count

27 ms·

271.
by count 5y ago
Are we over dependent on running water? How about shelter from the elements? What's the plan B for that? These are foundational capabilities of 'civilization'. We can protect them, and take actions to be able to quickly res
272.
by count 5y ago
Nearly every grocery store in the US has third party sellers. They pay the store for shelf space, provide their own stockers, etc. It's not as different as you'd believe, because you've 'heard' of the brand names
273.
by count 5y ago
10% profit is not necessarily very modest. 10% of $50M is a lot of money. 10% of $50K is not a lot of money. 10% only sounds 'modest' in relation to SaaS/software margins which are ridiculous. Walmart's gross margin
274.
by count 5y ago
Yes.
275.
by count 6y ago
No, but that's not available to anybody but the govt.
276.
by count 6y ago
Not to discount the threat, but 'vms spun up in their cloud' is ...exactly what coinminining attackers do. It's so frequent, it's even called out as a 'thing to watch your bill to notice' in amazon security ta
277.
by count 6y ago
"Anthos clusters on AWS" No equivalent alternative. Uh. Really, no Anthos on AWS equivalent on Azure? Or AWS? Boy, they're really missing that managed Kubernetes cluster game. Maybe I'm just dense, having only been doin
278.
by count 6y ago
Square is printing money, and is actually profitable. Twitter is spending way more than Square is making though, and is not profitable.
279.
by count 6y ago
As you use and configure and modify the system, it starts to drift into a functionally random state. An example: directories of plugins/etc. where the update won't have any content, but content exists in the current install. Upgr
280.
by count 6y ago
In theory, its simpler to guarantee everything is exactly as it should be, so the 'baseline' is identical. Differential based systems can fail in multiple ways (e.g. do you know when it's all done? what if one file is missed
281.
by count 6y ago
The only tangible benefits it provides are to the publishers.
282.
by count 6y ago
A better analogue is cars. You can't install anything unapproved by Lexus on a Lexus system. But you can buy a different car, and get different software and apps.
283.
by count 6y ago
"infrastructure" as code :)
284.
by count 6y ago
Are we sure they're good design principles? Have they been used to design and build something successful? I think that's the source of consternation: he preaches, and has religious fervor, but what has his principle set built (ev
285.
by count 6y ago
PG also shipped with EXTREMELY conservative defaults for buffers/etc., so it ran like total ass 'out of the box' for years. A quick change to buffer allocations and things in the config file made it fly, but you had to &#x27
286.
by count 6y ago
I think most rational people categorize 'somewhere else in the Milky Way' as 'extremely far away' :)
287.
by count 6y ago
Why these drugs, and not caffeine, tobacco, alcohol, refined sugar, and others? Where does personal responsibility come into your thinking?
288.
by count 6y ago
Buying a commercial service and compelling disclosure of otherwise confidential data are pretty substantially different things (not a value judgement on if this is a good idea either way, just a comment on the difference).
289.
by count 6y ago
There's also a US approach to 'grandfathering' in existing structures as building codes are updated. The only time I will ever 'have' to bring something in my house up to date is if I voluntarily do something like
290.
by count 6y ago
Example: if you restrict things to not being useful for most organizations then you can do it safer? Except, which is less likely to be owned and have no impact on your business , S3 or some janky home baked web server? Are you staying up
291.
by count 6y ago
Big provider controls planes are not going to be ruined by a privilege escalation. There are many, many layers to their defense systems. The Intel Community and it's members tend to not do anything to call attention to themselves, the
292.
by count 6y ago
If you don't think side channel attacks are a threat vector on your single tenancy system... (you can leverage these vectors to gain access to privileged data/etc. through unprivileged processes). They're differently threa
293.
by count 6y ago
OK, I should have added in qualifiers 'highly competent and respected'. More bodies doesn't necessarily equal better product, for sure. They can devote teams of researchers and engineers to topics like CPU side channel attac
294.
by count 6y ago
I missed that line, sorry!
295.
by count 6y ago
These are pretty good, but one problem for 'general' adoption of something like this: Most customer orgs aren't qualified to judge the vendors answers because they aren't good at security either . Are you confident you
296.
by count 6y ago
I would suggest that for the VAST majority of organizations, a cloud provider[1] will be an unequivocally more secure infrastructure than running it themselves 'down to the metal'. The big clouds have security research security o
297.
by count 6y ago
SAPs are not a clearance, and that changes things. :). The rules for specific SAPs are highly varied, so who knows. The original posit was that it won't stop you from proceeding with a polygraph. But sure. And I mean, no, I wouldn&#x27
298.
by count 6y ago
20 hours of battery life...and no fan noise.
299.
by count 6y ago
Without judging the validity of the poly itself (I concur, it's garbage), it's also not the sole basis of any decision, and the actual people doing the investigation build a case to show that you have lied about something, because
300.
by count 6y ago
It's not factually incorrect. The adjudication guidelines are pretty clear, and, baring continual ongoing mis-use, under Guideline M under EO 10865 and it's implementation by DOD Directive 5220.6p [1], it is considered a mitigati

More ›