Nextgrid

30 ms·

541.
by Nextgrid 10mo ago
The bad guys will steal that private key and decrypt the encrypted secrets the same way they can steal the unencrypted secrets directly.
542.
by Nextgrid 10mo ago
If it's a single application exposed to the internet that is using those tokens then an env file is perfectly fine. If the application gets breached the secrets will be in memory anyway (as the app needs them to do its work), so they w
543.
by Nextgrid 10mo ago
There's a lot of performative "security" in such companies. You need to employ the right people (you need a "CISO", ideally someone who's never actually used a terminal in their life), you need to pay money f
544.
by Nextgrid 10mo ago
Security has become a big talking point , and industry vultures have zeroed in on that and will happily sell dubious solutions that claim to improve security. There is unbelievable money sloshing around in those circles, even now during
545.
by Nextgrid 10mo ago
Isn't it then even better to enjoy cheap inference thanks to techbro philanthropy while it lasts? You can always buy the hardware once the free money runs out.
546.
by Nextgrid 10mo ago
Rude is the default if you optimise everything down to perfection to prioritise profit, which tech is really good at doing. After all, that extra second you’d spend being courteous could be used to make the line go up and create shareholder
547.
by Nextgrid 10mo ago
> a polite rejection email is also sufficient The reason for the lack of those is that employers want to hedge their bets - emailing a rejection will make the candidate move on and potentially take another offer which would make them una
548.
by Nextgrid 10mo ago
And of course the roles are hybrid specifically to prevent you from living in a location where you can actually afford rent.
549.
by Nextgrid 10mo ago
SIM cards is (one) of the ways the big boys do it. It gives you a nice CGNAT to hide behind and essentially can’t be blocked without blocking a nontrivial chunk of the country. Although more and more fixed-line ISPs are moving to CGNAT too
550.
by Nextgrid 10mo ago
The whole “blaming Gen Z” thing is getting old. You get what you pay for. You’re likely offering “market rate” roles. You’re getting “market rate” candidates and behavior. It’s like walking into a Fiat dealership and being mad you’re not ge
551.
by Nextgrid 10mo ago
There are generally 2 angles to it: * malicious: hostile actors want to gain footholds into companies - North Korea, etc * benign: people in lower income countries want to do the job and can make good profit even when giving half the salary
552.
by Nextgrid 10mo ago
I don't think true mastery exists in a continuously-evolving field like tech, it's all people just figuring things out, and accumulating enough knowledge/experience means the things you build no longer blow up and mostly do
553.
by Nextgrid 10mo ago
A bit on the larger size, but this already exists: https://www.gpd.hk/gpdpocket
554.
by Nextgrid 10mo ago
I assume this is mitigated by delaying the uploads by a month (which you may need anyway due to sporadic internet access & not always having the time to edit videos).
555.
by Nextgrid 10mo ago
This is absolutely doable by a niche company. The problem is that you need to run this as a business . What plagues every free/open/libre project is that they're not run as a business; so they get distracted in all different
556.
by Nextgrid 10mo ago
Are any of those drones being shot down? Is anything being done about it besides (AI-assisted) fear-mongering? That is the real question. If the drones are a problem, shoot/neutralize them and thank Russia for the free target-practic
557.
by Nextgrid 10mo ago
Email their legal department?
558.
by Nextgrid 10mo ago
That's just post-Windows 8 Microsoft quality for you. Every product has been like that - looks "ok" on the outside (in reality it looks shit, but at least that's intentional), but the second you dig deeper and start usin
559.
by Nextgrid 10mo ago
A structural engineer will not sign off on bad designs no matter how much pressure the company applies to them. They will resign and/or report the incident to their local regulator as a safety issue. We don't have that for develop
560.
by Nextgrid 10mo ago
You and I both know the answers to those questions; my point is that the average non-technical user does not and this presents significant extra friction that Instagram doesn't have. (this kind of attitude of asserting technical superi
561.
by Nextgrid 10mo ago
A handful of servers vs thousands. Are you on Instagram?" is easy to understand for someone not on it; they search for "Instagram", install the client app, sign up and done. "Are you on Mastodon?" doesn't work
562.
by Nextgrid 10mo ago
It's one of those few times where exposure is actually beneficial though.
563.
by Nextgrid 10mo ago
You've perfectly summarized the entire industry. There's no actual market pressure to be secure, so nobody cares about threat modeling, cost/benefit of security solutions, etc. The only pressure in case of breach is political
564.
by Nextgrid 10mo ago
AI is moving so fast even people doing it full time can't always keep up... which is not a big deal because very little of this "AI" effort actually makes any money. Let them burn their money figuring out what works and what
565.
by Nextgrid 10mo ago
The regulations were good, it's just that enforcement was and remains dysfunctional and basically non-existent. Those business-ending GDPR fines HN loves fear-mongering about never materialized. Similarly with the DMA - Apple is still
566.
by Nextgrid 10mo ago
I can pick my groceries faster and with less aggravation than I can navigate the online ordering UI's dark patterns and attempts to get me to "engage".
567.
by Nextgrid 10mo ago
Despite all the AI slop I don't quite get it, was the track metadata pushing an incorrect cover image (a screenshot of someone's Insta profile) or was it linking to an Insta profile (meaning the track/artist metadata had a
568.
by Nextgrid 10mo ago
GDPR is an excellent idea if it was actually enforced, which it wasn't. To their credit, the non-enforcement was consistent regardless of whether the offender was EU-based or not.
569.
by Nextgrid 10mo ago
> China has been steadily moving towards being an actual competitor to the US China is in this position because of regulations (and technological enforcement of them like GFW), which prevented US tech from taking any significant footho
570.
by Nextgrid 10mo ago
> only the EU needs to stifle existing companies to be able to have a chance to compete [emphasis mine] Tell me another country that competes with the US on monopolistic tech platforms? The only one I know of is China, and that's

More ›