Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
marcusb
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
12 ms
·
121.
▲
by
marcusb
1y ago
Yes.
122.
▲
by
marcusb
1y ago
just go and look at any of the vendors selling “zero trust” solutions. They all have white papers available about how a) perimeter security is “dead” and b) how their specific flavor of zero trust is the One True zero trust and the only th
123.
▲
by
marcusb
1y ago
Yes, but service technicians that are paid by the job often find ways to do a job in far less time using a different approach than the manufacturer suggests. An example: I used to own a Saturn S-series. The manufacturer estimate for replaci
124.
▲
by
marcusb
1y ago
It happens to the best of us!
125.
▲
by
marcusb
1y ago
yeah, it was a joke and what you just linked to was sarcasm and/or mockery.
126.
▲
by
marcusb
1y ago
I believe the comment you replied to is what is known as a "joke".
127.
▲
by
marcusb
1y ago
Or one of the seven endpoint agents, each of which has a kernel module and at least half of which are doing dodgy process injection and read process memory shenanigans.
128.
▲
by
marcusb
1y ago
I had a couple of customers that deployed 7 endpoint security tools of the "hook into processes and inspect everything" variety. The exact mix was customer-specific, but if you're wondering what that looks like: * Stand-alon
129.
▲
by
marcusb
1y ago
As I said, “depends on the car.”
130.
▲
by
marcusb
1y ago
It might have been malicious compliance. It might also have been your coworkers having a reasonable (if incorrect) expectation that their coworkers at a leading tech company understood how to schedule meeting time using the calendar their c
131.
▲
by
marcusb
1y ago
I think the better rule is to empower people to remove themselves from meetings they don't need to attend. Inviting anyone and everyone in case they might be needed is a real problem at most big companies I've worked for or wit
132.
▲
by
marcusb
1y ago
> Emissions are tested on a standardized driving cycle that doesn't include full-throttle acceleration Depends on the car. See Supplemental Federal Test Procedure US06[0], required by the EPA for light-duty vehicle certification sin
133.
▲
by
marcusb
1y ago
There are at least two problems with this. First, the history of tuning suggests there is no level of stock performance that enthusiasts will be happy with. They will always want more than the OEM provides. Secondly, there’s a reason you
134.
▲
by
marcusb
1y ago
The "locks out tuners" bit is pure click-bait non-sense. Tuners will either work around the sensors (as they have for decades) or replace the ECU with any number of aftermarket models.
135.
▲
by
marcusb
1y ago
No, you're thinking of the other Steve. https://abcnews.go.com/Technology/steve-jobs-car-apple-ceo-l...
136.
▲
by
marcusb
1y ago
> A big wrinkle in AI evangelism is that proponents don’t understand the concept of human judgment as a “learned” skill Which is ironic given how much variation in output quality there is based on the judgement of the person using the LL
137.
▲
by
marcusb
1y ago
The author has given a few talks built around the same concept: https://www.youtube.com/watch?v=IOiZatlZtGU
138.
▲
by
marcusb
1y ago
> “My trust policy has a vulnerability in it but I’m safe because the attacker can’t read my policy to find out” The goal in preventing enumeration isn't to hide defects in the security policy. The goal is to make it more difficult
139.
▲
by
marcusb
1y ago
Games? A good portion of the Steam catalog runs just fine on Linux.
140.
▲
by
marcusb
1y ago
https://www.youtube.com/watch?v=M4IjTUxZORE (2013)
141.
▲
by
marcusb
1y ago
Isn't this vaguely how the invite system at Lobsters functions? There's a public invite tree, and users risk their reputation (and posting access) when they invite new users.
142.
▲
by
marcusb
1y ago
Released yesterday: https://github.com/mergd/amzn-tariff
143.
▲
by
marcusb
1y ago
It does not have to be the way it is. Security vendors could do a much better job testing and red teaming their products to avoid bypasses, and have more sensible defaults.
144.
▲
by
marcusb
1y ago
Yes
145.
▲
by
marcusb
1y ago
My wife says the wrapped ones of any color look better than stock. She thinks the stock ones look like toasters, and that Tesla should have painted two red/orange stripes along the tonneau cover to complete the stock look.
146.
▲
by
marcusb
1y ago
I haven't seen anything like that where I live. I see the same businesses over and over, and often see them parked at or near the business in question.
147.
▲
by
marcusb
1y ago
I see them quite frequently where I live, usually covered in a vinyl wrap advertising some local business or other.
148.
▲
by
marcusb
1y ago
Undoubtedly. If you go poking around most any security product (the product I was referring to was not in the EDR space,) you'll see these sorts of issues all over the place.
149.
▲
by
marcusb
1y ago
Zip bombs are fun. I discovered a vulnerability in a security product once where it wouldn’t properly scan a file for malware if the file was or contained a zip archive greater than a certain size. The practical effect of this was you could
150.
▲
by
marcusb
1y ago
The Soviet Venera program was really fascinating. It is quite impressive that they managed to build landers that survived even a short period on the surface of Venus, let alone return photographs. https://www.astronomy.com/s
More ›