mattkopecki

6 ms·

1.
by mattkopecki 3y ago
Consider something like a Whoop or Oura Ring which monitors health metrics but doesn’t rely on a watch? That’s what I’ve settled on so that I have the best of both worlds.
2.
by mattkopecki 3y ago
This is the problem my company solves. I won’t plug it here, but my email is in my HN profile if you want to reach out
3.
Vulnerability Exploitability EXchange – A Guide(rezilion.com)
2 points by mattkopecki 4y ago|0 comments
4.
Vulnerability Exploitability EXchange (Vex) – A Guide(rezilion.com)
2 points by mattkopecki 4y ago|1 comments
5.
by mattkopecki 4y ago
Rezilion works at runtime when the Gitlab runner spins up a container for testing the app. Rezilion observes the contents of memory and can reverse-engineer back to the filesystem to see where everything was loaded from. In the CI pipeline
6.
Ponemon Report Reveals How Many Hours Organizations Are Losing to Vuln Mgmt(rezilion.com)
1 points by mattkopecki 4y ago|0 comments
7.
by mattkopecki 4y ago
There are definitely other approaches that don't require code to be uploaded anywhere. For example, we ( https://rezilion.com ) work with your package managers to understand what dependencies your program has, and then analyz
8.
by mattkopecki 4y ago
Gitlab Ultimate uses Rezilion to accomplish a similar aim. Rather than using the principle of "reachability", Rezilion analyzes at runtime what functions and classes are loaded to memory. Much more deterministic and less of a gues
9.
by mattkopecki 4y ago
Here is a good writeup of some of the pros and cons of using a "reachability" approach. https://blog.sonatype.com/prioritizing-open-source-vulnerabi... >Unfortunately, no technology currently exists that can te
10.
by mattkopecki 6y ago
Shameless plug: my company has launched an alternative authentication modality that eliminates this issue, yet is also app-less and requires no download. It is also not limited in the ways FIDO authenticators are today, yet provides the sam
11.
by mattkopecki 8y ago
It's really unclear to me what your product is. I would have given up trying to figure out if you hadn't implied that it's somehow related to what this cool blog post accomplishes. From the FAQ, my best guess is that you offe
12.
by mattkopecki 9y ago
I clicked thinking it was a sci-fi piece about a future where historians inspect the remains of our current society. Amazon had grown to be so significant that the future generations regarded this whole period and all our cities as Amazon
13.
by mattkopecki 9y ago
This just means that you need to add that script kiddie scenario to your threat model and prioritize it accordingly.
14.
by mattkopecki 11y ago
So, in any case, the FCC has set limits for acceptable amounts of radiation exposure from certain classes of the electronics that we find all around us every day, and I guess I was just wondering how those limits would compare to the radiat
15.
by mattkopecki 11y ago
> If I shine my high beams on your car, or have a cellular phone call next to well - too bad. I'm entitled to bombard you with radiation if I want to. I think this is a really good point, actually. Do all these electronic devices ne
16.
by mattkopecki 11y ago
> 4) Alternate company, takes lower margin, pays drivers well and offer better customer experience. It doesn't seem to me that your crucial step will work. Uber is worth >$50bn, but more importantly has a substantial amount of ca
17.
by mattkopecki 11y ago
> Doing some back of the envelope calculations I can't see any scale where they are profitable given their current fee structure. “We lose money on every sale, but make it up on volume”
18.
by mattkopecki 11y ago
> All the logical advice (exercise, go to sleep on time, live a healthy lifestyle) are things that I struggle to find the motivation for. In my experience, that is largely the point. Take "cold showers", for example, as this is
19.
by mattkopecki 12y ago
I work in a huge enterprise that will not allow any company data on third party servers. I also am constantly in need of ways to collaborate with team members on multiple different projects. But, I can't use any hosted webapps and have
20.
by mattkopecki 12y ago
Actually, FWIW I think lala's technology (matching songs based on the audio waveform instead of the file's metadata) was used to underpin iTunes Match. It is the component where you match your local library to Apple's library
21.
by mattkopecki 13y ago
> But is looking bad in the media worth human dignity? Of course not. But, is you looking bad in the media worth someone else's human dignity? That's a much easier sell.
22.
by mattkopecki 14y ago
Based on your experience, would it be difficult to decouple the assessment of an instructor from the test results of his/her students? If the assessment of a student's learning comes from somewhere else, what other mechanisms could we use t
23.
by mattkopecki 14y ago
I've had similar results while in school when submitting plain old lab reports, writeups, research papers, etc. Except I cut out the middle step and just downloaded the standard / most recognizable TeX font, and used it in Word: http://en.
24.
Quasar: a window manager for your (jailbroken) iPad(thebigboss.org)
7 points by mattkopecki 14y ago|1 comments
25.
RSS Podcast Syncing(mattkopecki.wordpress.com)
1 points by mattkopecki 15y ago|0 comments
26.
How to fix Facebook Groups (and take the site into a new era of usefulness)(mattkopecki.wordpress.com)
1 points by mattkopecki 15y ago|0 comments