ex_amazon_sde

9 ms·

31.
by ex_amazon_sde 5y ago
Please don't call it "paranoia": a whole lot of vulnerabilities have been found in CPUs together with plenty of undocumented functions that look just like backdoors. On top of that, it is well known that governments research
32.
by ex_amazon_sde 5y ago
There are plenty of memory-safe languages equally suitable for similar CLI tools and, arguably, easier to write than Rust.
33.
by ex_amazon_sde 5y ago
Vendor lock-in at rack level and custom servers? Sounds like blade servers. A smart company would stay away from this kind of strong lock-in.
34.
by ex_amazon_sde 5y ago
> This seems like further evidence that distro package managers aren't the way forward On the contrary, distributions are here to stay and they are growing their adoption on many platforms including hi-end "IoT" and cars.
35.
by ex_amazon_sde 5y ago
It's a quadricycle, not a "clown car", and with an excellent price / quality ratio. 45 kph, range of 70 km, at 6000 euros. https://europe.autonews.com/automakers/citroen-says-ami-ev-w...
36.
by ex_amazon_sde 5y ago
The blog is called "Ingrid’s Space" https://en.wikipedia.org/wiki/Ingrid_(given_name)
37.
by ex_amazon_sde 5y ago
I've done it and it worked. Without the €40/month.
38.
by ex_amazon_sde 5y ago
To send 4k emails a month a 1€/month VPS running Exim is enough and takes 1h to set up. The real advantage is to have control over your own infrastructure and ensure the privacy of your reader base. The drawback is having to monitor bl
39.
by ex_amazon_sde 5y ago
> GPL licenses forces some sort of non-monetary compensation in the form of contributions, and thus, the corp cannot extract and retain the full value of the software No, this is false. - You can use a GPL library without making changes
40.
by ex_amazon_sde 5y ago
Why "app"? These are services. > there shouldn't be any dogma around this Like everything in security, it's about tradeoffs. > Also, maybe, this means you're not running a single app per vm? This is an argumen
41.
by ex_amazon_sde 5y ago
> if there's some kind of exploit in it allowing for random code to be run, said code already has access to everything it needs On the same host there could be SSL certificates, credentials in a local MTA, credentials used to run ba
42.
by ex_amazon_sde 5y ago
A backdoor/bugdoor is much more likely to be in the source code. Compiling the code by yourself does not help. You have to rely on a distribution that has a many-eyes review policy and has security conscious users.
43.
by ex_amazon_sde 5y ago
I found http://n-gate.com/ helpful.
44.
by ex_amazon_sde 5y ago
> Big Corp, especially big tech Corp, has a giant target on it’s back and is very risk adverse to firing (justifiably so) Ex-Amazon here. Most FAANGs are known for their aggressive stack-ranking and high attrition rate. Amazon has the hi
45.
by ex_amazon_sde 5y ago
> software creates tremendous value According to what metric? I suspect most of the stellar SV salaries come from the economic model.
46.
by ex_amazon_sde 5y ago
> there doesn't appear to be the same emphasis on living in a "good area" as in other countries for personal security reasons This is common mostry in the anglosphere. In many other countries there is no such difference.
47.
by ex_amazon_sde 5y ago
JournalD is excellent. Indexing structured data like logs is the right thing to do. Log messages have a lot of useful metadata to do filtering on. > Systemd could completely eliminate the need for stuff like docker by totally isolating a
48.
by ex_amazon_sde 5y ago
...also Cloudflare has been a disaster for Tor. It really harms Tor's usability.
49.
by ex_amazon_sde 5y ago
SAT is more "how good AND MOTIVATED are you at cramming a bunch of relatively arbitrary information into your brain"
50.
by ex_amazon_sde 5y ago
Spot on. Often it feels like a cult, but even more often is used as a micromanagement tool.
51.
by ex_amazon_sde 5y ago
> Android is mature and secure, but it's not private Nitpick: you cannot have security-but-not-privacy. If a system does not protect the confidentiality of your data from the eyes of the manufacturer it is breaching security. Securi
52.
by ex_amazon_sde 5y ago
Yes, that's my point.
53.
by ex_amazon_sde 5y ago
> Is it? Just update everything regularly. On stable production systems? Never. The CIP project https://www.cip-project.org/ aims to backport security fixes to Linux for *25* years after each CIP release. No sensible org
54.
by ex_amazon_sde 5y ago
> If you can retest everything, you can rebuild everything No, rebuilding is way heavier. Even worse, some languages insist on building against fixed version of their dependencies. It forces distributions to keep multiple version of the
55.
by ex_amazon_sde 5y ago
AFAIK commercial dishwashers are very diverse: some are rugged equivalent of a consumer dishwasher, some can only sterilize pre-washed dishes, and some do the quick 40 seconds wash... but use really a ton of electricity.
56.
by ex_amazon_sde 5y ago
> My point is the reduction of child labor hours was impossible before industrialization improved productivity. Farmers worked less hours and with much less intensity than industrial workers. The incredible drop in life expectancy of far
57.
by ex_amazon_sde 5y ago
There's plenty of historical records of farmers being forced to go into factories and hating it, to the point of risking their life doing strikes and fighting strike-breakers. Industries desperately needed cheap labor and the mechaniza
58.
by ex_amazon_sde 5y ago
> Political polarization is older than social media Yes, it was widely reported in debates in ancient Athens and the Roman empire. But I wrote "Social media did a lot to foster outrage and destroy nuanced thinking.", which is d
59.
by ex_amazon_sde 5y ago
Social media did a lot to foster outrage and destroy nuanced thinking. But also decades of materialism and "me me me" culture: I think people learn to follow their desires no-matter-what when buying goods or services and the same
60.
by ex_amazon_sde 5y ago
> a lot of things are going to be hard for you The FAANGs that gave me offers seem to think otherwise... > I just hope we never work together Guess I struck a sore spot here.

More ›