abadpoli

6 ms·

1.
by abadpoli 2y ago
This presumes that it will be real humans that have to “take care” of the code later. A lot of the people that are hawking AI, especially in management, are chasing a future where there are no humans, because AI writes the code and maintain
2.
by abadpoli 2y ago
Electricity and water are things that we don’t mind (or even want) people using less of. The same can’t really be said for Spotify etc.
3.
by abadpoli 2y ago
Airbus A350s had the same issue: https://www.theregister.com/2019/07/25/a350_power_cycle_soft... We’re just going to see more and more issues like this as more and more software is used in applications like t
4.
by abadpoli 2y ago
There never will be an adequate industry-wide certification. There is no universal “good enough” or “when to stop” for security. What constitutes “good enough” is entirely dependent on what you are protecting and who you are protecting it f
5.
by abadpoli 2y ago
None of what you just said about US law is relevant here. Yes, Cloudflare has to abide by international law where it operates. This is established and every company across the globe is subject to it. Cloudflare operates in and has a physica
6.
by abadpoli 2y ago
If us-east-1 ever suffered a “FULL” data loss, it would be a company-ending event for so many companies that it would practically end society as we know it. OVH’s failure was a single building. That’s the problem with a lot of server hoster
7.
by abadpoli 2y ago
> AWS ProServe never had a RTO mandate Before Covid, no team had an RTO mandate, so ProServe wasn’t really special here. In ProServe you were still expected to be in an office regularly, but it was just understood that you wouldn’t be
8.
by abadpoli 2y ago
This undersells the fact that there’s a lot more to infrastructure management than “janitoring”. You and many others may want to just say “here’s my code, ship it”, but there’s also a massive market of people that _need_ the customization a
9.
by abadpoli 2y ago
You’re completely off the mark here. I’ve worked at a Big4 company before on reports like this. These reports aren’t paid for by other companies at all. They’re internally funded and done by the internal research teams. The motivations behi
10.
by abadpoli 2y ago
Can we not do this? Everyone knows that “serverless” doesn’t actually mean there are no servers. It’s not productive to do this “haha gotcha!” trope every time someone uses the serverless term. Serverless refers to the fact that you can lau
11.
by abadpoli 2y ago
> whether I'm managing 100 of the same thing or 1,000 - if I've built proper automation my only additional overhead is replacing failed hardware Hahahah surely this is a joke, right? If it’s so easy and you already had solved a
12.
by abadpoli 2y ago
Ah, yes, my original comment was a little unclear. I actually wasn’t logging in on new device vs existing device, it was that I had logged in to one device before 9:30est (presumably before the surge began) and just had an existing already-
13.
by abadpoli 2y ago
It’s the largest trading volume day in years and everyone that isn’t living under a rock is trying to log into their banks to check their portfolio. The banks can’t handle the surge logging in. It’s not that suspicious. Not everything is a
14.
by abadpoli 2y ago
I’ve been a Schwab user for years, and was a TDA user as well before the merger. TDA had just as many issues like this. Don’t let your recency bias fool you. Schwab is overall a great bank and brokerage. Fidelity’s user experience quite fra
15.
by abadpoli 2y ago
I’m not sure how the inability to login is “more complex”. I clearly state in my comment that logging in wasn’t working.
16.
by abadpoli 2y ago
Both Fidelity and Schwab were fine for me on devices where I was already logged in, but logging into a new device wasn’t working. This seems like a common issue - even if backend systems can take the load, login systems all seem to have a l
17.
by abadpoli 2y ago
> corporate travelers actually do not get the most value/benefit from points travel because corporate travelers already fly on business. Flying on business class is just a given. I’m not sure what your background is, but this seems
18.
by abadpoli 2y ago
My take is that it’s related to the parent commenter’s thoughts on the relative monopoly that Bell had. If you’re a monopoly with no practical competition, sharing your accomplishments gets you good will and has little downsides. But if you
19.
by abadpoli 2y ago
I imagine they would do something like this: https://news.microsoft.com/source/features/innovation/datace... These innovations don’t always have to be “marketed” to be shared. Things like this get developed a
20.
by abadpoli 2y ago
There is an insane amount of innovation happening at Google and Microsoft et al. The amount of investment going into efforts like making data centers more power efficient, making better cooling systems, reducing latency or using fiber more
21.
by abadpoli 2y ago
The motivation is in the project’s readme, down at the bottom. The tl;dr is that this is for legacy software where you can make HTTP calls to retrieve a secret, but for some reason cannot use the AWS SDK. If you can use the SDK, you should
22.
by abadpoli 2y ago
The extent of the “conversion” required would pretty much just be taking one form of JSON output and transforming it into a different JSON output, which is pretty easy to do in a few lines of Python or a single jq command. It would likely b
23.
by abadpoli 2y ago
The article and source material are light on details here. My guess is that it is using HTTPS, but the researchers saw the plaintext password in the request and assumed “password in plaintext always bad”. If the app isn’t using HTTPS, then
24.
by abadpoli 2y ago
The router itself has an internet connection but that doesn’t necessarily mean that all of the other stuff required to actually route traffic or connect other devices is configured (like DHCP). It’d be possible to have some sane defaults in
25.
by abadpoli 2y ago
> But the experience of using a speical-purpose WiFi network is janky on many common devices so I understand not taking that choice. Yea, this is my hunch as well as to why this works this way. Consumers are easily confused, and asking t
26.
by abadpoli 2y ago
Is this actually plaintext, or is this plaintext-inside-HTTPS? The article and source material don’t say. It’s pretty normal for passwords to be “plaintext” inside an HTTPS request. That’s how practically every login to a web app works. I
27.
by abadpoli 2y ago
I was a python main before I started using elixir and I had similar thoughts, but after becoming more familiar with it, I actually think elixir is far less verbose than python. They’re different enough languages that it’s really difficult t
28.
by abadpoli 2y ago
Part of this story is a self fulfilling prophecy. If devs like you avoid using Elixir because you’re afraid it isn’t popular enough, then it isn’t going to become more popular!
29.
by abadpoli 2y ago
No, that isn’t the case at all. The issues with Starliner do not affect its ability to return to earth or function as an “escape pod” if that were necessary. There’s no safety issue or concern at all with using Starliner as a return craft.
30.
by abadpoli 2y ago
I don’t see what that has to do with this story, though. Starliner’s issues have nothing to do with the breakup of a satellite nor do the issues affect Starliner’s usage as a shelter. This article and headline just reek of the author graspi

More ›