jjav

42 ms·

871.
by jjav 2y ago
> Initially people assumed without evidence That's like configuring a firewall with a default-allow rule. No, with any safety critical system you must assume there might be a problem until there is overwhelming evidence that there w
872.
by jjav 2y ago
> SF was overflowing with startups on every corner. Can you name a handful of known startups headquartered in SF in the early 2000s? I tried searching for stats on this but it seems more difficult than I have time for. So I turned to cha
873.
by jjav 2y ago
Not relevant to any current actions by Twitter, but an interesting historical perspective is that it was very rare for a tech company to be in San Francisco. Approximately all tech companies were in Silicon Valley proper (thus named) which
874.
by jjav 2y ago
> They simply have a better product and I don't expect anyone to match them anytime soon This is a strange statement to be honest. Have you used google search in the last decade? google search was awesome back in the very early 2000
875.
by jjav 2y ago
> Is it different in California? It is different in California on all three points listed. In California the assessed value is the purchase price (thus, market value) on year zero (when you buy it). From there on assessed value goes up 2
876.
by jjav 2y ago
> At one point much of the world was using 128bit rsa keys When? I was writing crypto libraries in the early 90s to support RSA, DSA and ElGamal at my company (this predates the times when good open source crypto libraries were broadly a
877.
by jjav 2y ago
> the problem is not that housing is wealth, but that housing is a financial intrument. I agree that a house is a home and should always be seen as a home, it is not a stock certificate. But perception aside, what would this mean? If som
878.
by jjav 2y ago
> I will not be able to properly argue this point, so I will instead point to the words of who can do it better: I read the whole blog with an open mind, but it doesn't in any way address how he'd propose making housing not be
879.
by jjav 2y ago
> it is to not make it a financial instrument How exactly would you do that, considering a home is inherently valuable?
880.
by jjav 2y ago
> the wealthy class will continue to advance automation. LLMs, AI, robots, autonomous driving, etc. The end game is something like the planet Solaria from Asimov.
881.
by jjav 2y ago
Those houses are now worth more, even inflation adjusted, it was just a temporary dip. So you've still built wealth even if you bought in 2007.
882.
by jjav 2y ago
> We need to stop treating real restate--especially residential real estate--as a mechanism for creating wealth. It's not about treating it this or that way though. Owning a house is creating wealth, it's not something you can
883.
by jjav 2y ago
> Next time they'll know better. No next time, they're dead, so not a good selection criteria. Agreed that both sides share some liability, but a vendor that says they create security software with root level code injection acc
884.
by jjav 2y ago
> If the computers in a computer reliant massively distributed organization go down, what's the alternative? I feel like the answer should be obvious: if you need reliable systems then you don't create a single point of depende
885.
by jjav 2y ago
We can look outside the software industry to see this is not true. Building bridges is a very overused analogy, but it's still a good one. Structural engineers still design bridges and they get built. What they don't do it throw s
886.
by jjav 2y ago
> That drives their costs (and prices) up. That is not a bad thing. Today all these shaky companies exist because they can take all the profit and externalize all the downsides, laughing all the way to the bank. If they were made liable,
887.
by jjav 2y ago
I would like to live in a world where crowdstrike is directly liable for every dollar lost and has to pay for all of it. Only then would these companies start to take quality seriously. Of course in our real world, they are unlikely to pay
888.
by jjav 2y ago
> That's not true. Debit cards have fraud protection similar to credit cards. Similar being the key word. Yes they are somewhat similar, but credit cards have better protection by regulation, so they are not the same. https:/&
889.
by jjav 2y ago
Part of your credit score is the percentage utilization of your available credit. So you want higher limits that you'll never use in order to make that percentage smaller and thus your credit score higher. Silly game but might as well
890.
by jjav 2y ago
> Any confiscated cash needs to go into state level or even federal coffers If I was king.. all confiscated cash must go to organizations such as ACLU and EFF (not a comprehensive list). That way it can still be done when sensible, but t
891.
by jjav 2y ago
> Airport staff need to be able to support them. Not HN types. Airport staff are not debugging the windows install. They power-cycle it and see what happens, otherwise call the vendor to come in. So there's no actual reason other th
892.
by jjav 2y ago
> Are OpenBSD programmers somehow vastly more competent It's not about competence, it is about priorities. OpenBSD obsesses about security, so that's what drives the decision-making. All public companies are driven by profit ab
893.
by jjav 2y ago
> As much as it makes folks reel, this is working as intended. If you don't want them to crack your phones, consider setting a 10+ digit alphanumeric passcode instead of a numeric PIN. Can't emphasize this enough. If you'
894.
by jjav 2y ago
> On a serious note, we have no way of knowing whether their update passed some QA or not I think we can infer that it clearly did not go through any meaningful QA. It is very possible for there to be edge-case configurations that get br
895.
by jjav 2y ago
> if you ever thought we could make systems fault tolerant The only possible way to fault tolerancy is simplicity and then more simplicity. Things like crowsdtrike have the opposite approach. Add a lot of fragile complexity attempting to
896.
by jjav 2y ago
> One mistake doesn’t mean they are completely incompetent. They are completely incompetent because for something as critical as crowdstrike code, you must build so many layers of validation that one, two or three mistakes don't m
897.
by jjav 2y ago
> Mistakes are perfectly fine, that's why multiple layers of testing exist Indeed. Or in the case of crowdstrike, should exist . Which clearly doesn't for them.
898.
by jjav 2y ago
> That only solves half the problem, it doesn't solve data theft crowsdstrike is not a DLP solution. You can solve that problem (where necessary) by less intrusive means.
899.
by jjav 2y ago
> I wonder if those same insurance policies are going to pay out due to the losses from this event? They absolutely should be liable for the losses, in each case where they caused it. (Which is most of them. Most companies install crowds
900.
by jjav 2y ago
> The insurance companies that insure companies against ransomware insist on putting host based security systems onto every machine or they won't cover losses. This is part of the problem too. These insurance/audit companies ne

More ›