hellcow

21 ms·

331.
by hellcow 6y ago
If you can enforce that they use the password manager, it solves that one problem. But SSO centralizes access management. For instance, with one switch I can set password requirements, require 2FA, and grant/revoke access to all of an
332.
by hellcow 6y ago
Don't forget the paladin's charge! Hit it just right and you barely move.
333.
GCP Networking Outage in US-Central
2 points by hellcow 6y ago|0 comments
334.
by hellcow 6y ago
Not GP, but I choose Go for webservices as well as devops tooling. I use it whenever possible. I've been very happy with the decision to use Go over the past 4 years at my company.
335.
by hellcow 6y ago
openbsd.org still has the banner, and it still lists just 2 remote holes 13 years later.
336.
by hellcow 6y ago
ISPs monitor and modify your internet traffic in America (perhaps that's different in the UK?). My American ISP absolutely spies on me. So rather than accept that guarantee, I can use a VPN like Mullvad who at least promise not to do t
337.
by hellcow 6y ago
Do you live in an area with high homeless rates? As in, "there's a homeless camp of tents consuming multiple city blocks"-level of homelessness? It's horrible for everyone in the city--most of all for the homeless. These
338.
by hellcow 6y ago
Do you not have all your code locally as well? It seems like if your drive failed for a personal git host, you could just re-push everything back up to it.
339.
by hellcow 6y ago
The reason we went with a company similar to Vanta (StrikeGraph) wasn't infosec. It was that SOC2 is enormous and spans beyond infosec, its controls and requirements are arcane, and having experts that have done this before set you up
340.
by hellcow 6y ago
The downside to this approach is that you're unable to know what fields you can use in your query without reading the GetTask function, and changes to the GetTask function can silently break all callers, since it's now a runtime e
341.
by hellcow 6y ago
There are videos of Capitol police opening barricades to let the mob in and taking selfies with the insurrectionists inside the Capitol. Hardly what I would call "fighting valiantly to defend congress." That should upset every Ame
342.
by hellcow 6y ago
On the off-chance you were using amdgpu, they merged a huge driver update in 6.8 that improved reliability for me from "unusable" to "easy daily driver."
343.
by hellcow 6y ago
"Woah, our database is slowing to a crawl, requests are deadlocked everywhere. Yeah, some asshole is hitting GET /messages and pulling 2TB in a single request again." "Surely that's what he wanted."
344.
by hellcow 6y ago
If people start modifying my Ansible scripts without discipline then it's going to be a disaster too. Code review is the key in both cases.
345.
by hellcow 6y ago
It's not unsupported. It's literally documented by the MySQL project, existed for more than 5 years, was supported by Google, and continues to be supported by MySQL. Google broke it without warning. That's a breaking change t
346.
by hellcow 6y ago
Yes. When I'm applying large changes to permissions across many users and many tables/columns, which happens after every migration, then I absolutely need transaction guarantees. I cannot risk having a half-applied change leaving
347.
by hellcow 6y ago
Discouraged, but not broken--except in GCP after a silent update. GCP now blocks changes from being made to those tables entirely, breaking with MySQL's behavior, as well as GCP's own earlier behavior. We have battle-tested toolin
348.
by hellcow 6y ago
I'm already evaluating my company's move off GCP. We were using their managed MySQL instance. Without any communication, they pushed a silent update which broke our year-long security system that updated MySQL _priv tables in line
349.
by hellcow 6y ago
I have programmed and developed things. I am also a user. I want to run the apps I want to run, thank you very much. No one else should have any say in that. It's my computer.
350.
by hellcow 6y ago
> there are a lot of folks reasonably asking if they can trust Apple to be in the loop of deciding what apps should or should not run on their Macs. My argument is - who better than Apple? ... The user?
351.
by hellcow 6y ago
Helpful reminder that Apple still cooperates with the FBI [0]. They famously participated in PRISM and only pivoted to privacy-based marketing after this bad PR. It's also closed-source, so you have absolutely no idea that what you&#x2
352.
by hellcow 6y ago
Getting rid of Send is so disappointing. That was a hugely useful tool. Why not add a Report button and start charging for the service?
353.
by hellcow 6y ago
Is this really a problem that needs solving? Generate a secret, hash it, and store it in your database. Set the secret as a cookie in the client. On every request, hash the cookie value on your server and compare it to your DB values. It se
354.
by hellcow 6y ago
It's impossible by design to find "the good stuff." Even when purchasing from "legitimate" product pages, they'll send you co-mingled counterfeits. You have absolutely no assurance that what you're buying
355.
by hellcow 6y ago
Google is one of the richest companies in the world. If they wanted to, they could demand updates for longer periods or just create their own chips. It's just not a priority for them.
356.
by hellcow 6y ago
Krita is fine for painting but isn't a full replacement for Photoshop. Inkscape does vectors, which is something else different entirely. If GIMP prioritized matching Photoshop's UX to make it easy to switch over (shortcuts, UI si
357.
by hellcow 6y ago
Amazing. That's 4x what I get on a Pixel 3. :)
358.
by hellcow 6y ago
I'm suggesting that Forbes, IGN, and the many other websites that published nearly this exact article at the same time--an article which clearly benefits a game publisher's interests--might not be a coincidence. A dozen journalist
359.
by hellcow 6y ago
This "article" was written and published at the same time across many different publications. Ars, IGN, and more published this PR piece in full: https://icrowdnewswire.com/2020/07/10/the-return-of-t
360.
by hellcow 6y ago
> Claims made on resume or in person? Both. And it's not "putting every technology I've used even in passing on the resume" that bothers me. It's "I don't know how to write a loop or a function in any p

More ›