago
> encrypts it with a static key What type of static key? If it's just a big symmetric key that isn't derived from an asymmetric handshake of some type then no, that's not our current understanding of the PQ threat model.
3.
by ragona 1y ago
I don't think that's quite right. PQ attacks focus on the "trapdoor" functions in asymmetric cryptography, _not_ the symmetric encryption that happens after key negotiation. The current concern is that a future attacker
4.
by ragona 1y ago
(Note; I also work for OpenAI Security — though I’ve not worked on our bounty program for some time. These just my thoughts and experiences.) I believe the author was referring to the standard BugCrowd terms, which as far as I know are them
5.
by ragona 3y ago
Yeah if you click into the report per industry it shows a totally different number -- $1.7T, which is obviously smaller than the ~$5T that the same site lists for oil and gas.
6.
by ragona 3y ago
The "eval" phase is done after a model is trained to assess its performance on whatever tasks you wanted it to do. I think this is basically saying, "don't evaluate on the entire corpus, find a smart subset."
7.
by ragona 3y ago
It’s handy for uploading a dataset and having it play with it.
8.
by ragona 3y ago
> it's about being genuine I think this is an incredibly important lesson. Don't lie, _actually_ find something good to say. It's a goddamned super power, and it's also very good for your own mental health.
9.
by ragona 3y ago
I agree that complexity and quality can be unrelated. I think that quality is often misinterpreted as beauty, or brevity, or cleverness — and those are not the same as quality, in my opinion. Often a long function with a bunch of error and
10.
by ragona 3y ago
The CDK and Pulumi teams must be truly delighted by this move.
11.
by ragona 3y ago
You don’t think handling edge cases and errors is fundamentally necessary?
12.
by ragona 3y ago
I think the problem with this assertion is that over time "good" code often ends up littered with important conditionals to handle cases that upset the general readability and expressiveness of the initial delivery. Imagine a FinT
13.
by ragona 3y ago
Yeah I'm sure there are counter-examples. My experience is that I worked at Amazon from 2012-2020, and I recall trying to shut down a project in maybe 2013 and it was _incredibly_ tricky.
14.
by ragona 3y ago
Dang, I'm actually surprisingly sad about this. DPReview is _the_ site for extremely detailed analysis of cameras. When I want to buy something I go through their report first, and it's always extremely informative. It feels like
15.
by ragona 4y ago
I bet it's easy to make $500/day briefly, and hard to sustain it. Catalytic converters have the benefit of not requiring you to break into someone's house where risk of being caught or harmed is way higher.
16.
by ragona 4y ago
> poor IAM policy and role modeling This is a bad take. Making good IAM Roles and Policies is incredibly complicated if you have a complicated account. You WILL get it wrong. This becomes much more tractable if you have reasonable accoun
17.
by ragona 4y ago
You're missing the core challenge of JWTs, which is revocation. If you just check the signature then users can't log out.
18.
by ragona 4y ago
> understood that managing down is much more important than managing up and (3) knew how to say "no" to upper management effectively. Wait, saying "no" to upper management _is_ managing upwards. If you have a high per
19.
by ragona 4y ago
I get it -- it's such a trap to say, "well, <tech giant> does it!" But in this particular case, I actually think they're walking the walk of having small teams that act like startups. You end up with small engineer
20.
by ragona 4y ago
I've started to believe that product engineers should manage their own infrastructure. I think the key ingredient is _isolation_, so that it's not that they have to figure out how to fit their service into the unholy single produc
21.
by ragona 4y ago
I have the worst news for you about blockchains.
22.
by ragona 4y ago
There are entities other than the government that you might want to hide money from.
23.
by ragona 4y ago
Your certificate is bad; it's serving the Squarespace cert for the justvanilla domain.
24.
by ragona 4y ago
I'd say distributed is about redundancy and scale within a single entity's infrastructure, where as decentralized implies multiple entities working together.
25.
by ragona 4y ago
Have you tried instead paying untrained students minimum wage?
26.
by ragona 4y ago
Yup, seems busted.
27.
by ragona 4y ago
This is clearly a spectrum. On one hand we have Mad Max-style "might is right" anarchy, which is over-prioritizing freedom. On the other we remove all personal choice in order to "keep people safe." So the question is, &
28.
by ragona 5y ago
If you ever manage to leak a private key it’s easier to track it back to you. There was a recent paper showing the ability to tie rather a lot of keys to the associated developers.
29.
by ragona 5y ago
AWS has very wide bands in L5 and L6. L5 is not Staff level, but L6 starts moving into it near the top of the band.
30.
by ragona 5y ago
Usually you have a pool of money to split between your reports, playing with say a 2-6% raise for them. If you have an underpaid report you try to favor them, that kind of thing. If you get someone promoted, they get bumped into a new salar

More ›