bostik

48 ms·

211.
by bostik 2y ago
Funny anecdote: back in 2004-2006 when I held the Infosec 101 course at the university, I raised an obvious point in the privacy section. If an individual harvests data on other people and then uses that to track their movements, actions an
212.
by bostik 2y ago
For some reason I think it will have been even more mundane. It is quite a long time ago, but Matt Levine wrote at the time that GS was (for whatever reason) desperate to get into consumer finance. They saw the market as an open opportunity
213.
by bostik 2y ago
I upvoted you, because I think you have a valid point. The tone is unnecessarily aggressive though. Effective and information-dense communication is really hard. That doesn't mean we should just accept the useless fluff surrounding t
214.
by bostik 2y ago
If a similar and equally large-scale attack was done by a nation at war with US, targeting US military command, would that be a low-casualty operation or an act of terrorism? And would it matter if the technical interpretation differed wild
215.
by bostik 2y ago
About a year ago? I wish that was a joke. Sadly the quality of mostly human submitted applications has already gone downhill thanks to the ease of blasting untargeted CV spam to every even remotely relevant sounding job.
216.
by bostik 2y ago
In the world of late-stage capitalism we live in, sensibility and morals are cutting into profit margins. In effect, having either is as good as leaving money on the table. Here Automattic have figured out a novel way to shut out competitio
217.
by bostik 2y ago
There are many words one could use to describe the scenario, but at the top of my mind is the one I would expect to be wielded by modern business schools: Leverage. Make of that what you will.
218.
by bostik 2y ago
The use of aerial imagery for institutional asset tracking is older and much more widespread than we'd think. Back in 2005/2006 my university maths professor (in Finland) had an established side gig in the US. He had polished a pr
219.
by bostik 2y ago
Funnily enough... considering how healthcare in the US is tied to employment, then professional athletes of any age should be covered for it by their employer. People who do pro sports are constantly pushing their bodies to the very limit
220.
by bostik 2y ago
Comedy is a complex, living, writhing thing. With rules. This article feels like the author has taken the concept of one-liner (arguably the densest form of standup comedy) and extended that to be comedy at large. I feel like you could take
221.
by bostik 2y ago
No worries. From a national sovereignity perspective, I can see what you were trying to say. Especially with the growing international tensions, wanting to maintain an industrial and manufacturing base is a rational take. FTR: I think that
222.
by bostik 2y ago
Yes we do. The "code is law, and law is code" crowd fail to understand that reality is messy and context must be accounted for. To determine between wrong and illegal: intent matters.
223.
by bostik 2y ago
> But the headline number is somewhat irrelevant. 300m sent to Finland is "gone forever". Even with the quotes, as a Finn I find this statement rather tasteless. Or would you also claim that cross-border trade with more nearb
224.
by bostik 2y ago
This is what diceware is the perfect remedy for. Sequence of randomly selected words with your choice of delimiter, reasonably easy to input even with a shitty touch-screen keyboard. Surprised it's not a default option for modern passw
225.
by bostik 2y ago
Harder. Vacuum is an excellent thermal insulator.
226.
by bostik 2y ago
Anecdotally, I think a fair chunk of writing CVs (and to a smaller degree, cover letters) is already outsourced. Adding an AI to the mix will only make things worse. I have seen a number of CVs over the past few months that fall into two ey
227.
by bostik 2y ago
Israel has a mandatory military service, and they have been cultivating technical talent development in their armed forces for a long time. So I would think that the arrow of causality runs the opposite way. In other words: virtually every
228.
by bostik 2y ago
> There is no "formula" for success in the creator economy - the winners are largely random. That observation has echoes of the music industry - another extremely top-heavy creator business. There are formulaic ways to make &
229.
by bostik 2y ago
This one sounds like a standard application of Chatham House rules[0]. No press, no snipe reporting, no out-of-context soundbites. The short version I often use about that rule: "you can quote, but you can not attribute". It'
230.
by bostik 2y ago
On the off chance that I would be using VR headsets in the first place - I might. Much in the same way I will happily play a well maintained pinball machine from the last millennium, or an arcade game in a lovingly restored cabinet from 30+
231.
by bostik 2y ago
Sure. This is from the previous job. And for background: the service in question would routinely have several thousand concurrent, live user sessions. All stateful. Two teams, let's call them Team A and team B, would have their respect
232.
by bostik 2y ago
> Python chooses to provide (3) because Python is slow anyway so why not at least provide the least surprising container I believe this misses quite an important bit of history. Python's dict retains key creation order since 3.6,
233.
by bostik 2y ago
I'm not surprised. And I think you nailed the reason too: > copied a lot in the industry because they work well for the problem space Finance as an industry could be described as ... incestuous. The people move around within the s
234.
by bostik 2y ago
It is quite fitting that another HN darling, Jane Street, uses similar architecture in their exchange(s). Event input queue, fully deterministic matching engine, and an output queue. Plus importantly, a sequencer to guarantee that the event
235.
by bostik 2y ago
In other words: "my time is more valuable than your life".
236.
by bostik 2y ago
Crowdstrike took out less than 1% of the global Windows installation base. But they took out a far larger fraction of installation base in regulated industries. The very industries who are tightly regulated because they are supposed to ke
237.
by bostik 2y ago
Not really a surprise, to be honest. "Deserialisation" encapsulates most forms of injection attacks. OWASP top-10 was dominated by those for a very long time. They have only recently been overtaken by authorization failures.
238.
by bostik 2y ago
> Approximately 100% of CVEs, crashes, bugs, [...], deserialising binary data I'd make that 98%. Outside of rounding errors in the margins, the remaining two percent is made up of logic bugs, configuration errors, bad defaults, an
239.
by bostik 2y ago
The original instructions were "delete [something]00291-*.sys"
240.
by bostik 2y ago
Friend does incident response and Windows forensics, and pointed something (in retrospect) rather obvious out yesterday: the instructions for cleaning up simply told people to "delete .SYS files according to this wildcard". No add

More ›