amlozano

7 ms·

31.
by amlozano 3y ago
Warehouse ( https://github.com/pypi/warehouse ) uses the Apache 2.0 License, I wonder how easy it would be to set up a PaaS company to do this.
32.
by amlozano 3y ago
As a security professional, I often get asked whether adding a root check is advisable. My general recommendation is to go ahead and implement it, but with a focus on data collection rather than taking action. For instance, you can log if a
33.
by amlozano 4y ago
You aren't the only one that has noticed: https://0ver.org/ More seriously though, for these projects, the first version is version zero. If they make no major backward incompatible changes, why would they ever release
34.
by amlozano 4y ago
I totally thought Anvil had self-hosting. I was seriously considering it for my next project. Now not so much.
35.
by amlozano 4y ago
I was wondering where I had heard this term before, and then remembered this is also a good unlock in universal paperclips. Spoilers; https://universalpaperclips.fandom.com/wiki/The_OODA_Loop
36.
by amlozano 4y ago
TreasuryDirect.gov should get a special callout for forcing you to use an on screen keyboard to click your password, with of course paste disabled.
37.
by amlozano 4y ago
Regarding over the top accomplishments in resumes: every resume writing workshop tells you to do this. I don't think you should be rejecting these first just because someone listened to the advice of "sell yourself".
38.
by amlozano 4y ago
For sailing maybe not, but a vehicle can in fact be made that can go downwind faster than the wind https://youtu.be/yCsgoLc_fzI
39.
by amlozano 4y ago
I think NIST has actually recommended against forced rotation of passwords (unless they are breached) since at least 2017. "Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or p
40.
Newegg Is Desperate: Dumping GPUs with “JustGPU” [video](youtube.com)
21 points by amlozano 4y ago|0 comments
41.
Advances in Software Inspections (1986) [pdf](mfagan.com)
2 points by amlozano 4y ago|0 comments
42.
by amlozano 4y ago
Because it makes sense for everyone. Making the system perfectly handle an infrequent use case is a waste of resources for the larger system. A manual, buggy process is likely fine. The time spent to make it perfect would be large. That tim
43.
by amlozano 4y ago
Penetration testing / security consultancy falls into this trap too. All the downsides are present. It is weird, though maybe not so weird if you think about it for a few minutes, how closely aligned law and offensive security are with
44.
by amlozano 4y ago
"The FBI said it uncovered the scheme through the work of two confidential informants and surveillance of the alleged plotter’s account on the Meta-owned WhatsApp messaging platform." I wonder why ISIS was so insistent on using Wh
45.
Isis Plotting to Assassinate George W. Bush in Dallas(forbes.com)
2 points by amlozano 4y ago|1 comments
46.
by amlozano 4y ago
Louis Rossmann, who has been outspoken about Apple's repair hostility and is a right-to-repair advocate, has released a video where he goes over his take on this site: https://www.youtube.com/watch?v=agG108sxkyo It&#x2
47.
by amlozano 5y ago
Maybe check out Tauri then https://tauri.studio/en/
48.
Amazon disables New World 'wealth transfers' to fight gold dupe exploit(pcgamer.com)
2 points by amlozano 5y ago|1 comments
49.
Ask HN: How do you find a doctor in the USA?
10 points by amlozano 5y ago|11 comments
50.
by amlozano 5y ago
It seems to be something mostly specific to the EVGA version of the card, which is a real head scratcher.
51.
Amazon’s New World reportedly breaking RTX 3090 graphics cards(tomsguide.com)
21 points by amlozano 5y ago|9 comments
52.
by amlozano 6y ago
I've often wondered the same thing, but about personal health information and educational information (HIPPA, FERPA). If you intercept that data and store it, transmit it or even just allow real time access to it are you suddenly on th
53.
by amlozano 6y ago
I think its worse than cheapening the reputational cost, it has put a concrete ceiling on the financial cost - something like users affected * 2 years of free credit monitoring.
54.
by amlozano 6y ago
As someone who is pretty much an app sec engineer, I feel like this rings true. Furthermore, part of me suspects that the tangible business risk of application security flaws isn't felt until after a breach, when its far too late to ch
55.
RMIScout: Brute-Force Java RMI Interfaces for Code Execution(labs.bishopfox.com)
1 points by amlozano 6y ago|0 comments
56.
by amlozano 6y ago
If you discard any quantum computing, this is similar to the plot to the series of novels starting with "Off to Be the Wizard" by Scott Meyer. A fun, quick little read about a person who discovers the source database of reality, a
57.
by amlozano 7y ago
How hard are these things to build? It certainly looks like a complicated medical device, but is there a simpler DIY version that gets the job done?
58.
by amlozano 7y ago
I used to trust the California Olive Ranch brand for olive oil, but lately noticed they started labeling their some of their bottles as imported and accidentally bought some. It tastes fine, but if I recall correctly the problems with olive
59.
by amlozano 7y ago
Tell that to us Windows and Linux people
60.
by amlozano 7y ago
When talking about passwords specifically in our reports (I work at a security company too), I tell our team to use the same language as NIST 800-63B, since its the best "standard" for passwords and authentication I can find. The

More ›