cybrexalpha

8 ms·

31.
by cybrexalpha 2y ago
It's different because it's worse. In a supply chain attack against a system that produces some artefact (a container image, an executable, a VM image, whatever) an attacker can't modify what was injected after the fact (with
32.
by cybrexalpha 3y ago
Having tried both with Neovim, I ended up going with just LSPs instead of using tree-sitter.
33.
by cybrexalpha 3y ago
Oh it wasn't a criticism, it's a lovely article.
34.
by cybrexalpha 3y ago
So this is a 10-year old repost (2014), of an original article 10-years older than that (2004), describing and event that happened ten years before that (1994)?
35.
by cybrexalpha 3y ago
Surely it depends on your investment goals and attitude to risk.
36.
by cybrexalpha 3y ago
Maybe things are different with Japanese immigration authorities, but posting this feels dangerous. In other countries there's a lot of attention on "fraudulent" visas, and it's often vague what "fraudulent" me
37.
by cybrexalpha 3y ago
I understand this is an April Fool's joke and is intended to be satire, but I don't think that's made clear enough in the text. There's risk that a junior engineer or student reading this will misunderstand it as sincere
38.
by cybrexalpha 3y ago
I think all of these consumer-grade routers kind of suck. A WiFi access point, a cheap unmanaged L2 switch, and any random cheap x86 machine as a router will work miles better and give you infinitely more flexibility. You can run OpenWRT on
39.
by cybrexalpha 3y ago
It spooks company lawyers. The AGPL's "license transference at a distance" is scary from a legal risk point of view. Many corporate legal departments forbid it, or at least getting the exception approved by legal is so painfu
40.
by cybrexalpha 3y ago
When I was an undergrad, I once asked one of the department professors "I want to do a PhD, how do I do that?" and the first thing he said to me was "Don't." It turned out to be pretty good advice. I didn't in
41.
by cybrexalpha 3y ago
The important part is that "boring" is context dependant, entirely based on the team. Got a bunch of Kubernetes experts on your team? Then Kubernetes, for all it's complexity, is "boring".
42.
by cybrexalpha 3y ago
The last time someone I didn't know tried to talk to me on public transport I moved to another seat.
43.
by cybrexalpha 3y ago
Unfortunately, as the author alludes to later on in the article, 'encryption at rest' is usually required by compliance standards, e.g., PCI-DSS, SOC2, etc. Just about every environment I've seen either turns on etcd encrypt
44.
by cybrexalpha 4y ago
I've never seen a project that uses Bazel that didn't also have a backlog task to remove it.
45.
by cybrexalpha 4y ago
> […] it’s certainly no worse than, say, Confluence. I don't think this is a great comparison, when Confluence is one of the worst tools I've ever had the displeasure of touching.
46.
by cybrexalpha 4y ago
This ignores that most employers will do a pension match. So yeah you pay in X% of your salary, but so does your employer. That's X% more money that you're getting — for free.
47.
by cybrexalpha 4y ago
You don't need to get it directly via Google. Mine are registered through a normal registrar, and not linked to a Google Account.
48.
by cybrexalpha 4y ago
Nothing wrong with that. There was nothing wrong with emacs in vim mode — it functioned just fine. I'm familiar with lisp so it wasn't even hard to configure particularly, just not as easy as neovim for my particular use-case.
49.
by cybrexalpha 4y ago
If you're using .io because you want to use a "techy" TLD (that isn't .net that isn't held in high esteem for some reason), .dev is a great alternative.
50.
by cybrexalpha 4y ago
It depends! In some cases, use of university equipment (the laptop) will make them want to come looking for money later. The use of the laptop might not even matter, with some employers the contract might permit them IP ownership of somethi
51.
by cybrexalpha 4y ago
Mostly just LSP integration. I didn't really feel the need to manage my email or filesystem with Emacs. Even git I prefer to use on the command line than use an editor/IDE plugin for.
52.
by cybrexalpha 4y ago
Over the course of my career I've moved from Emacs (in-terminal), to Spacemacs (emacs mode), to Spacemacs (vim mode), to Doom Emacs (vim mode), to neovim (in-terminal). After a while of using both emacs and vim text editing, I found th
53.
by cybrexalpha 4y ago
Great news, it's good to see this become more widely adopted across sites that handle identity.
54.
by cybrexalpha 4y ago
> It's true that Git implements branches as refs, plus also a nebulous implicit part that varies from command to command. But that's an unfortunate implementation detail, not something we should be committed to. I actually find
55.
by cybrexalpha 4y ago
Every time I see "Code once. Run everywhere." or similar I can't help but roll my eyes. The same idea has been invented and reinvented countless times, and every time it doesn't really work.
56.
by cybrexalpha 4y ago
This is effectively the usual advice that some neurotypical people give to others, with little appreciation for how others may be different. "Get some discipline", "build a habit", etc. If this approach works for you the
57.
by cybrexalpha 4y ago
I've seen it work best with an embedded plan. So engineers open a PR with terraform changes, the CI runs `terraform plan`, and comments on the PR with that diff. So you can see if your terraform is valid, if you're going to be des
58.
by cybrexalpha 4y ago
The complexity of cloud deployments tends to grow wildly over time. What starts as an ECR repo with a single ECS deployment turns into Route 53 zones, S3 buckets, ELBs, multiple deployments of ECS, security policies, the odd EC2 instance (t
59.
by cybrexalpha 4y ago
Let things pile up until I don't have any countertop space to cook, then clean everything in a rush and convince myself that this time™ I'm going to keep it clean.
60.
by cybrexalpha 4y ago
Good list, but I think it actually understates the advantage of security keys over other methods of 2FA. It's not just that they're physical objects, it's the protocol (either FIDO U2F or FIDO2/Webauthn) is fundamentally

More ›