p0seidon

6 ms·

31.
by p0seidon 2y ago
Well, not everybody, but it's quite powerful to be around people who actually care in person about how you are doing. It's a beautiful dynamic. It depends on the actual company and situation, but yes, there are people who find it
32.
by p0seidon 2y ago
The picture at the start of the article just says it all. I was just looking at it for minutes and didn't dare to scroll down.
33.
by p0seidon 2y ago
In my experience, the problem is that junior, extremely motivated people, who are often the ones doing the impactful work, cannot thrive and learn from experienced people in WFH environments.
34.
by p0seidon 2y ago
Probably depends on the role if it needs creative interaction.
35.
by p0seidon 2y ago
I agree, but: The best thing about this is that the work is actually done by a small number of people instead of an overengineered system with a custom-solution. The thriller is great, but also the efficiency powering all of Netflix CDNs is
36.
by p0seidon 2y ago
Totally agree, an easy read and a great reaction by Cox. I also like that the discovery and the bug itself were not communicated in a negative or condescending way, which is sometimes the case.
37.
by p0seidon 2y ago
Gone are the beautiful days of <table> layouts.
38.
by p0seidon 2y ago
Thanks for stealing hours of my productive time going down this rabbit hole.
39.
by p0seidon 2y ago
Yes agree every bare metal server probably beats EBS but a lot of manual work needed then.
40.
by p0seidon 2y ago
Have you tried io2 in this context? Did not have the chance yet.
41.
by p0seidon 2y ago
How much do you expect the price to drop?
42.
by p0seidon 2y ago
I think Aurora has to go through the same development process as every database. They changed essential patterns in the database, and there are severe side effects that need to be addressed. You can see the same with Aurora Serverless and t
43.
by p0seidon 2y ago
Yes, that must be what happened. Maybe it was also traced back to the person based on previous posts or something like that, and they got cold fee.
44.
by p0seidon 2y ago
The culture to think about blog entries in general is probably encouraged with a good and lean process. Some companies do not value such contribution.
45.
by p0seidon 2y ago
Still very hard to do, also he is right about the blog he mentioned.
46.
by p0seidon 2y ago
> The entry seems written by someone lacking maturity. Agree with that.
47.
by p0seidon 2y ago
Yes, but how should ServiceNow create session tokens if it is not part of the SSO system? I don't know enough about ServiceNow, but I think every large company has some products that are not part of their-SSO system. So that makes sens
48.
by p0seidon 2y ago
Yes, that's also what I think must have happened—missing 2FA. But it seems it's also not mandatory within Snowflake accounts also, from what I understand from the general message. I've never used Snowflake and assumed that be
49.
by p0seidon 2y ago
Yes, I know... I've seen that, also the posts on Reddit/HN and so on, but I am just curious if there is some truth to it.
50.
by p0seidon 2y ago
Had exactly the same thought.
51.
by p0seidon 2y ago
Will there be any direct comment regarding the article here?
52.
by p0seidon 2y ago
Generally, I like the page and the openness of the API behind it. It is much more common for people to talk about haveibeenpwned as a source for leaked credentials, but the site claims to have over 20 million computer entries from log steal
53.
by p0seidon 2y ago
It seems somehow like an Indiehacker page, probably taken too lightheartedly. Additionally, the related pages have no real contact details.
54.
by p0seidon 2y ago
So the account was without 2FA protection?
55.
by p0seidon 2y ago
There may have been administrative access that was not properly secured.
56.
by p0seidon 2y ago
We tried to make the article fun to read. In the end, we could have omitted our hint about our product, but honestly, we have gathered a lot of know-how there for anyone who wants to build passkeys on their own. Our blog and this article ar
57.
by p0seidon 2y ago
It is difficult to say, but there are some reservations people have because sometimes they are not sure what exactly happens with social login, or they have one Google Account associated with the wrong email, and they do not want to use it.
58.
by p0seidon 2y ago
Well, you can store your passkeys in a password manager like KeePassXC. Open-source password/passkey manager actually means more or less self-hosting your credentials as a third-party provider.
59.
by p0seidon 2y ago
That is probably because their implementation was released prior to Firefox implementing passkeys, and they have not yet updated their system.
60.
by p0seidon 2y ago
We use email or phone number as the identifier. We recommend verifying on sign-up, but it is actually a configuration option. We have other customers who want to request OTP on the next sign-in. Not validating the identifier on sign-up come

More ›