bostik

44 ms·

511.
by bostik 5y ago
Defense in depth implies a whole lot of things, and is certainly not security theater. Usually it boils down to three major themes: 1. Reduce blast radius: assuming component X is compromised, how far and wide can it be felt? 2: Principle o
512.
by bostik 5y ago
For a messaging application whose intended target audience includes dissidents, location sharing even as an option sounds dangerous. Especially given this from your comment: Focus on providing security fixes and minor improvements that i
513.
by bostik 5y ago
> Sneakers features a box which can decrypt anything Not "anything". Merely the standard encryption used [and sold] by their own government. The allusion to NSA being an arm of nation-state industrial espionage apparatus is q
514.
by bostik 5y ago
> So using cloudflare on a cache hit (best case), you save something like 160ms per roundtrip. Per packet. If you're doing a cold start, you'll pay that latency cost several times over: first the TCP handshake (3 roundtrips),
515.
by bostik 5y ago
Speaking of Rijksmuseum and seeing things in person, they maintain a small satellite exhibition at Schiphol airport[0]. It's a wonderful way to spend an hour if you're flying through and have long enough between flights to get bor
516.
by bostik 5y ago
> my definition of an asshole is one who's mean, uncaring, and arrogant By that definition, I've worked with three clear matches and four pretty good runner-ups over the past 20 years. The absolute worst one was not a dev, bu
517.
by bostik 5y ago
With an online business you're not placing the value on the software created, but on the potential to create lasting addiction. The same way when you see news of large drug busts, the numbers floated around are based on how much the co
518.
by bostik 5y ago
In the expensive tech hubs you can expect to pay at least $150k/year in salary for a competent engineer. Add all the admin overhead and other per-employee expenses (1.5x multiplier?) and 350k/year doesn't buy you anywhere nea
519.
by bostik 5y ago
> * There is no compliance reason why OP couldn't have read access to look at the source.* At a guess, I would say you have never worked with DRM integration. Getting access even to the binary SDK's can take months, and if you
520.
by bostik 5y ago
Speaking of NFS, ex-coworker had renamed his prior company's servers "notresponding" and "stilltrying". The NFS client logs must have been glorious.
521.
by bostik 5y ago
Law of large numbers. The widespread plagues of the past were never 100% lethal, or we wouldn't be here - a sizable fraction of the population survived, and over several rounds of infection/reinfection gained something we'd t
522.
by bostik 5y ago
Prediction markets, or at least the decent and regulated ones, won't touch the plague. It's gambling, and taking bets on human misery is generally frowned upon as a business practice. You need insurance provider's license for
523.
by bostik 5y ago
Become an AV vendor. A good one. Entire sections of business are (for all intents and purposes) legally required to run up-to-date AV products on all their Windows endpoints.
524.
by bostik 5y ago
All of them? Not in those words, because "impossible" is a term a corporate PR machine will not want to throw around, but you will see the phrase "a very hard problem" quite often. And for a good reason. Please read: ht
525.
by bostik 5y ago
IIRC Cloudflare said the earliest they had seen this being exploited in the wild was very early December, but the volume went up after Friday.
526.
by bostik 5y ago
The button is available only for a time window (2h?) after the submission. Which makes sense, on a message board (which HN is) the feature is mostly supposed to allow quick fixes over minor errors, not retroactive editorial work.
527.
by bostik 5y ago
Yes, that's already been established as an exfiltration vector: https://www.fastly.com/blog/digging-deeper-into-log4shell-0d... - note the ${jdni:dns:...} syntax bit in the middle. Combined with the WAF bypasses d
528.
by bostik 5y ago
How about feeding the magic string via Host header in your requests and then cutting off? You wouldn't even need to establish the full TLS handshake, SNI is sent in the clear, and you would get to hit every single load-balancer and mid
529.
by bostik 5y ago
Friend is a hobbyist blacksmith and he said it really well. Japan developed their hugely overdone turned-steel technique because the ore they had to work with was so bad: hammering the garbage out was the only way to get the quality of th
530.
by bostik 5y ago
In other news, journalism is now an international crime and a capital offense.
531.
by bostik 5y ago
Well that's funny, the cert is valid until 2022-01-16. It might have something to do with the LE intermediate root rotation - Chrome variants and Firefox are happy with the chain, but Safari's CA trust store may not have the new i
532.
by bostik 5y ago
Not penalised no, but questioned as to how well your graceful failure worked in the end. Remember: it may not be your fault, but it still is your problem.
533.
by bostik 5y ago
It is possible to do ads acceptably, but pre-loading a list of offenders who get around your choices is not it. If you want to do ads online, here are the initial rules of engagement: https://bostik.iki.fi/aivoituksia&#x2F
534.
by bostik 5y ago
I use Zoom and Meet daily too. They are both functional on the bare-bones level but fail miserably with anything more complex - such as a 10+ person meeting. Or screen sharing. Meets craps its UI dimensions when you open chat. Zoom pops the
535.
by bostik 5y ago
If Skype had remained as useful and easy to use as it was >10 years ago, Zoom would A) probably never have picked up steam, and B) had a much steeper uphill battle Before the plague hit only startups really used Zoom. The corporate video
536.
by bostik 5y ago
> Those who don’t get tested are free to meander. And we should call them for what they are: mobile biohazards. There are established protocols and procedures for dealing with such.
537.
by bostik 5y ago
And perhaps counter-intuitively: slower development speed often means reduced reliability. If your development and deploy cadence is slower, you end up batching up more changes in any given deployment. Larger changes => higher likelyhood
538.
by bostik 5y ago
While that's a real problem in general, I would think that for this particular group of people it might be less of an issue. We are well paid, and as such majority of HN'ers should qualify for premier banking. One of the advanta
539.
by bostik 5y ago
You can get dedicated tenancy instances in AWS, for an upfront monthly cost of ~$1.2k (per account) and about +10% on top of your normal EC2 instance costs. I ran the numbers back in 2015 and persuaded the previous employer to go for dedica
540.
by bostik 5y ago
Fortran compiler (f77 maybe?) on a Sun system had reserved filenames. In Finland, back in the late 90's first-year chemistry students were still exposed to Fortran as their entry to programming. I was helping another student debug thei

More ›