acdha

7 ms·

91.
by acdha 2mo ago
Try not to: use AWS short-term credentials for anything there, federate with GitHub/GitLab job credentials where possible, etc. It’s easier and you never worry about rotation again. If you can’t avoid it, use an automatically-rotated s
92.
by acdha 2mo ago
The one thing which might have helped is the “external sandbox” detail: registering CI instances is noisy but it should be highly consistent so you could potentially alert on use outside of the expected environment (e.g. I have AWS STS sess
93.
by acdha 2mo ago
> Most thesis are never read because anything worth sharing with the wider world ( and some that isn't ) is highly likely to have been published as a paper - not because the work in thesis has no value. Yes - my wife’s advisor liter
94.
by acdha 2mo ago
This can be confounded heavily by the riding “agrivoltaics” trend of finding ways to use solar panels while continuing to farm the same land. The most common example are ranching (e.g. letting sheep enjoy the shade under panels) but some cr
95.
by acdha 2mo ago
Someone needs to learn about RFC 2606: > In one evaluation, the fictional target company chosen by our evaluation partner shared a name with an active website domain name https://www.rfc-editor.org/info/rfc2606/
96.
by acdha 2mo ago
> otherwise I agree with you and am tempted to buy one just to fuck with advertisers. How that actually works in practice is that your favorite sites make less money and your IP gets a bad reputation so you CAPTCHAs or outright blocked.
97.
by acdha 2mo ago
In the 90s, there was a cottage industry selling CDs of bootleg software at swap meets and flea markets. A guy my dad knew was almost condescending to anyone who paid for software despite having been hit by viruses multiple times because it
98.
by acdha 2mo ago
I was trying to figure out why we saw so many fraudulent applications from Vietnam for a service which is restricted to the United States, especially because they were all getting rejected - it seemed like even the laziest spammer would los
99.
by acdha 2mo ago
What keeps Linux distributions safer is that fewer people are able to push updates and there’s a time delay. The compromises are because people exploit release pipelines and if your build infrastructure is compromised it’ll merrily sign the
100.
by acdha 2mo ago
> I think one thing that would help is to support mutual TLS, with X.509 certificate chains for authentication. This is more secure than personal access tokens This adds an large amount of overhead and complexity (i.e. you now need to ma
101.
by acdha 2mo ago
Remember that they have a great deal of telemetry around things like crashes and work with groups like Citizen Lab for certain high-risk users. You can’t prove that something was never used in a perfectly targeted and concealed attack but i
102.
by acdha 2mo ago
Given that his departure was marked by Apple products getting more reliable and usable, they arguably did too much in that regard (one of Cook’s more notable bad calls). Once he stopped blocking it, the keyboards were fixed and pro devices
103.
by acdha 2mo ago
That surely is a sustainable and cost-effective alternative to Google using their trillions of dollars in resources to behave responsibly.
104.
by acdha 2mo ago
@gmail.com and @outlook.com are like 90% of the spam I receive. What’s missing is effective accountability for those two companies hosting persistent spam groups who operate for months unimpeded.
105.
by acdha 2mo ago
HR does what senior management tells them to do. The C-level loves it when you blame HR rather than them.
106.
by acdha 2mo ago
> There are tons of CAPTCHAs, and many of them are impossible to solve even with real chrome and no adblock extension Do you have any other extensions installed or use a VPN? This is highly abnormal compared to most users’ experience but
107.
by acdha 2mo ago
If you work in a field which matters, not trusting even “Frontier AI” is also known as “basic professional competence”. If you’re vibe-coding a marketing site nobody dies if you miss a mistake. The same is not true in healthcare or real eng
108.
by acdha 2mo ago
Right - it was always dangerous but people who figured they weren’t important enough to be attacked might find out that LLMs have shifted that cost in the wrong direction.
109.
by acdha 2mo ago
> You need also factor development time and ease of finding developers willing to work in a specific language This even more strongly favors Rust or Swift. Nobody is writing C or even Objective-C in 2026 as a growth language.
110.
by acdha 3mo ago
Oh, believe me, I’ve been on both sides there. My observation was that over time the burden of maintenance and on-boarding new developers pushed me from wanting more flexibility to saying that the restriction was more valuable than I though
111.
by acdha 3mo ago
> It's like hiding the kitchen knives because they might be misused. I used to agree with this more strongly but over time decided the Django model was actually more effective as your cue to ask whether you should have been writing
112.
by acdha 3mo ago
Using Django back in the 2000s it was easy to get in the hundreds of requests per second unless you were doing truly pathological things in templates or gnarly database queries, and we have far more cores now. Usually something that low eit
113.
by acdha 3mo ago
I would also note that there were things like the weird restrictions on fabric and clothing which make more sense when understood not as something an omniscient divine being cared about but rather as part of rabbinic politics where the cent
114.
by acdha 3mo ago
Also some of the free VPN apps support themselves by proxying this kind of traffic: https://www.kaspersky.com/blog/what-is-wrong-with-free-vpn-s...
115.
by acdha 3mo ago
That was Louis von Ahn’s stated goal when he announced it - i think it was his NIPS (now NeurIPS) talk where he basically outlined the training data paying for the infrastructure as a fair exchange.
116.
by acdha 3mo ago
You don’t have to look any first than the White House to say that behavior is well-established in American culture, too. From the prosperity gospel to “don’t hate the player”, etc. this is deeply not a Chinese thing.
117.
by acdha 3mo ago
Is not showing a cancel button quickly better or worse than treating accessibility as a checkbox and producing things which many people struggle to use despite laws requiring you to support them? Shoving unwanted features into a bundle? Enc
118.
by acdha 3mo ago
Keep thinking about the parallel you’re drawing and you might hit the difference: that phrase gained notoriety in the Nuremberg trials for murder but somehow we do not give the same weight to, say, a pushy salesman or a debt collector or a
119.
by acdha 3mo ago
I don’t like it either but blame goes to the top of the org chart. That’s not illegal or, by the standards of the field, flagrantly unethical so it’s a bit extreme to expect someone to resign over.
120.
by acdha 3mo ago
Yeah, it makes sense as a display of clout, the normal rules not binding them. I would have thought there was more sense of pride but that’s very middle class of me, I suppose.

More ›