Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
andersonmvd
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
14 ms
·
91.
▲
by
andersonmvd
10y ago
"You call it procrastination, I call it thinking", that's a quote I heard in a TED talk :) Leonardo da Vinci seems to be one of those who procrastinated/thought a lot.
92.
▲
by
andersonmvd
10y ago
Thank you, I'll consider doing a benchmark later and I will be happy to switch if the difference is significant :). Nonetheless congratulations on your project!
93.
▲
by
andersonmvd
10y ago
> But it has slightly different feature set and different implementation, as well as focused on being as tiny as possible. That's precisely what I wanted to know more, because I already use The Great Suspender. You know, I usually b
94.
▲
Docker for Automating Honeypots or Malware Sandboxes
(dadario.com.br)
4 points
by
andersonmvd
10y ago
|
0 comments
95.
▲
by
andersonmvd
10y ago
We usually can't see the same problems happening in front of our noses. Why shouldn't we discuss why docker images run as root by default then?
96.
▲
Getting ready for 2017
(dadario.com.br)
2 points
by
andersonmvd
10y ago
|
0 comments
97.
▲
by
andersonmvd
10y ago
I'm surprised that he didn't mention CSSLP from (ISC)², the same organization that created CISSP. Certified Secure Software Lifecycle Professional (CSSLP) is a certification focused on all phases of software development lifecycle
98.
▲
by
andersonmvd
10y ago
Allow me to enhance your list. "Owasp Testing Guide V4" is a must read for web hackers, at least for starters: https://www.owasp.org/index.php/OWASP_Testing_Guide_v4_Table... OWASP has vulnerable application
99.
▲
by
andersonmvd
10y ago
Breaking shit is important, so is understanding how to fix them, unless you'll work solely with penetration test. I tell you this because many hiring process for sec engs are around CTF games. From my experience as a security engineer,
100.
▲
by
andersonmvd
10y ago
It's very delicate to talk about financial burden, given the following references: "Two months after damaging data breach, Target stock has its best day in 5 years" http://blogs.marketwatch.com/behindthestoref
101.
▲
Securing a Serverless Application
(dadario.com.br)
1 points
by
andersonmvd
10y ago
|
0 comments
102.
▲
by
andersonmvd
10y ago
In summary the takeaway would be "you only understand the importance of something when you lose it" thus those kids who won the game despite receiving good advice thought that it was normal somehow to the point of not acknowledgin
103.
▲
by
andersonmvd
10y ago
> I don't think all terms with the word "self" are bad. Self-defense and self-aware come to mind :) Indeed, but I was referring to a word that contains the meaning of "self-made" when it should be something like
104.
▲
by
andersonmvd
10y ago
Nonetheless "self-made" as obvious as it sounds put "self" first, thus any term associated with "self" is harmful IMHO. Self should be always secondary and we should really think first of the entire foundation
105.
▲
by
andersonmvd
10y ago
Amazing. I've been using s3_website (1.4k stars) and it works great w/ Jekyll and CloudFront as well: https://github.com/laurilehmijoki/s3_website
106.
▲
Free Docker Security Fundamentals Course
(dadario.com.br)
4 points
by
andersonmvd
10y ago
|
0 comments
107.
▲
by
andersonmvd
10y ago
Thanks for giving a try!
108.
▲
Free Docker Security Fundamentals Course
(dadario.com.br)
2 points
by
andersonmvd
10y ago
|
2 comments
109.
▲
Free Docker Security Fundamentals Course
(dadario.com.br)
1 points
by
andersonmvd
10y ago
|
0 comments
110.
▲
Why cybersecurity has failed our market and how to fix it
(dadario.com.br)
1 points
by
andersonmvd
10y ago
|
0 comments
111.
▲
by
andersonmvd
10y ago
It's the dirty speaking of the "poorly washed". Kaspersky is said to faked malware to harm rivals ( http://www.reuters.com/article/us-kaspersky-rivals-idUSKCN0Q... ). TrendMicro allowed remote command exec
112.
▲
by
andersonmvd
10y ago
You're missing the point. It may happen with mobile as well. Actually already started. Remember last news regarding Apple kicking off some apps?
113.
▲
by
andersonmvd
10y ago
Protip: You started it as a 'discussion'. Put the link instead and prepend the title with 'Show HN: ', e.g., 'Show HN: Kwaver - Music Collaboration App' to be visible here: https://news.ycombinator.c
114.
▲
Device fingerprint introduction
(dadario.com.br)
2 points
by
andersonmvd
10y ago
|
0 comments
115.
▲
Is it really cheaper to get hacked?
(dadario.com.br)
1 points
by
andersonmvd
10y ago
|
0 comments
116.
▲
by
andersonmvd
10y ago
You're talking about Squads basically. Bring different people in the same group. And yeah, QA is very similar to Security in some points, but if you think straight QA should include security. Weird to say that a software has quality wi
117.
▲
by
andersonmvd
10y ago
That's very exciting news. I still find somewhat confusing to execute "RUN" instructions, as they're much cleaner in Linux, but I need to dig the documentation. However there is a line that caught my attention: > This
118.
▲
by
andersonmvd
10y ago
For more complicated sites I use Rails and a rake task to generate the html files, e.g., ```ruby namespace :app do desc "Generate static pages" task static: :environment do pages = { '/
119.
▲
by
andersonmvd
10y ago
Benjamin Bach seems to be awesome, however there are few people like him. Chances are your contributor won't be a Benjamin Bach. If the majority were like him, I'm sure we would have much less abandoned open source projects, but t
120.
▲
by
andersonmvd
10y ago
Indeed, you're correct. Although the server always got something. And if it was a hashed password, well, works as if the password wasn't hashed UNLESS the hash changes AFTER some challenge prior the authentication attempt.
More ›