miken123

8 ms·

31.
by miken123 5y ago
Funny, you see the same mistake at exactly the same spot, albeit less spectacular, in the video linked from the tweet: https://www.youtube.com/watch?v=xWc-r0InwVk&t=148s
32.
by miken123 5y ago
I would beg to differ about email reliability, also see https://datatracker.ietf.org/doc/html/rfc5321#section-6.1 but do agree that everything could get lost for some reason. But that is not the main point. Even i
33.
by miken123 5y ago
If O365 can't find the email and the O365 message tracing does not show anything, it seems likely that the mail was not actually delivered by Atlassian. If O365 looses mails and these mails do not show up in message tracing either (i.e
34.
by miken123 5y ago
I'm listed as the technical contact and have been for 5+ years and also get the regular mails to 'verify contact details'. I did not get the Aug 25 email. I did get the Sep 4 mail from that list ID. Once I noticed I did not g
35.
by miken123 5y ago
It's tiny, I just want them to send me an email if there is a critical vulnerability. Not too much to ask, I think.
36.
by miken123 5y ago
Yes, I did. I also ran an Exchange Message Trace (this is just standard Office 365, nothing fancy) and there was only 1 message from Atlassian in the last 15 days which was the update email that was too late to prevent exploitation. So they
37.
by miken123 5y ago
I only got the 'update' from last Saturday, by then it was too late already. Their original advisory was from the 25th, they should have mailed me back then.
38.
by miken123 5y ago
Atlassian was so kind to update their mailing lists somewhere over the last year or so. Previously, they would email the 'technical contact' of the license about any vulnerabilities. They quietly switched to some other notificatio
39.
by miken123 5y ago
> Luttwak's team found the problem, dubbed ChaosDB, on Aug. 9 and notified Microsoft Aug. 12, Luttwak said. Then mailing customers on the 26th. Depending on whether or not this can be classified as a 'personal data breach'
40.
by miken123 5y ago
It could very well be that your specific Javascript does not run automatically or does not run correctly. I see the same with one of our auto-submitting forms. I do not know whether or not that is intentional on Microsoft's part. But o
41.
by miken123 5y ago
You should not submit the form automatically. Tools like Microsoft O365 ATP run any links in an emulated browser with Javascript support. These will, in some cases, happily autosubmit the form for you.
42.
by miken123 5y ago
I find this quite concerning and am really wondering if there are any privacy advantages to Signal if these things happen. Could you say something on: 1. Have any defend in depth measures been applied in the Android and other clients to mak
43.
by miken123 5y ago
That may be your opinion, but an invoice in at least the Netherlands needs an monotonically increasing number. And it needs to be on the invoice and your customer needs to be able to see it. [edit] It's even EU-wide, see article 226(2)
44.
by miken123 6y ago
> Would you be willing to share more specifics That's something you could easily figure out yourself. E.g., just grabbing some random JIRA: https://hibernate.atlassian.net/jira/software/c/projects&#x2F
45.
by miken123 6y ago
I guess this didn't help: "I lost all my stuff in an apartment fire and am barely staying unhomeless. Lost access to most of my accounts. All precious metal is missing. If anyone could bless paypal@marak.com with a little cash it
46.
by miken123 6y ago
Even if the data is stored in the EU, Google (or Microsoft for that matter) does not guarantee that data cannot be accessed from the US. That makes sense, since most of their operating staff is probably based in the US, but does mean that i
47.
by miken123 6y ago
https://mobile.twitter.com/Gustawsson/status/130008521478233...
48.
by miken123 6y ago
It should be patched since Dec 2019: https://twitter.com/jensvoid/status/1295633279727673344
49.
by miken123 6y ago
I did not know that. Thanks for the information, as I can now cancel my donation and save a couple of bucks each month.
50.
by miken123 6y ago
That’s not really how it works in the Netherlands, I’m afraid. Yes, the losing party usually has to pay the legal fees, but these fees are determined using a point-based system and do not really reflect the actual costs. But, I do have to s
51.
by miken123 6y ago
I don't see the problem with it. Think of this scenario from the perspective of an employer: - You hire someone and they create something and use it as part of your software. - They leave. - Then they sue you because they say you are u
52.
by miken123 6y ago
> The wording specifically says that they own anything I conceive of while working for them. That's quite normal, at least under Dutch labour law. It prevents IP discussions if an employee does anything outside of the 9-5 working h
53.
by miken123 7y ago
Wondering when they will start with implementing proper access controls on their API's. At the moment, a personal access token does have scopes, but it is quite limited: - Repo access is all or nothing. A read-only token is not possibl
54.
by miken123 7y ago
That's explained in the post linked from the blog: https://github.blog/2020-01-22-how-we-built-good-first-issue...
55.
by miken123 7y ago
I'm not suggesting you lack perspective. I am suggesting you are in no position to judge other people's problems as you are not a qualified healthcare psychologist. In denying other people's issues, you are creating a toxic e
56.
by miken123 7y ago
> Expats who come to The Netherlands generally earn a lot. Not in the last place because they are highly subsidized by not having to pay any taxes over 30% of their salary. In return for that, they post not very insightful comments like
57.
by miken123 7y ago
> I find it hard to believe that with a list of major enterprise clients, they can't afford several thousand dollars a month? They can probably afford it, but if every piece of your stack needs that kind of money you run out of mon
58.
by miken123 8y ago
> to run it to ASD2 and order the parts at GSX, we take the hardware back and as soon as the parts arrive The AASP I contacted could not return the hardware until the repair was done, so bringing it in when the parts arrived was impossib
59.
by miken123 8y ago
> hardware quality & support (if my Apple laptop has an issue, I can take it into an Apple store and get it fixed same-day in many cases That kind of depends on the country you are in, I guess. Here in the Netherlands you first need
60.
by miken123 8y ago
Upgrading to a new JDK every 6 months is pushing a bit too hard if you ask me. In case of JDK 8 -> JDK 11 (LTS to LTS) you even have only 4 months. A new JDK may have breaking changes, which may require code changes, acceptance testing,

More ›