frenchtoast8

6 ms·

61.
by frenchtoast8 1y ago
This was my understanding as well, but earlier I couldn't find any documentation to prove this so I never wrote a comment. CloudTrail can be configured to save logs to S3 or CloudWatch Logs, but I think that even if you were to disable
62.
by frenchtoast8 1y ago
I believe this is a scenario where AWS recommends multiple accounts. 1. Create another "management" AWS account, and make your other AWS account a child to that. 2. Ensure no one ever logs in to the "management" account,
63.
by frenchtoast8 1y ago
I recently learned Go for the first time and I have played almost 50 games of 9x9 on Online Go Server so far. I’m finding it a lot of fun but it has been very humbling. I learned chess in 7th or 8th grade and was easily able to get to about
64.
by frenchtoast8 1y ago
He's accused Luis Paulo Supi (Brazillian grandmaster) a few times after losing to him, and he accused Andrew Tang after losing to him. The latter was criticized in some online circles because it was seen as bullying a then 14 year old.
65.
by frenchtoast8 1y ago
It’s a good first step, but a significant number of GitHub Actions pull a Docker image from a repository such as Docker Hub. In those cases, the GitHub Action being immutable wouldn’t prevent the downstream Docker image from being mutated.
66.
by frenchtoast8 1y ago
It's pretty clear the developer blocked him from the @iceblock.app account because of the blog post criticizing him, and then blocked him from the other account after he said to not respond but got a page of text back instead. It had n
67.
by frenchtoast8 1y ago
The author says "it might be trivial for anyone to hack your server." "Might" is doing way too much heavy lifting here. Actually, the author has no idea if there is any actual exploitable vulnerability on the server. The
68.
by frenchtoast8 1y ago
It took me a couple reads of the PDF but I think you're right. The author creates an HTTP request Promise, and then immediately returns a response thereby shutting down the Lambda. They have logging which shows the background HTTP requ
69.
by frenchtoast8 1y ago
At work I use Datadog, but it's very expensive for a homelab: $15/mo per host (and for cost I prefer using multiple cheap servers than a single large one). NewRelic and Grafana Cloud have pretty good free plan limits, but I'm
70.
by frenchtoast8 1y ago
I've tried this on a RCL ship and it didn't work, so YMMV
71.
by frenchtoast8 1y ago
"Minor" was a poor word choice, I'm not sure what word would have been better. My intention was to say that I don't see how a non-lawyer could have any reasonable opinion on how a legal document is drafted. That is also
72.
by frenchtoast8 1y ago
My reading of the article is that it has nothing to do with the author's trust or lack thereof for their lawyer. I think the author would agree that you have to find a lawyer you trust, just as you need a doctor you can trust. I trust
73.
by frenchtoast8 1y ago
It is legal for a bicyclist to run a red light in a specific circumstance (when the light is red but the pedestrian walk signal is lit). This has been a NYC law since 2019, but NYPD is still routinely giving tickets for this, and judges are
74.
by frenchtoast8 1y ago
There are a lot of people who get confused using the SMS code they received, let alone setting up passkeys, or TOTP and backing up their codes, and so on. The systems are designed for those people, not you. Even offering passkeys or TOTP as
75.
by frenchtoast8 1y ago
Related discussion: https://news.ycombinator.com/item?id=43833195
76.
by frenchtoast8 2y ago
Related: https://news.ycombinator.com/item?id=43535953
77.
Oracle privately confirms Cloud breach to customers(bleepingcomputer.com)
6 points by frenchtoast8 2y ago|1 comments
78.
by frenchtoast8 2y ago
From what I understand, the judge ruled that it wasn't defamation for Jobst to call Mitchell a cheater but saying he drove Apollo Legend to suicide was too far considering he didn't have a lot of reason to believe this: it was mos
79.
by frenchtoast8 2y ago
I can understand small businesses relying on Facebook or Instagram or Twitter because they may not have the resources to provide a perfect solution to everyone. My country’s consulate in NYC posts important news only to Facebook. That is a
80.
by frenchtoast8 2y ago
For a while I've been searching for a note taking app that * Allows more than one user editing the same page at once * Is accessible on a mobile device (either app or mobile browser) * Can be at the very least viewed in read only mode
81.
by frenchtoast8 2y ago
Editing to add: the developer has locked further discussion about this. Very concerning as I believe their explanations are raising more questions than they are answering. First of all, clearly Github can't answer for the developer how
82.
by frenchtoast8 2y ago
The repository is back online, with this explanation from the developer: > This attack appears to have been conducted from a PAT token linked to @tj-actions-bot account to which "GitHub is not able to determine how this PAT was comp
83.
by frenchtoast8 2y ago
You can combine this with a policy that blocks third party actions from being used across your organization. https://docs.github.com/en/organizations/managing-organizati...
84.
by frenchtoast8 2y ago
My day job is also in the middle of moving everything to Github Actions, so this is fun. But in my case, we aren't affected by this vulnerability because it could only be exploited by workflows with public logs, and currently my compan
85.
by frenchtoast8 2y ago
The version numbers aren't immutable, so an attacker can just update the versions to point to the compromised code, which is what happened here. Commit hashes are a great idea, but you still need to be careful: lots of people use bots
86.
by frenchtoast8 2y ago
> What Tailscale doesn't solve is access to the data that web app serves if the user's machine is compromised, as tailscale is just determining "can the user hit the webserver on port 443?" and does nothing to evaluat
87.
by frenchtoast8 2y ago
I've never wanted to sideload an app until recently. I discovered that the recent generations of iPhones and iPads can achieve native performance with the Dolphinios GC/Wii emulator, but the app can only be sideloaded. Apple doesn
88.
by frenchtoast8 2y ago
For example, AWS's Mac machines frequently run into hardware failures. My current job runs a measly 5 mac1.metal hosts for internal testing, and we experience hardware failures on these machines a few times a year. Doesn't sound l
89.
by frenchtoast8 2y ago
Does this graph format have a name? Google isn’t turning up anything for me.
90.
by frenchtoast8 2y ago
Suing (or threatening to sue) everyone and anything that speaks poorly about the company is an interesting PR response, isn't it? I'm used to companies just ignoring the issue and hoping it goes away.

More ›