bostik

14 ms·

91.
by bostik 9mo ago
While I agree, I think that's still incomplete. To me good comments have always been about "what is being done AND why". Or to put it another way: to provide the necessary context for figuring out why a particular piece of co
92.
by bostik 10mo ago
I'll drop in from the sidelines, with the massive track record of having written one (1) book. The prestige probably isn't what you'd expect. Having an ISBN to one's name carries ~zero weight for the people that actually
93.
by bostik 10mo ago
Less theft, more stalking.
94.
by bostik 10mo ago
> Ultimately it was only used to install malware in the form of browser extensions, ... Like any other MDM software.[0] Everyone who has been long enough in the infosec industry knows that MDM is fundamentally nothing more than a corpo
95.
by bostik 10mo ago
Based on the snippets I've gathered from Money Stuff, essentially bleeding-edge researchers with an already established track record and a PhD. Couple of items I could easily find from my own archive: - https://www.bloo
96.
by bostik 10mo ago
You've stumbled upon the same trade Matt Levine has been pointing out for a few months now. If you're good at AI, you could get hired at a top-tier company for 1-2M annual comp, and expect to stay there for at most five (5) years.
97.
by bostik 10mo ago
Oddly enough I happen to be Finnish, and formed my view of the world during my first twenty'ish years in there. That view has served me well over the subsequent decades. It's no surprise or secret that I have since left the countr
98.
by bostik 10mo ago
Humans are unavoidable optimists and (sadly) the only sustainable approach is to assume the worst of everyone. Then when they eventually outdo even your worst expectations, you will be less disappointed by the gap between your original impr
99.
by bostik 10mo ago
There is a surprising amount of important data in various Mongo instances around the world. Particularly within high finance, with multi-TB setups sprouting up here and there. I suspect that this is in part due to historical inertia and exp
100.
by bostik 10mo ago
Are you certain about which way the arrow of causality points there? Your friend might have more reason to be optimistic because he is financially secure.
101.
by bostik 10mo ago
I moved to UK in late 2013 and to be fair, from my observation the cellular coverage in the country has always been more than just a bit shitty. Incidentally, the voice call quality in the UK is also really crappy. Operators compress&#x2F
102.
by bostik 10mo ago
One should also remember that NVidia does have organisational experience on designing and building CPUs[0]. They were a pretty big deal back in ~2010, and I have to admit I didn't know that Tegra was powering Nintendo Switch. 0: htt
103.
by bostik 10mo ago
Correct. From what I understand, Shodan has had for years a search feature in their paid plans to query for "service X listening on non-standard port". The only sane assumption is that any half-decent internet-census[tm] tool has
104.
by bostik 10mo ago
> On the other hand, removing exec permissions to /tmp, /var/tmp and /dev/shm is also useful. Sadly that's more of a duck tape or plaster, because any serious malware will launch their scripts with the pro
105.
by bostik 10mo ago
Your CI has to be fully codified, stateless and possible to redeploy with a single command. That's the only way it can remain sustainable. No persistent hidden state, no manual configs (even as an option!) and automatically rebuilt o
106.
by bostik 10mo ago
There's a corollary to that question: why would China choose not to block Mullvad? We know every large nation with a capable online force maintains a fleet of ORBs, so maybe they consider Mullvad more useful for them as a functioning s
107.
by bostik 10mo ago
As someone who writes both Python and Go (and I've been using Python professionally since 2005), I remember that the scoping behaviour has changed. Back in Python 2.1 days, there was no guarantee that a locally scoped variable would co
108.
by bostik 10mo ago
I think I've seen one or two, and only because I noticed them as a weird callout in a $LARGE_FINANCE_INSTITUTION infosec bingo sheet. Of course I had to check that they really were running with OV certs. Some of the outfits in that s
109.
by bostik 10mo ago
> The ads OpenAI wants to roll out would like be for free users At first. The scream going through the hallways at HQ must be along the lines of: "Nonononono! Not yet!"
110.
by bostik 10mo ago
VictoriaMetrics. The answer to the question "could I get Prometheus, but with ClickHouse architecture?"
111.
by bostik 10mo ago
> 2 minutes for their automated alerts to fire is terrible I take exception to that, to be honest. It's not desirable or ideal, but calling it "terrible" is a bit ... well, sorry to use the word ... entitled. For context
112.
by bostik 11mo ago
There may well be some "interesting" financial arrangements in place between the two. After all, Claude models are available in AWS Bedrock, which means Amazon are already physically operating them for other client uses.
113.
by bostik 11mo ago
Individual and startup devs yes. Enterprise devs, less so. The latter are locked in to whatever vendor(s) their corporate entity has subscribed to. In a perverse twist, this gives the approved[tm] vendors an incentive to add backend integra
114.
by bostik 11mo ago
I suspect there is no decent "minimal" API. Once you get to tens of millions of objects in a given prefix , you need server side filtering logic. And to make it worse, you need multiple ways to do that. For example, did you know
115.
by bostik 11mo ago
Probably closer to 2019. Maybe the optionality is a relatively new feature then.
116.
by bostik 11mo ago
Elasticsearch comes to mind.[0] The docs state that is query is in the URL parameters, that will be used.I remember that a few years back it wasn't as easy - you HAD to send the query in the GET requests body. (Or it could have been th
117.
by bostik 11mo ago
Don't skimp on the power supply either. A dodgy PSU can torch all devices attached to it. How do I know? I've had two drives and one MB fail in quick succession thanks to a silently failing power supply.
118.
by bostik 11mo ago
The thing that's missing is the difference between a unsolicited external content (ie. pay-for-play stuff) and directly user-supplied content. If you're doing editorial decisions, you should be treated like a syndicator. Yep, that
119.
by bostik 11mo ago
As a Finnish citizen living in the UK, I also come from a culture where a national ID system exists. I would not trust the UK to do theirs sensibly. Even the invoked name "Digital ID" makes it very clear that this system would r
120.
by bostik 11mo ago
Or as in my case, lighttpd, with all its CGI, user-input processing or dynamic execution modules not even loaded. Makes for an attack surface that gets delightfully close to zero.

More ›