otterley

39 ms·

841.
by otterley 8mo ago
You put your right foot in, you put your right foot out, you put your right foot in, and you shake it all about.
842.
by otterley 8mo ago
Sounds like the proposal to replace sudo-rs entirely throws the baby out with the bathwater, then.
843.
by otterley 8mo ago
The setting to echo isn’t configurable?
844.
by otterley 8mo ago
How large are these data volumes? How long does it take to prepare the data when a customer request comes in?
845.
by otterley 8mo ago
In theory, yes, but you can't squeeze blood from a stone.
846.
by otterley 8mo ago
Until someone rich and powerful gets ripped off -- then, suddenly, lots of people care a lot.
847.
by otterley 8mo ago
This response is just... simply... terrible. "Below are just some of the many inaccuracies in the story and then the truth." "[G]iven how competitive this industry is, attacks like this sadly come with the territory." &q
848.
by otterley 8mo ago
*Actual fun may vary.
849.
by otterley 8mo ago
I'll explain it once again, then leave this thread: Companies frequently put egress network policies in place that confine certain protocols like SSH and HTTP to certain ports. They do this in order to achieve compliance with regulatio
850.
by otterley 8mo ago
Of all the SSH servers in the world, what percentage are listening on a port other than 22? To answer this question, you can visit https://data-status.shodan.io/ports.html and see for yourself. By "unusual," I lit
851.
by otterley 8mo ago
You can, but you need additional components to do it, like an SSH session broker (i.e. a gateway or proxy). Some of these, like SSH Communications' PrivX suite, can record all traffic running through the proxy. It's not all that d
852.
by otterley 8mo ago
Large multi-national corporations, by way of their sheer size, tend to force their vendors to bend towards their needs, not to adapt to meet their vendors' unusual networking requirements.
853.
by otterley 8mo ago
But you’re not considering the many business environments that do.
854.
by otterley 8mo ago
I’d love to see proof of your claim that they provisioned a hard disk when you requested an SSD, or, at the very least, tests that showed that the IOPS you requested were not delivered. Can you show us the receipts?
855.
by otterley 8mo ago
Even with SRV records, there’s still the problem of middleboxes restricting protocol traffic to certain ports. (There’s another comment thread in which we discuss this.) In practice, SRV records work much better inside network borders than
856.
by otterley 8mo ago
I just encountered this the other day, in fact. You cannot utilize a single SSH key with multiple GitHub accounts.
857.
by otterley 8mo ago
I’m not a network security expert, so I don’t know the threat model. I just know that this is a thing companies do sometimes.
858.
by otterley 8mo ago
Uh, why not? Unless your SSH client is on the same network as theirs, there are going to be middleboxes somewhere in the path.
859.
by otterley 8mo ago
This is a clever trick, but I can’t help but wonder where it breaks. There seems to be an invariant that the number of backends a public key is mapped to cannot exceed the number of proxy IPs available. The scheme probably works fine if mos
860.
by otterley 8mo ago
Not needing a different port. Middleboxes sometimes block ssh on nonstandard ports. Also, to preserve the alignment between the SSH hostname and the web service hostname, as though the user was accessing a single host at a single public add
861.
by otterley 8mo ago
What do you think the problem to solve is? Please use quantitative data in your answer.
862.
by otterley 8mo ago
It helped that, at the time, most video was broadcast over the air and thus subject to FCC regulations relating to content, and that advertisers would pull funds from stations and networks that aired content that was too controversial. Othe
863.
by otterley 8mo ago
My research suggests that all U.S. states that require identification at the polls accept a driving license as a form of valid photo ID. Are you aware of any that don’t?
864.
by otterley 8mo ago
The reason for strong auditing and personal attestation is because left to their own devices, some companies will produce bullshit and hoodwink investors. Blame Enron. https://www.britannica.com/topic/Sarbanes-Oxley-Act
865.
by otterley 8mo ago
One way to help, I think, is to take advantage of prompt libraries. Claude makes this easy via Skills (which can be augmented via Plugins). Since skills themselves are just plain text with some front matter, they're easy to update and
866.
by otterley 8mo ago
Honestly, I think this was just a case of other folks already understanding the nature of the issue discussed in the article (pay for DMs), while you did not. This isn't an insult or anything, just an observation. A little humility is,
867.
by otterley 8mo ago
I think what you're missing here is the difference in the communication dynamics and what people are paying for. In the model-customer dynamic, a customer is giving money to a model on a quid pro quo basis: the model -- or so the cus
868.
by otterley 8mo ago
> You must have forgotten to read the thread There's no need to be rude. The issue here comes down to money and therefore reliance and damages. Nobody's paying "MrBeast" in response to his (or his delegates') Y
869.
by otterley 8mo ago
Feels like you're making this more complicated than it needs to be. The elements of fraud are quite simple: 1. a false statement of material fact 2. knowledge that the statement is false 3. intent to induce reliance 4. justifiable reli
870.
by otterley 8mo ago
They’re not passing themselves off as MrBeast.

More ›