cyrnel

7 ms·

31.
by cyrnel 2y ago
Looks like they do mention that elsewhere: https://www.fastmail.com/features/reliability/ > Fastmail has some of the best uptime in the business, plus a comprehensive multi data center backup system. It starts
32.
by cyrnel 2y ago
I checked and I don't think so. Artificial Condition includes "blending in" as someone of "indeterminate" gender named "Eden" with longer-than-short hair and longer-than-normal eyebrows, which seems to be
33.
by cyrnel 2y ago
Security is about risk reduction; like creating an ordered list of measures that reduce the most risk for the lowest cost. Working on stuff outside of the top 99%+ of effective solutions deserves to be questioned. As an alternative, they co
34.
by cyrnel 2y ago
They consider accidental vulnerabilities to be "supply chain attacks". They make no mention of build/packaging system attacks except for SolarWinds.
35.
by cyrnel 2y ago
I'd encourage you to read the Verizon DBIR before making statements about whether a given attack is likely or not. Hijacking build systems is not likely: https://www.verizon.com/business/resources/reports&#x2F
36.
by cyrnel 2y ago
Why invest so much time and money in a feature that prevents such a small percentage of data breaches that it's not even categorized on the 2024 Verizon Data Breach Investigations Report? The vast majority of breaches are caused by cre
37.
by cyrnel 2y ago
I think whether some questions seem straightforward is a distraction. Most of us on this site have been specifically trained on strategies for test-taking, giving us an unfair advantage that we false attribute to intelligence. > I was pr
38.
by cyrnel 2y ago
It's more a testament to the devs. I kept up with the RuneScape wiki Discord server for a bit and there were flamegraphs flying left and right. You can see some of there recent performance improvements here: https://meta.wei
39.
by cyrnel 2y ago
Ah another way to mess with the quarantine flags, the other being: https://imlzq.com/apple/macos/2024/08/24/Unveiling-Mac-Secur... Seems just way too many different systems have the ability to modif
40.
by cyrnel 2y ago
I've been playing BG3 for over a year now and it breaks pretty much all the rules in the accepted answer. There are puzzles that are only skippable with non-obvious cheesing. In-game knowledge is heavily relied upon. The quest journal
41.
by cyrnel 2y ago
I wish sftp had something similar. Seems easy to implement as an extra flag to sftp-server: https://man.openbsd.org/sftp-server If done correctly, it could allow you to perform restic backups and restores without granting t
42.
by cyrnel 2y ago
Somewhat related discussion from yesterday: https://news.ycombinator.com/item?id=41468486
43.
by cyrnel 2y ago
There are countless (sane) ways for governments to spend $290k to earn $1M back, like funding some promising research, job training programs, building infrastructure, etc.
44.
by cyrnel 2y ago
Most of the pain of running databases in k8s is all of the "day 2" operations like backups, clustering, scaling, upgrading, tuning, etc., so I'm glad to see all that accumulated knowledge built into controllers like this. One
45.
by cyrnel 2y ago
Thankfully, non-competes are still illegal under the National Labor Relations Act, as long as the NLRB doesn't change their current interpretation: https://www.reuters.com/markets/us/noncompete-agreements-vio.
46.
by cyrnel 2y ago
Not a lawyer, but I read the full opinion (I highly recommend making a free PACER account). It's a summary judgement essentially saying that even though the FTC has a long-established history in both the law itself and legal precedent
47.
by cyrnel 2y ago
This judge did actually rule that it was "arbitrary and capricious". Which is rich considering the FTC published a 500+ page document explaining their exact reasoning, including analysis of public comments, their legal authority,
48.
by cyrnel 2y ago
Actually yes, most of those things are required for SOC 2 which is verified by an independent auditor and visible in their report.
49.
by cyrnel 2y ago
When you all self-host this, you also do the following, right? - Create threat models that identify weaknesses in the design of your self-hosted setup. - Harden the OS with things like MAC, and harden the container with dropped privs, read-
50.
by cyrnel 2y ago
One of the most common platform combos on the planet (Chrome + Windows) still doesn't natively support cloud sync for passkeys apparently? https://support.google.com/chrome/answer/13168025 Is that true?
51.
by cyrnel 2y ago
Customers leave when prices rise above their willingness to pay. Some customers will realize on their own that they can bypass Apple's fee by subscribing through the browser, but most won't (since Apple forbids even mentioning thi
52.
by cyrnel 2y ago
I mean "synonymous" in the sense of: > having the same connotations, implications, or reference > to runners, Boston is synonymous with marathon
53.
by cyrnel 2y ago
Glad to see something like this, if only to point out that even without containers and Kubernetes, a proper deployment tool is a lot more complex than whatever shell script or Makefile you cooked up on your own. Error handling, timeouts, de
54.
by cyrnel 2y ago
The term is pretty synonymous with Kubernetes since it was coined in a Kubernetes context: https://web.archive.org/web/20200104172859/https://www.weave...
55.
by cyrnel 2y ago
Not the same study (I think) but there are brands and concentrations here (expressed as % above California's limits) : https://www.consumerreports.org/health/food-safety/a-third-o...
56.
by cyrnel 2y ago
Security disclosures are like giving someone an unsolicited gift. The receiver is obligated to return the favor. But if you buy someone non-refundable tickets to a concert they already have tickets for, you aren't owed compensation.
57.
by cyrnel 2y ago
Depends when/how the signature is checked. I could imagine a signature being embedded in the file itself, or the file could be partially parsed before the signature is checked. It's wild to me that it's so normal to install s
58.
by cyrnel 2y ago
Anyone know if the updates use outbound HTTPS requests? If so, those companies that have crappy TLS terminating outbound proxies are looking juicy. And if they aren't pinning certs or using CAA, I'm sure a $5 wrench[1] could convi
59.
by cyrnel 2y ago
I generally agree with you. It's an either-or thing: either Microsoft secures their OS, or they provide safe ways for users to secure their OS. The first option is a million times better, but having neither option leads us to this mess
60.
by cyrnel 2y ago
I'm no kernel expert, but people are saying Microsoft deserves some blame for not exposing necessary functionality to user space, requiring the use of a very-unsafe kernel driver. Linux provides eBPF and macOS provides system extension

More ›