StressedDev

25 ms·

1. 271.▲
   by StressedDev 3y ago

   Writing a SSO system is very hard. They have very high up time requirements and very high security requirements. 1Password might select a different vendor or self-host an open source or commercial SSO system. Still, there are no perfect a
2. 272.▲
   by StressedDev 3y ago

   Do you have any proof Okta is better or worse than any other solution? Measuring security is very hard. Here is the evidence I have seen regarding Okta's security: 1. The had a breach last year. 2. They just had another breach. The b
3. 273.▲
   by StressedDev 3y ago

   That tells me either the attacker either removed the access from the logs OR the attacker figured out how to access the HAR file without having the access recorded in the logs.
4. 274.▲
   by StressedDev 3y ago

   The ARM version of Windows runs ARM and x64 software. It works very well.
5. 275.▲
   by StressedDev 3y ago

   I am not sure where you got that from. Windows runs great on ARM. I got one the Windows Dev Kit 2023 (it's an 8 core ARM PC with 32 GB of RAM, 512 GB SSD). I ran run Windows, Office, Visual Studio, GIT, etc. I suspect a lot of games
6. 276.▲
   by StressedDev 3y ago

   Agrees - CloudFlare and its employees did outstanding work. My main point was calling CloudFlare a sore winner did not make sense because they did not win anything. Also, I think CloudFlare’s blog post was very good.
7. 277.▲
   by StressedDev 3y ago

   I strongly suspect a lot of organizations cover up security incidents. Also, remember that the worst organizations don’t even know they were hacked.
8. 278.▲
   by StressedDev 3y ago

   It’s true. Look at the number of security bugs in Android, iOS, Windows, Linux, Oracle, DB2, SQL Server, PostGre, MySQL, Nginx, Apache, Cisco routers, Intel chips, AMD chips, etc. The security bugs are not there because of incompetence or
9. 279.▲
   by StressedDev 3y ago

   Unfortunately, getting breached is not a sign a person or organization is incompetent. All getting breached means is someone decided to attack and organization and found one or more holes in the organizations services.
10. 280.▲
    by StressedDev 3y ago

    Everyone will get hacked. It is obvious no one knows how to write completely secure software. It is also obvious no one knows how to never make operational mistakes, never misconfigure software, never forget to remove access, always rotat
11. 281.▲
    by StressedDev 3y ago

    Unfortunately, running things on-prem will not prevent security breaches and may be far far worse than relying on a cloud vender for authentication. Here is why: 1. All software has security bugs. This includes on-prem software. 2. Many I
12. 282.▲
    by StressedDev 3y ago

    I am not sure I would call CloudFlare a “winner” in this case. They did not win anything by getting hacked.
13. 283.▲
    by StressedDev 3y ago

    Wow First, CloudFlare is not responsible for people misusing its service. It is not feasible for ANY cloud provider (or company) to determine which customers are legitimate and which are crooks. Second, reports of fraud do not mean there i
14. 284.▲
    by StressedDev 3y ago

    A couple of points. First, Okta should get credit for publicly acknowledging the compromise. Second, expecting any company or organization to never get hacked is unrealistic. Organizations which are transparent and acknowledge their securi
15. 285.▲
    by StressedDev 3y ago

    First, you are assuming Okta is worse than any other vender. It is very very very possible that other authentication venders are either just as bad or even worse. Remember, no one knows how to build an unhackable computer, service, or sys
16. 286.▲
    by StressedDev 3y ago

    First, Okta got hacked and that hack allowed CloudFlare to get hacked. That is bad. Second, one of Okta’s other customers reported the hack and Okta either ignored the report, or investigated the report and did not find the hack. That is
17. 287.▲
    by StressedDev 3y ago

    It sounds like the finder notified the squid team. Why did the squid team not fix the bugs?
18. 288.▲
    by StressedDev 3y ago

    You are right that dating at work can lead to a lot of drama and should be avoided. That being said, that was not the problem at FTX/Alemeda. The problem with FTX was it was a fraud. San Bankman-Fried speculated with customer money w
19. 289.▲
    by StressedDev 3y ago

    Comcast / Xfinity has had IPv6 for years (probably 5-10).
20. 290.▲
    by StressedDev 3y ago

    Please stop spreading unfounded rumors or speculation. Microsoft's failed partnership and acquisition of Nokia was not a conspiracy. My guess is the failure occurred because of bad luck, incompetence, and politics. I believe MS lost
21. 291.▲
    by StressedDev 3y ago

    Please do not make or spread these sorts of allegations without providing some VERY strong evidence. The most likely explanation is the new CEO's strategy either did not work or the board and founder felt they had a strategy which woul
22. 292.▲
    by StressedDev 3y ago

    He may not know how it happened. Remember, he started his job 2 days ago.
23. 293.▲
    by StressedDev 3y ago

    Your post is misleading. The new Flexport CEO said "Flexport is rescinding a bunch of signed offer letters for people who were starting as soon as this Monday." Note that not all of the 75 people were going to start on Monday.
24. 294.▲
    by StressedDev 3y ago

    People are often fired/pushed out/let go for the wrong reasons. This is not a clear case where Dave Clark did anything wrong.
25. 295.▲
    by StressedDev 3y ago

    Dave Clark either resigned, was pushed out or was fired. It's hard to see how he did not suffer consequences or was not held accountable. Also, you need to establish that Dave Clark performed poorly and should have known the company c
26. 296.▲
    by StressedDev 3y ago

    Another thing to consider is the employee might be coming from a worse employer or may take a job because they are really interested in it. Flexport's behavior was not good in this case but I suspect a lot of future employees will stil
27. 297.▲
    by StressedDev 3y ago

    I am sorry this happened to you. There is not much to say other than I am glad you found out they could not keep their word (and may have been unethical) before you accepted an offer.
28. 298.▲
    by StressedDev 3y ago

    What you have to remember is there are no guarantees in the world. No one wants to tell 75 people their job offers were rescinded. The problem is Flexport thinks this is better than the alternatives. Sometimes, you do not have good optio
29. 299.▲
    by StressedDev 3y ago

    I assume Dave Clark is the former CEO. Why should he pay? What if he thought that they needed these roles? What if the new CEO disagrees and they both have valid points? At this point, the new CEO (who is also the founder) has to take r
30. 300.▲
    by StressedDev 3y ago

    How do you know those people are telling the truth or even people? Remember, there is a lot of astroturf on the Internet. A good way to spot corporate astroturf is to watch which companies have people who defend them no matter what they d