kiallmacinnes

8 ms·

31.
by kiallmacinnes 6y ago
Most likely because they[1] wouldn't get a senior job elsewhere. "Senior" has only a little to do with technical experience, and a lot to do with what could generally be bucketed into "work experience". [1]: I'
32.
by kiallmacinnes 6y ago
That's (generally) not how a corporate VPN works. Each client that connects to the VPN gets it's own IP, just the same as every PC plugged into the physical corp net gets it's own IP. When you access an internal service, it&#
33.
by kiallmacinnes 6y ago
Yea - I get where you're coming from - you can't rebuild the container, but each team member can reuse the same container - which is at least a step towards being fully reproducible.
34.
by kiallmacinnes 6y ago
> Yet you continue with your strawmans. Nobody said that. No, it was rhetorical question. Reading and making an effort to respond to the entirety of the comment would have made that obvious when I specially ask "Where do you draw th
35.
by kiallmacinnes 6y ago
We can all cite harmful laws, does that mean companies (and people) should be free to ignore all law? Should US companies be free to ignore laws related to sanctions because the UAE has made being gay illegal or because political opposition
36.
by kiallmacinnes 6y ago
> You are making a strawman. Companies are often following the law strictly or loosely as it suits them. You're right that companies don't always obey the law. However, what has that got to do with "Personally, I'd ra
37.
by kiallmacinnes 6y ago
> EDIT: concerning hypothetical worlds, I pretty much not want to live in a world were companies blindly follow the law regardless of how harmful it is. We have tried these worlds in the past and they were not pretty. Personally, I think
38.
by kiallmacinnes 6y ago
It's also not fair to blame people (well, companies...) for obeying the law. Personally, I'd rather a world where companies obey the law than one where they pick and choose what laws they would like to obey.
39.
by kiallmacinnes 6y ago
.json is roughly the same as .txt - an abbreviated version of "JavaScript Object Notation". We humans still have to do the translation to the final name. And, I've never seen ".jsn". I've seen ".json"
40.
by kiallmacinnes 6y ago
CentOS 8 EOL was effectively 2029. It's now 2021. So, yea, it's out of date :) CentOS 8 was a stable OS mirroring RHEL, CentOS Stream is a bleeding edge OS mirroring Debian Unstable / Arch / similar. Let's not prete
41.
by kiallmacinnes 6y ago
That's one way of doing exactly what I describe - but it's horribly slow and wastes a tonne of CPU resources so is far from the ideal option.
42.
by kiallmacinnes 6y ago
This won't help all that much (though, it is slightly better).. Testing the merged branch at say 10am, then actually merging the PR at 11am says nothing about how that PR interacts with all the changes merged between those 2 points in
43.
by kiallmacinnes 6y ago
The issue is with how GitHub (and most PR / CI systems...) relies on stale CI results. Master/Main changed between the tests running for that PR, and it merging. Why should those test results be considered a useful indicator for w
44.
by kiallmacinnes 6y ago
If I remember correctly, eBPF originally stood for "Extended Berkeley Packet Filter". However, it's usage changed from a packet filter to general purpose kernel hook system. A little while after that, eBPF stopped being an ac
45.
by kiallmacinnes 6y ago
But, is that it actually it? The linked page shows a "Get it now" (for your phone) link which points to the Google Play Movies & TV app for me.. (And, the sites screenshots vs the play store screenshots differ - suggesting it
46.
by kiallmacinnes 6y ago
The post I was replying to was specifically referring to using a non-privileged port (2222).
47.
by kiallmacinnes 6y ago
> Although I'm not sure how an unprivileged user would be able to stop sshd in order to take over that port. They just need to wait (or, leave their code running in wait) for an admin / system process to restart SSHD - e.g. whe
48.
by kiallmacinnes 7y ago
Yes, and in the process 1) not spend CPU cycles extracting frames... 2) not have a permanent+widely distributed copy of `$illegal` thing someone tried to upload. 3) have a technology that works regardless of content type! amazing! It suppor
49.
by kiallmacinnes 7y ago
The OpenStack project faced a similar problem a few years back, they produced Zuul[1] to solve the problem. I can't compare it to what Shopify produced, but Zuul is absolutely worth a look when it comes to solving large scale, high thr
50.
by kiallmacinnes 7y ago
It happens pretty often. $thing is installed, individual user accounts are created, and the default login is forgotten about. Nobody uses it, so nobody noticed it. Another variation is not even knowing default accounts exist. i.e. where the
51.
by kiallmacinnes 7y ago
I whole heartedly tried to read this. I couldn't. The constant updates of the stock symbol numbers, grabbing my attention every time, and causing reflows most of the time made it impossible.
52.
by kiallmacinnes 7y ago
Because the timestamp on the file was set back, it did not show up in any Git diffs. Is `git status` / `git diff` etc relying only on the timestamp of modified local files to decide if a diff is needed? If so, that's a pre
53.
by kiallmacinnes 7y ago
It's not "sort of" hacked by an unauthorized outsider! The explanation is pretty clear cut and perfectly believable, no hackers or malice involved at all..
54.
by kiallmacinnes 7y ago
> Unfortunately, our website is currently unavailable in most European countries. We are engaged on the issue and committed to looking at options that support our full range of digital offerings to the EU market. We continue to identify
55.
by kiallmacinnes 7y ago
To me, locks of any kind are just a deterrent, they aren't meant to be impossible to circumvent, there just meant to deter casual thieves. Should Yale be responsible for all the stuff stolen from a house after someone picks the lock? I
56.
by kiallmacinnes 7y ago
Exactly. The statement quoted makes it sound like people accepting bribes is entirely the fault of the person proposing the bribe. The blame is shared, nobody had their lives derailed by anyone but themselves as far as I can tell.
57.
by kiallmacinnes 7y ago
> “Now he will be held accountable for the fraud and the lives he has derailed.” Whoa there. What? Yes, he's committed a crime and should be held accountable for that. But.. Who's lives has he derailed? If I was to accept a bri
58.
by kiallmacinnes 7y ago
> If I recall the issue in question, the only way it would be vulnerable to anything was... So, yes is what your saying. It was vulnerable code discovered by Project Zero. And when discovered, did Project Zero follow their published proc
59.
by kiallmacinnes 7y ago
IMO, your making an pretty large assumption here - you're describing the intent as malicious without anything concrete to back it up. If I was a security researcher, and someone decided to do something out of the norm, I'd probe i
60.
by kiallmacinnes 7y ago
To be fair to them, while you understood my intent - I definitely could have phrased that better.

More ›