cdchn

14 ms·

151.
by cdchn 2y ago
No, when the point of the badges is to hack and repurpose them, they're arguably _less_ wasteful than a simple paper & plastic badge.
152.
by cdchn 2y ago
There are a ton of other infosec conferences where you'll meet just as many if not more of the smartest people, with a much better SNR.
153.
by cdchn 2y ago
>Has there been anything in all this that would suggest anyone was in danger at the conference? Depends on how much you danger you consider someone making unwanted physical contact and restraining your movements.
154.
by cdchn 2y ago
Dmitry is posted on reddit that he is going to DMCA DEFCON for using his code unauthorized and is granting napkin licenses to people in reddit comments or who had the badge signed at DC https://www.reddit.com/user/dmitr
155.
by cdchn 2y ago
From Wikipedia via the IMF money is: Fungible: its individual units must be capable of mutual substitution (i.e., interchangeability). Durable: able to withstand repeated use. Divisible: divisible to small units. Portable: easily carried an
156.
by cdchn 2y ago
Money is fungible. That is what makes it money. You're just thinking of different ways to allocate it.
157.
by cdchn 2y ago
Musk seems to want the remaining Twitter employees to be in the office, and San Jose fits the lifestyle profile of those remaining much better than San Francisco does.
158.
by cdchn 2y ago
Hmm Twitter wasn't able to single handedly rejuvenate the Tenderloin when they moved to 10th & Market like they were crowing about?
159.
by cdchn 2y ago
Lots of What (we made a disaster recovery region in US-West) with zero How. Cool, "deadlines are important."
160.
by cdchn 2y ago
$9 a month? Really?
161.
by cdchn 2y ago
This is classic misalignment of business needs vs. perceived management wants. Are they paying you to answer false alarms, or are they paying you to make sure the site is available and performant to keep customers happy? Nobody with half a
162.
by cdchn 2y ago
If you make your goal as high availability as possible, and you only get paged on outages, then your goal should be to never get paged. You should be building resilient architectures, not being on firewatch duty.
163.
by cdchn 2y ago
If your org claims to be "customer obsessed" then reframe your alerts as what their impact to customers are. Don't say "elevated 502 errors" say "customers couldn't encountered errors X times."
164.
by cdchn 2y ago
I'll try that, thanks. Although the current cohort of games I play seems more stable now. If I ever go back to EVE Online then it'd be more of an issue - that thing crashed constantly.
165.
by cdchn 2y ago
I built a system last fall with an i9-13900K and have been having the weirdest crashing problems with certain games that I never had problems with before. NEVER been able to track it down, no thermal issues, no overclocking, all updated dr
166.
by cdchn 2y ago
Is using on-prem instead of cloud/SaaS a "competitive advantage?"
167.
by cdchn 2y ago
>having CI fail if the optimized binary contains ANY call-sites to the panic handler. How do you do that?
168.
by cdchn 2y ago
Security by obscurity is just another layer of security. The problem arises when its your only layer of security.
169.
by cdchn 2y ago
Sources I've seen was that there was a .SYS file with all zeros that caused the BSOD. A configuration file shouldn't cause a bluescreen. EDIT: It is in the 'drivers' directory, has a .SYS extension, but was something ca
170.
by cdchn 2y ago
If CrowdStrike's system wasn't able to prevent a kernel driver thats all zeros from getting by, you can be sure a malicious payload would have breezed right through. There was no validation, phased roll-outs, almost certain no mul
171.
by cdchn 2y ago
One could make the argument that automatically patched software is, in aggregate, more secure/less problematic than chronically under-patched software that requires manual, human attention.
172.
by cdchn 2y ago
If CrowdStrike's system wasn't able to prevent a kernel driver thats all zeros from getting by, you can be sure a malicious payload would have breezed right through.
173.
by cdchn 2y ago
That's the joke.
174.
by cdchn 2y ago
Funny enough, Claude couldn't tell me that.
175.
by cdchn 2y ago
How do you get it to run the code? I try some toy examples to generate a graphic and it tells me "Claude can't run code yet."
176.
by cdchn 2y ago
The very long introductory page has a ton of very juicy data in it, even if you don't care about the product itself.
177.
by cdchn 2y ago
>Is there a good general purpose solution where I can store a large read only database in s3 or something and do lookups directly on it? I think this is pretty much what AWS Athena is.
178.
by cdchn 2y ago
Estate liquidation.
179.
by cdchn 2y ago
Being purely subjective if the user is less likely to notice the throttling than they are the fan noise, then it seems like the right call.
180.
by cdchn 2y ago
I don't understand the obsession with reimplementing Python utilities or ecosystem elements in Rust.

More ›