Kalium

67 ms·

901.
by Kalium 6y ago
I remember being 17. I was spectacularly bad at evaluating risks. You're right - a lot of people who want to file bug bounties overestimate how much marginal ones are worth. At the same time, this scenario suggests to me that bug bou
902.
by Kalium 6y ago
> It's just unfortunate that the various channels like HackerOne[0] or wherever the skiddies flock to these days are not utilized thoroughly. A lot of the bug bounty programs don't pay as well as using exploits to steal money.
903.
by Kalium 6y ago
It's how you tease apart if someone cares more about presentation of ideas or the substance of said ideas.
904.
by Kalium 6y ago
Would you be more open and accepting to commentary if there was more kindness, more love, more empathy and compassion in discussions of how the old normal is gone? Expressions of admiration and awe coupled with opining that the old multi-ye
905.
by Kalium 6y ago
They don't see it as injustice. They see it as protecting workers against management, as solidarity between one another. The rest of us just happen to call that accountability.
906.
by Kalium 6y ago
My apologies! I can see I have been unclear. Please allow me to correct this error. I do not think, do not believe, and do not claim that all the problems of policing in the US reduce to weaponized solidarity. I think, believe, and stand by
907.
by Kalium 6y ago
It may be worth bearing in mind that one thing police union contracts can and do win as a concession is cities taking on civil liability and paying for legal defenses. The whole system is set up to dismiss and ignore poor behavior because t
908.
by Kalium 6y ago
I'm sorry to say, I chose that word quite specifically. I don't mean loyalty. I mean solidarity.
909.
by Kalium 6y ago
OK. What, in your mind, should grocery stores do about shrinkage? Bear in mind that grocery is a notoriously low-margin business, and stores can and will be shut down if shrinkage at a location is too high. Perhaps also consider that there
910.
by Kalium 6y ago
> That's the thing I don't get and that is the most upsetting thing to me about this situation: why aren't police officers speaking out more against each other? There's a word for this: solidarity . This is what it l
911.
by Kalium 6y ago
> Whether your attacker used a nation-state toolkit if so then they don’t have to pay. Definitely seen that one. I'm curious as to why an insurer wouldn't look at a bottom-tier pen-test for signs of gross negligence. They'
912.
by Kalium 6y ago
Naively, I would expect that an insurer is less likely to pay out if a basic pen-test suggests negligence on the part of the company.
913.
by Kalium 6y ago
In that case, I have good news! Well, good-ish. If this happens often enough, higher-ups sometimes get sick of being blind-sided by it. They start being pro-active about addressing security issues and planning projects to pay down tech debt
914.
by Kalium 6y ago
Sometimes it crops up in vendor review or similar. I've definitely found myself reviewing pen-test reports for exactly that reason without a lawsuit or discovery. Needless to say, having a bad pen-test report and then burying it would
915.
by Kalium 6y ago
> Being able to run metasploit and wireshark does not make one a hacker. By doing this, pentesters test for yesterday's hacks, not tomorrow's. Funny enough, this thought process shows a failure to understand process and interna
916.
by Kalium 6y ago
Depending on how the network is configured, node-to-node spread may be possible. Firewalls - hardware or software - are not magic and can definitely miss things. It may also have been a matter of servers getting infected, infecting hosted f
917.
by Kalium 6y ago
You're absolutely right. What's good for civilization is to advance scientific understanding and knowledge. To take risks, because sometimes they pan out! So go on, pour resources into a thousand crazy ideas. Something will work
918.
by Kalium 6y ago
There may be a subtle distinction between a demand for university-trained workers and a demand for universities. The latter produce the former. However, more universities may not be the as efficient a way to train more people as expanding e
919.
by Kalium 6y ago
Depending on how you integrated it and how deeply, it may be trivial. Certainly going from one DNS-based CDN to another can be pretty easy - a Cloudflare / CloudFront swap could be quick. Which suggests to me that CDNs are already a co
920.
by Kalium 6y ago
CDNs are expensive to build, and often not very useful to customers until you've built out a large portion of it (actual hardware required, you can't just run it atop AWS). On top of this, much of the money is in Enterprise. So yo
921.
by Kalium 6y ago
> to be used against German law enforcement. Against, or by? I'm not trying to nitpick, just make sense of this. You imply that the German government hired Gamma to gain access to FinFisher, and then talk about it being used agains
922.
by Kalium 6y ago
Let me see if I follow. Auto-provisioned TLS (misleadingly termed "fake SSL") on the front-end for delivering static contents and caching. A private subdomain with a pinned cert not managed by the CDN to deliver static contents
923.
by Kalium 6y ago
> I admit that this is a, I guess, pretty european view of things (i.e. govs are good, since they keep greedy companies in check), while the american view might rather be that govs are bad because they get into the way of companies (whic
924.
by Kalium 6y ago
In my experience, it's extremely rare to find a CDN that doesn't expect to do TLS termination. My understanding of TLS is that it's exceptionally difficult to cache content if you cannot see into the requests. Perhaps I have
925.
by Kalium 6y ago
Once upon a time, I knew a mid-20s Chinese national lady who was a flight attendant for more or less this reason. She - and I will not presume to speak more broadly than this particular lady - definitely used it to meet and date.
926.
by Kalium 6y ago
The DSM can perhaps be viewed as a field guide to systems we can see the outer manifestations of but have limited deep insight into.
927.
by Kalium 6y ago
Excuse me. You're right, I've been over-broad. Purposely adopting cargo pants requires a rejection of the primacy of common, mainstream aesthetic culture in clothing decision-making for any of a variety of reasons. Examples includ
928.
by Kalium 6y ago
How "bad" they look is part of the aesthetic of cargo pants. Wearing them is in part a deliberate declaration that you do not care about the aesthetic considerations.
929.
by Kalium 6y ago
Honestly, the author seems mostly to be reacting to the name cargo pants. Thus the reeling off of associations they aggressively dislike. These are merely pants with additional pockets. Their placement being similar to cargo pants being m
930.
by Kalium 6y ago
CDNs are decentralized by nature.

More ›