d4mi3n

45 ms·

451.
by d4mi3n 6y ago
I usually solve this by giving the big G (or the big Duck) more info to work with in the query: https://duckduckgo.com/?q=pep+pdf+mac
452.
by d4mi3n 6y ago
Has there been any research into health impacts of people exposed to those conditions? I’d love to read some if anyone knows of any.
453.
by d4mi3n 6y ago
I have yet to make such an investment as good air monitors are fairly expensive, but I’m hoping to get a few indoor monitors from Purple Air (~$200 USD). What do you folks use?
454.
by d4mi3n 6y ago
This one came to me via a friend. Western OR and parts of CA clocked around 700ppm over the weekend, which goes well beyond the EPA’s air quality scale that tops out at 500ppm (“hazardous”). How are people dealing with this? I’m near SF wh
455.
Oregon’s air quality is so hazardous that no one knows what it means for health(grist.org)
18 points by d4mi3n 6y ago|25 comments
456.
by d4mi3n 6y ago
There are plenty of ways to structure a public service like this that isn't fully controlled by the government. USPS comes to mind, though it's obviously not perfect in terms of independence from government control. I'd hones
457.
by d4mi3n 6y ago
No Such Agency! Jokes aside, I absolutely agree that this is a failure of the US federal government and congress. We should have answers for these things for now, or at least the beginnings of a national security program to combat cyber cri
458.
by d4mi3n 6y ago
I think this is a step in the right direction, but I'd expand this to be a tax on all organizations that maintain large enough systems to become targets because: 1. Taxing only the victims is adding salt to a wound: these companies a
459.
by d4mi3n 6y ago
While I understand the sentiment, there needs to be a reasonable alternative here. You can’t ask people or organizations not to protect or recover their property if they have no other recourse. I don’t know much about this travel agency. Th
460.
by d4mi3n 6y ago
> Make the best decisions you can, by which I mean try to make decisions that you will not regret later. (Have I made a crap-ton of mistakes in my life? Sure 'nuff. Would I make different decisions if I could, even knowing what I kn
461.
by d4mi3n 6y ago
As others have mentioned in similar responses, needing security vs supporting security don't always come hand in hand. That said, the technical security jobs are out there, pay well, and aren't receiving much in the way of competi
462.
by d4mi3n 6y ago
This matches what I'm seeing as well--smaller companies looking for AppSec often want to bootstrap a new program.
463.
by d4mi3n 6y ago
You make a good point. Let me revise my original statement: There is a huge market for security engineers. I'm interviewing in SF with ~8 years of product engineering experience and ~2 years of AppSec/SecEng experience. I'm
464.
by d4mi3n 6y ago
You touch on another important issue I don't see a lot of discussion about: There is a HUGE demand for application security engineers, or more broadly, security folks with software engineering backgrounds. I'm in SecEng and was la
465.
by d4mi3n 6y ago
I agree, but the point I'm trying to make is that the time to guess the password isn't too big of an issue for passwords that never change. Ideally, Zoom would generate a password for each instance of a meeting. Failing that, havi
466.
by d4mi3n 6y ago
Don't forget that many recurring meetings reuse the same password.
467.
by d4mi3n 6y ago
This makes sense to me given a layperson's understanding of biology and evolution. In modern times, food is plentiful. Throughout history, it was not: people often had to eat what was on hand, and make use of as much of the available c
468.
by d4mi3n 6y ago
I'd avoid using this terminology with people who are hurting. The feeling of being "broken" tends to reinforce negative thoughts. A term I've heard and prefer is "suffering" or "in pain". Addicts suff
469.
by d4mi3n 6y ago
There's a lot to unpack here, but I'd like to engage you on a few points in your comment: > Those street level agents arrest individuals who are taken to some federal property where they are held for a few hours after which the
470.
by d4mi3n 6y ago
Depends on the industries and locales you work in. Ruby still has a strong contingent in SF, though I hear it’s somewhat uncommon out in London. This is anecdotal and from fintech circles I’ve worked in.
471.
by d4mi3n 6y ago
Yes, but malware isn’t limited to windows executables. Note that the article doesn’t call out methods of ingress—these tend to vary a lot depending on who or what an attacker is targeting.
472.
by d4mi3n 6y ago
Bad actors, especially competent ones, already have access to this knowledge by way of their own networks, communities, and independent research. The only thing hiding it does is prevent the good guys from finding ways to defend against it.
473.
by d4mi3n 6y ago
It's a well known problem that many languages (Python, Ruby, Node) have notoriously insecure trust chains in their dependency management frameworks. If more malware is hitting the Python ecosystem, I think it's just a matter of ti
474.
by d4mi3n 6y ago
Going against the grain with this pun!
475.
by d4mi3n 6y ago
That's a great point and another reason why it usually doesn't make sense to take privacy to an extreme. At the end of the day, privacy is a matter of private interest against (debatable) public good. It's nice for an individ
476.
by d4mi3n 6y ago
As with many things, I believe privacy is less of a binary issue and more of a scale between two extremes. I agree that with modern technology it would be difficult to guarantee or enforce absolute privacy in public spaces--everyone has a c
477.
by d4mi3n 6y ago
I'd chalk this up to dependency management and resolution being a hard problem. Ruby's bundler had these exact same issues 5 or so years ago. I remember attending a talk by on Bundler run by it's core devs and asking about ho
478.
by d4mi3n 6y ago
I'd also plug Last Week Tonight if folks are looking for informational satire. John Oliver and his staff do a fantastic job investigating a lot of current and ongoing issues while presenting them in ways that are approachable for a lay
479.
by d4mi3n 6y ago
Hah! Great find! If this is still the case you should definitely consider contributing to the documentation of those files. Odds are they'll be used by the next person to try something similar. :)
480.
by d4mi3n 6y ago
This is highly dependent on your environment. I work in finance and there is legislation saying we must encrypt all traffic on the wire. Legislation aside, this also goes back to a defense-in-depth strategy; TLS proxying only works if t

More ›