elfakyn

6 ms·

1.
by elfakyn 6y ago
I wrote this up since, over the past year, I've encountered more and more weird behavior with s3 bucket policies. I haven't seen all of this behavior documented in a single place, so here it is. Some of it has security implication
2.
What You See Is Not What You Get: Weird Behaviors in S3 Bucket Policies(github.com)
2 points by elfakyn 6y ago|1 comments
3.
by elfakyn 7y ago
I doubt this would get as much media attention if Tolkien wasn't involved.
4.
by elfakyn 7y ago
Before anyone asks for sources: https://www.fpri.org/article/2017/03/nationality-ethnicity-e... https://slate.com/news-and-politics/2017/03/many-ethnic-russ... https:/&#x
5.
by elfakyn 8y ago
Yes, and that directly causes a device to fail SafetyNet Attestation which can cause some third-party apps to not work even with sideloading/different app store. Edit: like Netflix, Hulu, and Snapchat
6.
by elfakyn 8y ago
> You can "unbreak" glass. I had a project that started to get a stress fracture as it cooled. I quickly put it back in a cool part of the torch flame to anneal it. The cracks literally healed. Curious, would that still maintai
7.
by elfakyn 8y ago
The problem is that people often conflate dispassionate writing with neutral writing, which makes a biased dispassionate edit much more likely to get through.
8.
by elfakyn 8y ago
Remember that these statistics are specifically from Amazon warehouses, and not from Amazon warehouse workers calling from home. We'd need statistics on calls from workplaces. A quick google scholar search finds suicide rates [1] in th
9.
by elfakyn 8y ago
That's dangerous advice. Having access to some (or a combination of) "less-secure" accounts could allow an attacker to get enough personal information to escalate privileges through reset fields, social engineering in custome
10.
by elfakyn 8y ago
Also, for the love of all the gods, don't prohibit pasting in the password field!!
11.
by elfakyn 8y ago
Google changed the operators; now it's double quotes instead of plus (it was changed for google+ so that the plus searches g+ profiles and pages). You now have to search: "noir" "film" -"pinot noir" I won
12.
by elfakyn 8y ago
That is a very shortsighted blame-the-victim mentality. You're conflating the power of the individual voter with that of the entire voting bloc. Besides, even if new affordable housing was constructed (which is getting harder and harde
13.
by elfakyn 8y ago
This looks like the generic "people" artwork you see in so many places.
14.
by elfakyn 8y ago
> Laying everything on this thick just doesn't increase credibility for me. It makes me suspicious. Counterpoint: if you've gone through enough hardship, your self-esteem can tank so much that you start thinking in black-and-wh
15.
by elfakyn 8y ago
> * All changes to the main source code repository MUST be reviewed by at least one other engineer. > Same as above. Just build and RTFO. Deploying without review is not only a development nightmare (if you keep deploying without revi
16.
by elfakyn 8y ago
The great thing about hypotheticals is you can just say "wins the lottery, leaves the job, and never comes back" and it's implied in the scenario that you shouldn't read too much into it.
17.
Responsible disclosure: public read/write AWS S3 buckets in production (Emtrain)(sec.elfakyn.com)
2 points by elfakyn 8y ago|0 comments
18.
by elfakyn 8y ago
This sounds like a terrible idea. Similarly to implementing your own encryption, having a custom consensus algorithm can create additional vulnerabilities -- a custom consensus algorithm isn't as tested and vetted as an existing, widel
19.
by elfakyn 8y ago
That gives rise to a very interesting concept: ML-based bias assessments. If you take some real-life hiring data (or other applications such as sentencing or generally human behavior data) and train the AI on it, then run it through a bunch
20.
by elfakyn 8y ago
The Amazon app has an absolutely horrendous FID of around 10 seconds or so. They could use a little bit of optimization.
21.
by elfakyn 8y ago
Downwards arrow towards a disk: https://imgur.com/a/dMrixoi
22.
AWS icon quiz(docs.google.com)
580 points by elfakyn 8y ago|185 comments
23.
Change the Windows theme continuously throughout the day with undocumented APIs(github.com)
1 points by elfakyn 12y ago|0 comments