Kalium

9 ms·

31.
by Kalium 2y ago
The GS schedule has location adjustments. They don't always keep up with the actual cost of living in a location. The NYC area means there's a 37% boost to pay, but NYC is not just 37% more expensive to live in than baseline.
32.
by Kalium 2y ago
For delivering strict network access controls, a clear audit trail at multiple points, and (at a guess) the usage of very temporary credentials to actually log in, yes. Especially if the same infrastructure is used for other, less SaaS-cent
33.
by Kalium 2y ago
Google/Alphabet is willing to mandate - and then enforce - sweeping changes. When they shifted to U2F and forced everyone to use it, phishing all but vanished as an ongoing problem. I don't know if Microsoft is capable of that, te
34.
by Kalium 2y ago
You're describing what's popularly known as a "security champion" program. The problem is you're giving a little bit of training and authority to someone who is primarily accountable for marketing/dev/wh
35.
by Kalium 2y ago
You're absolutely right. The token is clunky. The rest - a VPN to a virtual desktop - is entirely reasonable.
36.
by Kalium 2y ago
Yes. Generally it can be summarized as "What data security?". Snark aside, there's usually a reflexive assumption that more data is always better and that anything that gets in the way of more data is bad. Anything that limit
37.
by Kalium 2y ago
In theory, there are documents out there a startup can read, understand, and follow to get reasonable outcomes. Theory is a wonderful place, I'm told. I'd like to visit someday. In practice, the answer is to hire a consultancy. Th
38.
by Kalium 2y ago
As a security person trying to work with marketing and data engineering teams, I've often found them very resistant to learning how to secure things. They generally want to use the tools they know, in the way they know, to do the tas
39.
by Kalium 2y ago
Once they're convinced it's the fastest and easiest way to have a wordpress instance they can publish to as they please, they most certainly are. Or, as in the example, they get the idea that having a database they can analyze wil
40.
by Kalium 2y ago
Making doing things right has to be easy. You also need excellent monitoring, because it's inevitable someone will do something else no matter how easy. There are plenty of people and teams who just want a button to push to run their
41.
by Kalium 2y ago
That's only possible when the regulatory environment allows it. If your insurance regulators won't allow that kind of flexibility, then they have to look for other options. This is often approached through the lens of consumer pro
42.
by Kalium 2y ago
In the US, it's a requirement of mortgage lenders. This makes it less of a legal requirement and more of a de facto requirement, as most homes are purchased via mortgage in the US.
43.
by Kalium 2y ago
At the risk of being callous, the goal of home insurance is to assess and manage risk. Choosing ignorance in the interests of giving some people a subsidy on the assumption that they may be poorer does not further these goals in any way I c
44.
by Kalium 3y ago
> Also. No matter how bullish you are on the potential of AI, it's horrifying and categorically unethical to use them to decide who to kill. It creates the possibility of atrocity with no accountability. How much technology is it et
45.
by Kalium 3y ago
I believe you may have overlooked one of my key points: we did not have any useful way to predict those consequences at the time production was being automated that would have marked them out as particularly likely. Automation started in th
46.
by Kalium 3y ago
To clarify, I am not saying blowback is completely unpredictable. You are absolutely right that there are times when blowback can be predicted in a general sense. My argument is that a general directionality of blowback is generally not use
47.
by Kalium 3y ago
Automating knowledge work is what enables people to learn from books instead of hiring tutors. Teaching can now be done via tools and printing presses. This in turn means we can have libraries, which many people consider a key public good.
48.
by Kalium 3y ago
I'm doing my best to tell this user that their imagination is possibly on to something, but mostly this is a waste of energy. I'm exaggerating the realistic possibilities to help them feel good about themselves because it makes it
49.
by Kalium 3y ago
Yes. You're right. Absolutely, completely correct. There's almost certainly other ways life can start. Other processes that can result in intelligence. Other paths of technological development. The issue, as I understand is, is th
50.
by Kalium 3y ago
It doesn't have to be deliberate. For a lot of people, aggression is their immediate defensive response.
51.
by Kalium 3y ago
If your entire life is based around your car, it's your most important and powerful symbol of autonomy, wealth, and personal liberty. The prospect of someone in government deciding one day that the life you live is no longer welcome an
52.
by Kalium 3y ago
The classic example of admissions does not have a missing confounding variable. It's a case of aggregation at the wrong level.
53.
by Kalium 3y ago
It's my experience that housing exists on a spectrum, rather than being strictly for business or tourism or long-term living. Any space that could rent furnished apartments by the week to business travelers could also be renting unfurn
54.
by Kalium 3y ago
Depending on what you're doing, a hotel can be a poor fit for your needs. I've spent weeks in hotels at once, and for me it got absolutely miserable quickly. A studio apartment instead was much, much better.
55.
by Kalium 3y ago
That might work if your company hired the pen testers, it's a lot less likely to work if they were hired by a client. In the latter case, the overhead of all the required explanation and smoothing of ruffled feathers for the client lik
56.
by Kalium 3y ago
Have a solid value proposition and communicate it clearly to potential customers. Do this consistently over time, and customers will find you quickly when they need you.
57.
by Kalium 3y ago
My possessions were not nationalized at least a dozen times yesterday. It hasn't changed my behavior much, nor that of any company worth mentioning. Perhaps your life has been different from mine. The absence of a major punishment is n
58.
by Kalium 3y ago
> Google search was incredible? Ad sense let publishers earn money online? Great. Then let's reward them for that instead of letting them take 60-70% of the ad publishing market. This one sticks out among your examples - that domina
59.
by Kalium 3y ago
Yes, assuming the responses are usefully different, accurate, and you get responses in a timely manner.
60.
by Kalium 3y ago
Yes and no. Yes, with the additions of sheer scale, a vast number of services, multiple layers, and the difficulty of defining "down" added in. I think the difficulty of reporting useful error messages is proportional to the numbe

More ›