lvh

8 ms·

61.
by lvh 4y ago
Yep, AWS Lambda.
62.
by lvh 4y ago
We (Latacora) previously advised clients to encapsulate GhostScript processing in something with a hard security boundary (like a Lambda) and I am not expecting the new implementation to change that.
63.
by lvh 4y ago
It used to be, but there's an API now: https://aws.amazon.com/blogs/mt/aws-organizations-now-provid...
64.
by lvh 4y ago
I've used aws-nuke a bunch but the use case seems significantly diminished now that AWS Organizations has the ability to delete entire accounts.
65.
by lvh 4y ago
Nope. It was pretty much just Thomas and Erin working on it, and I don't think it's operational. Sorry :(
66.
by lvh 4y ago
Tailscale will let you use any SAML or OIDC provider you like in the Enterprise plan (presumably because of the cost of supporting the long tail of nonsense IdPs will produce). (Disclosure: I'm a (small) investor via Latacora's si
67.
by lvh 4y ago
Depends on the kind of breach. Tailscale is extremely carefully designed to minimize that risk. Notably: Tailscale doesn't get your keys. (Granted: a compromised agent would still be a problem. It's a thing I have some plans for :
68.
by lvh 4y ago
No? The fact that some machines (notably: all your _own devices_) need to be able to reliably talk to each other does nothing to impact anonymity on the Internet. Sure, you can route everything out of your own IP using Tailscale also, and t
69.
by lvh 4y ago
I think the best way to get a feel for what that means is Remembering the LAN[0] and then just trying it out (really, it's easy) and deciding for yourself if they're living up to it. Or grep Twitter for "tailscale" -- al
70.
by lvh 4y ago
Point of order since native-image is a party piece for Graal: AOT is more in the sense of JIT (but, well, ahead of time) than a self-standing binary a la native-image, right?
71.
by lvh 4y ago
Pretty similar with Clojure, though because it's not the default mode of operation, more stuff will break. Still, we do this all the time and it's mostly fine. That said, seems like you should be able to do something pretty simila
72.
by lvh 5y ago
Should've clarified: I don't just mean "backdoor Roth" as in "you can convert traditional to Roth" (that's common), I mean "super mega hyper ultra backdoor Roth" or whatever the kids are calling
73.
by lvh 5y ago
Much better than shifting from 5th straight into 1st though :)
74.
by lvh 5y ago
Latacora | Security Engineers | Remote (intl OK, US tz overlap) | Full-time Why do security at a startup when you can come do security for all the startups? :-) Latacora builds security teams for startups. We work exclusively with startups
75.
by lvh 5y ago
That works great in major cities and not at all on country roads in the rural US.
76.
by lvh 5y ago
Should we let drunk people get home in their fully autonomous Mercedes? It's an interesting problem! I think the answer right now is no, we're still requiring the driver to be able to take over, and our thought experiment presuppo
77.
by lvh 5y ago
I think you're making OPs point for them. Real drivers also crash into things. Self-driving cars don't have to be perfect all of the time. Inebriated and distracted drivers already cause disproportionate problems: self-driving, ev
78.
by lvh 5y ago
Latacora | Secops Engineering Manager, Security Architect | Remote | Full-Time Why do security at a startup when you can come do security for all the startups? :-) Secops Engineering Manager role: Full details including the hiring process h
79.
by lvh 5y ago
Fortunately (and for reasons I can't begin to understand), debug and info logging levels seem to be safe, but error is not. Technically better, but somehow... morally worse?
80.
by lvh 5y ago
Right! What would filtering even look like? This seems like an unreasonable burden on the developer.
81.
by lvh 5y ago
Eh. I think it's pretty reasonable that people assume their logging library doesn't have random RCE, and I think it's pretty reasonable people aren't going to be able to filter every parameter based on Log4J having a rel
82.
by lvh 5y ago
An FPGA can be reprogrammed, and we do really do this for standards with better longevity than video standards (e.g. cryptographic ones like AES and SHA). For standards like video codecs, we just use GPUs instead, which I assume is what OP
83.
by lvh 5y ago
Not OP, but I assume the argument is something to the tune of: healthcare should be universal to make progress, universal healthcare would disproportionally benefit the poor, the poor are disproportionally of color.
84.
by lvh 5y ago
Level is a Latacora client; whoever ends up filling this prospective role. They're one of those clients who are doing some ridiculous cool stuff, some of which we unfortunately can't talk about yet. But: insurance (and more genera
85.
by lvh 5y ago
MaxMind is a Latacora client -- anyone in that prodsec position will end up working closely with us to help secure MaxMind :) If you're like me, you probably know MaxMind from the GeoIP database. That's important, but only half th
86.
by lvh 5y ago
Not OP, but the majority of people involved have .edu homepages (stints in industry, still research emphasis) and many of the alums appear to have become alums contemporaneously with the end of their academic career, most of them via Stony
87.
by lvh 5y ago
Are you referring to the PREP Act COVID-19 liability immunity?
88.
by lvh 5y ago
How do you validate Firefox updates?
89.
by lvh 5y ago
MaxMind is a Latacora client -- anyone in that prodsec position will end up working closely with us to help secure MaxMind :) If you're like me, you probably know MaxMind from the GeoIP database. That's important, but only half th
90.
by lvh 5y ago
Qumulo is a Latacora customer; said security engineers in question will be working with us as we work with Qumulo to do said building out :) Qumulo is a really neat piece of kit that lets companies manage huge storage clusters. If you'

More ›