auslander

11 ms·

61.
by auslander 7y ago
I wonder what would be the cost without k8s setup and no containers at all, pure compute nodes. I bet my last socks twice less, at least.
62.
by auslander 7y ago
CircleCI trusts 8 analytics companies with your source code and API tokens https://kevin.burke.dev/kevin/circleci-is-hopelessly-insecur...
63.
by auslander 7y ago
On AWS, Cloudformation is far more reliable and lean (less LOC) than TF. No corrupted state issues, all resource properties are supported, parallel (fast) resource creation just for starters. And TF sales pitch about "multi-cloud"
64.
by auslander 7y ago
Liberals and downvoters are designated primary targets. Weapons free, my friends, weapons free.
65.
by auslander 7y ago
> core problem in the United States' institutions - Defense industry dysfunction. Not Super PACs? "they can raise funds from individuals, corporations, unions, and other groups without any legal limit on donation size."
66.
by auslander 7y ago
https://en.m.wikipedia.org/wiki/The_Purge
67.
by auslander 7y ago
> towers with cameras and infrared sensors that use artificial intelligence to track movement. No automatic gun turrets and autonomous drones? Phew!
68.
by auslander 7y ago
World needs a Coupon Stock Exchange, like NYSE. Then bundle fake coupons into CDOs.
69.
by auslander 7y ago
List of FF "integrations" grows. There is also HIBP one. We need a clean from 3rd parties version, like ungoogled-chromium project.
70.
by auslander 7y ago
> The conclusion of the debate Obviously debate is still on, as we see in here and in [0], and it looks like HN folks are not in favour of these integrations, including me. So question stands, how/why the debate was concluded, did a
71.
by auslander 7y ago
How decisions are made in Mozilla? By whom? Is there public discussion beforehand?
72.
by auslander 7y ago
OpenBSD folks removed it, and they are always right about security, as they were with disabling Intel hyperthreading.
73.
by auslander 7y ago
> Apple strengths are in integration, design and marketing. I would place unmatched iOS security first, strong privacy stance second, well before marketing.
74.
by auslander 7y ago
Sticking to Safari, I guess.
75.
by auslander 7y ago
Safari
76.
by auslander 7y ago
This. Many people do not realise that CF can see inside encrypted HTTPS traffic. Your logins, passwords and keys.
77.
by auslander 7y ago
> If there are more reliable communication methods Of course there are. https://en.m.wikipedia.org/wiki/Project_25
78.
by auslander 7y ago
+1. Infrastructure as code is exactly that, code. For AWS it is Cloudformation template code, Cloudformation service and some CI/CD on top, like jenkins or ansible. Or Terraform for unlucky ones. K8s is container orchestration, like AW
79.
by auslander 7y ago
My history goes mostly to my carefully chosen, overseas VPN provider. Yes, there are no good choices, best you can do is to split your data between several parties, so its hard to correlate. Google has data on most people on the planet, unl
80.
by auslander 7y ago
I wish Mozilla had Firefox version free from all integrations with 3rd parties.
81.
by auslander 7y ago
> For instance Google[1] and Quad 9 [2] both provide free DNS over HTTPS services. Using Google is giving your browsing history to an Ad company, why? At least Quad9 is non-profit. It also provides DNS over TLS, DoT service, which I&#x27
82.
by auslander 7y ago
> We comply with U.S. sanctions What are good non-US CAs?
83.
by auslander 7y ago
They should have open sourced their navigation control codebase, so we can see and fix whatever bugs there are.
84.
by auslander 7y ago
So ... MCAS again?
85.
by auslander 7y ago
Extremely funny video by Moxie Marlinspike about it: https://m.youtube.com/watch?v=Z7Wl2FW2TcA
86.
by auslander 7y ago
Nah. Point stands, attack can survive the restore inside Office docs because macros are generally allowed.
87.
by auslander 7y ago
Ya. And upvote my original comment plz, its down to -2 :)
88.
by auslander 7y ago
but is a pretty good guideline :) If Windows got ransomed every time and MacOS is never, that is interesting, right? Windows holds perceived monopoly on company-wide identity control. There are Mac solutions: https://www.jamf.c
89.
by auslander 7y ago
Good practice. I'm just playing around, devil's advocate.
90.
by auslander 7y ago
Well, there is no SMB v1 on either, main propagation bug. Next propagation tools are SSH bruteforce, subnet scan for vuln apps, Domain admin creds stored locally and sniffing NTLM hashes from network interface. Again only SSH and app vulns

More ›