johngalt

7 ms·

31.
by johngalt 3y ago
The proliferation of security vendors is similar to the proliferation of weight loss clinics and gyms. There are plenty of fads, with new businesses popping up to either chase or create the interest. The people buying these services despera
32.
by johngalt 3y ago
It's a solid case for FIDO2 keys. - Inherent MFA that is faster and more secure than SMS codes, or app notifications. - One pin code and/or biometric to remember rather than hundreds. The answer isn't to add another layer of
33.
by johngalt 3y ago
The problem with planned economies is mismatched incentives, not computational capabilities.
34.
by johngalt 4y ago
Is there a reason that forwarding is the path chosen for this rather than setting gmail as your MX?
35.
by johngalt 4y ago
An excellent write up of the changes in perspective which occur with experience. No organization is optimal and neither are we. The key is to incorporate these details into planning. For example if the organization can't set durable go
36.
by johngalt 4y ago
Difficult to defend "as practiced". For example trying to enforce a non-compete for sandwiches is ridiculous. There are obvious scenarios in competitive industries where losing key people to competitors creates risks for everyone
37.
by johngalt 4y ago
Until we have AGI, I expect automation to be similar to the past. Where productivity increases along with material wealth and standard of living. After AGI, "what jobs will people do?" is probably the most uninteresting part.
38.
by johngalt 4y ago
To anyone impacted by this. Here are a few things you might want to check, other than the obvious user mailbox migration. 0. Set your MX record TTLs as low as possible. Even if you aren't ready to change over yet, it will lower propaga
39.
by johngalt 4y ago
I doubt CISA believes that technical and cybersecurity experience is irrelevant. This is their way to say "put someone in charge of it." Two reasons for this: 1. The failure mode for most SMB operational risks is "no one wa
40.
by johngalt 4y ago
This can certainly be cronyism where an exec brings along an entourage of sycophants to build their own empire on the company's dime. It can also be a team selected from their broader network of known/proven professionals. People
41.
by johngalt 4y ago
How to derail this dynamic early: "Does this solve a problem we have?" "Of the top five things that we are trying to build, does this add any of them?" Often the problem isn't that the new methods/tech is bad
42.
by johngalt 4y ago
There isn't a hidden price that is only shown in the sales funnel. But rather the price changes depending on the customer. 'Contact us' = 'give us enough information to accurately price the product for you.' Best wa
43.
by johngalt 4y ago
A slump is likely. Or specifically a correction followed by a period of slow/no growth, but I don't expect a crash similar to 2008. The last housing crash was primarily due to a combination of overleveraging and overbuilding. The
44.
by johngalt 4y ago
This anti-pattern is predicated by two underlying truths. 1. The gatekeeping behavior is individually beneficial even if they are globally detrimental. Blocking access costs nothing, and may benefit them as people pay the toll to gain acces
45.
by johngalt 4y ago
Quality standards are certainly required, and the software/technology ecosystem is brittle in avoidable ways. However, I'm not sure we can simply roll forward with methods we used to build bridges and use them to build software. I
46.
by johngalt 4y ago
It is the inherent conflict between authority and accountability. It's unfair to be accountable for something we have no control over, but if we have control over it, we can unduly influence it. There is no bulletproof answer to this p
47.
by johngalt 4y ago
Aiming at the wrong goal. A "10kw society" on solar or nuclear is better than "2kw society" on coal.
48.
by johngalt 4y ago
> wonder how the average US household is at 12KW If you've eliminated transportation and heating that is #1 and #2 for most people's energy consumption. Third place would likely be air-conditioning, and you've eliminated t
49.
by johngalt 4y ago
To this day I think ATM was an interesting approach. Virtual circuit switching with quality of service capabilities designed into the protocol. If nothing else, it is a great example of a complex and optimized protocol losing vs a ubiquitou
50.
by johngalt 4y ago
Air travel is already quite efficient. If we break it down per passenger, the gas mileage is around 50mpg. Cutting total flight distance only cuts the amount of time that the aircraft is in it's most efficient travel regime (high level
51.
by johngalt 4y ago
The near future looks like Solar + Natural gas. Driven entirely by economic factors. It is cheap to build PV, and Natural Gas plants cost less than sufficient batteries/storage for PV. I used to be very bullish on Nuclear. The numbers
52.
by johngalt 4y ago
Imagine trying to turn around an organization like that. Must be an interesting challenge. The sheer amount of technical debt, legacy systems, dysfunctional team processes and culture. Not to mention the sheer motive inertia needed to chang
53.
by johngalt 4y ago
Prometheus should be laser focused on being first to market in commercial quantities. There are people who want carbon neutral fuels today even if they are more expensive than fossil fuels. Capture that entire market with v1 of the process
54.
by johngalt 4y ago
Why was latency such a killer on throughput? Was it TCP window sizing?
55.
by johngalt 5y ago
Software vendors have two modes. 1. A partnership/consultancy where they sell a platform that is customized for a small number of large clients. 2. Solving one area well, then trying to cram as many customers through the fixed solution
56.
by johngalt 5y ago
Not unique to Fastmail. Any domain that sends email should have DKIM/SPF/DMARC. SPF is quickly becoming irrelevant, but it is an easy configuration item. Recommend mxtoolbox for validating configurations https://mxtoolb
57.
by johngalt 5y ago
DMARC: Set is as p=none and read your reports from the RUA tags. Once you are confident that all the legitimate mail is aligned, then go straight to p=reject. Many will recommend quarantine, but it's better to have an email bounce back
58.
by johngalt 5y ago
There must be a qualification process for anything that will be put in contact with a production environment and/or sensitive data. What a container validation process looks like depends on the type of organization and it's risk a
59.
by johngalt 5y ago
> I suppose it just needs to do approximately as well as a human. From a practical/logical sense this is true, but I'm not sure it would work out that way. People would never accept FSD cars with accident/injury rates comp
60.
by johngalt 5y ago
Are unikernels a performance/efficiency tool? Squeezing more nodes into a single host with minimal overhead. Or are they a tool to achieve simplicity/elegance? Fewer moving parts to troubleshoot at the OS layer, and smaller but mo

More ›