TZubiri

19 ms·

421.
by TZubiri 4mo ago
I'm not american, but the idea that your SSN, which is effectively a (federal) unique identifier for a person, would be secret, is very foreign. In most countries, like most databases, our primary keys do not hold an expectation of sec
422.
by TZubiri 4mo ago
>Why wouldn't they? There are probbaly significant downsides if they fail an audit requirement, Right, and keeping old passports used for verification should cause an audit to fail.
423.
by TZubiri 4mo ago
I have a story about this, although it's a bit convoluted and not entirely related. But it does showcase low-value usecase compromising a high-value auth mechanism. I was working on a project, client is a Real Estate agency, they use
424.
by TZubiri 4mo ago
>One domain per person How will you ensure this?
425.
by TZubiri 4mo ago
Domain names are not centralized, there is no central entity that controls an approved list of kosher domains.
426.
by TZubiri 4mo ago
"armed bank robber in Richmond, Virginia. He fled with $195,000. Law enforcement tracked Okello Chatrie down through their use of geofence warrants. Chatrie had opted in to an optional Google “location history” feature that documented
427.
by TZubiri 4mo ago
> Are you seriously suggesting that the number of people attacking computer systems across the world, is the same as 20 years ago? Am I? Are you suggesting that systems 20 years ago were as secure as modern systems? If the PoW cybersecur
428.
by TZubiri 4mo ago
I know what type of anarchism you are referring to, spray paint a circled A, live in a farm, free love anarchy. but what about free market capitalism, anarcho capitalism, the austrian economic school, the chicago boys, Milton Friedman, Javi
429.
by TZubiri 4mo ago
The mechanism of VPN is pooling together many users and making them indistinguishable to the outside, providing plausible deniability. Outsiders can see a user belongs to the pool, but they can't tell if they are 'good' or &#
430.
by TZubiri 4mo ago
highly unlikely the LLM will try to do privesc exploits, LPE risk still exists and should be assumed though, although the more likely risk model is the LLM installing an infected left-pad package, or (on servers) installing a dependency wit
431.
by TZubiri 4mo ago
>Obviously, XZ happened on Debian. But $malware can occur on any Linux distribution at any time. For a recent example just look at Arch Linux. ? Debian has a track record and a reputation. And Arch Linux has another, much worse, track re
432.
by TZubiri 4mo ago
Everything "sucks" (has problems) the ways in which X11 "suck" are very well documented and understood, and there are few, if no surprises. Sure, major version revisions that break the previous API exist. But in my exper
433.
by TZubiri 4mo ago
Sounds overkill, how about giving the agent its own user?
434.
by TZubiri 4mo ago
Question, out of curiosity, do you know how User and Permissions work?
435.
by TZubiri 4mo ago
Out of scope, learn cybersecurity. A simple concept such as users and permissions solves this problem. Regardless of what technique you use, you need a deputy, you wouldn't ask an employee not to go into the vault, right? You would loc
436.
by TZubiri 4mo ago
As far as I understand it, yes, the corporate legal system is setup to precisely solve this problem. Court cases are public, and non payment cases can be brought to courts, generally as breach of contract. So find the State the company is s
437.
by TZubiri 4mo ago
X11 fine Youngins just don't wanna learn it
438.
by TZubiri 4mo ago
> the whole XZ ordeal 1 malicious package almost got distributed in 20 years of debian history? >granting full rights to vim or xeyes I'm not sure I get what's being discussed here. Standard Xorg runs without root already. A
439.
by TZubiri 4mo ago
"Your honour I just scanned a list of all devices in the planet and filtered those that looked like cameras and made a website such that even more people can access it even more easily." I get it if you think this is a legal gray
440.
by TZubiri 4mo ago
I can see of two main ways were such imprecision can have negative effects even if small. 1- As mentioned, even if pennies, it breaks integrity checks. Which may cause for them to be ignored, which can cause real integrity issues to be igno
441.
by TZubiri 4mo ago
*neobank
442.
by TZubiri 4mo ago
> GPT 5.5, for example, costs $5 per million input tokens and $30 per million output tokens. This is currently the costliest model available as per OpenRouter. claude 5 mythos and fabled are 50$/MOutTok. Previous models were priced
443.
by TZubiri 4mo ago
I may be reading between lines, but temporal seems to be a virtual machine like the evm, it handles computation. Barbara is a company wide database, it handles data storage. When I read about internal app state being stored in Barbara I&#x2
444.
by TZubiri 4mo ago
If you are selling B2B or high ticket items, sure. But these are customers of a security product. It's as silly as running the names of mcdonalds customers through an AI to find hidden sales insights
445.
by TZubiri 4mo ago
It's a bank, that is, a bank in all but name for regulatory purposes.
446.
by TZubiri 4mo ago
Precision? Quite common in accounting, the accounting equation must balance, it's like a checksum
447.
by TZubiri 4mo ago
>Applications also commonly store their internal state in Barbara - writing dataclasses straight in and out with only very simple locking and transactions (if any). Right out of the gates, it's crazy how this contrasts with Mercury&
448.
by TZubiri 4mo ago
Sounds approachable, and something that would be evaluated based on merit. As usual, I'm assuming the assignment is evaluated based on a reasonable time-commitment. From what the recruiting experts tell me, it's a good strategy to
449.
by TZubiri 4mo ago
I don't recall if the price was confidential, but I will say that it's higher than that, and that it has been influenced by the RAM cost increase. If I recall when comparing to competition, it was premium priced, for sure, but it&
450.
by TZubiri 4mo ago
I'd be interested in the context if you'd be willing to share. It sounds from the outside like Oxide has an interview process that requires some low level engineering work to be delivered? Maybe I got that wrong.

More ›