esseph

10 ms·

301.
by esseph 2mo ago
> But since this is Oracle, I always assumed they’d do something villainy someday Shocked at the number of people here that would even admit to using them. Where did these people come from that haven't heard of the evils of this com
302.
by esseph 2mo ago
Most of us sshing in would be very annoyed by the GUI and associated overhead and latency. "Why doesn't this exist?“ Because people don't want it at scale.
303.
by esseph 2mo ago
I can't even fathom this statement tbh, it doesn't make any sense. They are in the most profitable and protected niche there can be in the US.
304.
by esseph 2mo ago
> How is this easier than just using a password manager? Easy and Secure are often at odds. I am using a password manager, I have a passkey saved in it. Should that service go down or have some kind of software problem with that passkey,
305.
by esseph 2mo ago
Trying to immigrate to another country takes a lot of money and time and may have various other requirements.
306.
by esseph 2mo ago
> Physically racking only makes sense if you are huge or have special requirements. CISA has identified 16 US industries where they have noted that companies should be able to operate indefinitely without internet access. See the Water
307.
by esseph 2mo ago
That's just any company with serious money.
308.
by esseph 2mo ago
Its not about bare metal, its about owning the whole stack and giving visibility into every nook and corner, and then supporting that open sourced code. Every network switch, every interconnect, every piece or firmware or software they can
309.
by esseph 2mo ago
I've never been under the impression that is the case. They are filling a niche no one else is for a small pool of fish with virtually endless pockets.
310.
by esseph 2mo ago
The more I read responses on here, the more I realize how much marketing work oxide needs to do even for the HN segment, which is very bizarre to me. For me, Oxide is one of the most interesting things I've seen in the computing market
311.
by esseph 2mo ago
> I've written on this before but Oxide are sitting in very narrow market segment in terms of value and I can't see how it's viable. You may not have heard, but the US government just prints money. Banks make a lot of it,
312.
by esseph 2mo ago
Complete hardware and software and firmware BOM. You won't get that anywhere.
313.
by esseph 2mo ago
Wifi for cameras is arguably also a mistake
314.
by esseph 2mo ago
> backup / export Last I heard this was a major point of contention between two groups, and last I checked, both had extremely valid concerns. > Multiple passkeys I commonly have two software and two hardware keys registered per
315.
by esseph 2mo ago
Being watched is a cell of its own kind
316.
by esseph 2mo ago
You get a fully auditable hardware and software BOM, and you get an air-gapped, API-driven, on-prem cloud. You still have a fairly large up front cost ($600k base in 2023ish numbers, probably over $1M now?), and an ongoing support subscript
317.
by esseph 2mo ago
Most of their customers wouldn't be the type to let others know.
318.
by esseph 2mo ago
You don't go to oxide for lowest cost.
319.
by esseph 2mo ago
What if it needs to get patched and pushed while you and everyone else in the org are asleep? I mean that's a big window of time now.
320.
by esseph 2mo ago
> if you want a better mitigation: don't automatically update dependencies in CI. At a minimum have a cooling-off period that you only bypass on manual review. This is not hard to implement and at least gives some time for alarm bel
321.
by esseph 2mo ago
Name fits.
322.
by esseph 2mo ago
> If you’re talking about SSL cert logs, that excludes a ton of web content. I guess it depends on what you are looking for? It's far less brute force than trying to randomly generate hostnames and then do lookups, and your solution
323.
by esseph 2mo ago
59% of US adults.
324.
by esseph 2mo ago
If you have a 401k, you likely have AI investments.
325.
by esseph 2mo ago
It hasn't been majorly like that in twenty years. Botnets are services now, a business. They gain customers by their effectiveness and resilience. For $$50-100 you can deny service to a lot of big sites and services.
326.
by esseph 2mo ago
Sorry, let me be more obvious. I am not pointing to a solution, but a pointer to the solution. Showing what is possible. The solution is pulling/parsing the CT logs yourself.
327.
by esseph 2mo ago
Another option: https://www.certkit.io/tools/ct-logs/
328.
by esseph 2mo ago
Sorry for the bluntness, but the truth is you're being a giant asshole to someone that stepped in to learn more about your situation from your perspective to see how the company they work for lost you as a customer. They could have bee
329.
by esseph 2mo ago
You used to pay outright for bandwidth usage prior to AWS, too. (Colo facilities, webhosting, etc.) On mobile and satellite you still have bandwidth caps. Sometimes on cable.
330.
by esseph 2mo ago
You could just pull tls cert registrations CT logs, way easier. Or https://crt.sh

More ›