raesene9

28 ms·

361.
by raesene9 4y ago
Not directly related to this article, but it seems odd that (AFAIK) almost all the public statements by Tether come from their CTO or general counsel and not their CEO. You'd think for things like this the CEO would be the person invol
362.
by raesene9 4y ago
As long as their cluster API servers aren't on the Internet.... which is a default for AKS, EKS, and GKE :) (there's 1.3M servers identified as Kubernetes directly on the Internet according to Shodan's latest stats).
363.
by raesene9 4y ago
I see they cut off access for staff before telling them. not an atypical move, but I wonder if they were actually able to revoke all access, given there's systems like Kubernetes where some auth. types can't be revoked once grante
364.
by raesene9 4y ago
One thing I didn't realise till recently, is you don't need spotify to generate white noise if you have an iPhone/iPad, as it's an in-built function under accessibility --> Audio/Visual and background sounds.
365.
by raesene9 4y ago
Yep Docker's fine (IMO ofc). If you're running on Linux hosts, then Docker engine is open source, free and works.
366.
by raesene9 4y ago
One of the better parts of kubectl's documentation is that there's generally examples like this, so you can get the more common examples in the help and copy/paste/lightly modify, as needed.
367.
by raesene9 4y ago
Well it has been immortalised in song https://youtu.be/YRlPTbKHIPQ
368.
by raesene9 4y ago
There's a WSJ piece here https://www.wsj.com/articles/terrausd-crash-led-to-vanished-... which talks to a couple of the affected investors. From the article it seems that people got persuaded by the seeming respec
369.
by raesene9 4y ago
I'm a huge fan of KinD for development and testing clusters. It's also relatively easy to customize cluster configuration or node image, so you can create clusters for custom scenarios.
370.
by raesene9 4y ago
One small piece of anecdata which kind of supports the theme of cohesiveness being important. I've been a part of a relatively small Stackexchange site (security.stackexchange.com) for 11.5 years and over that time I've made frien
371.
by raesene9 4y ago
This is the method I use, in conjunction with the Sony ZV-1 which gets a mention in the article. It also bypasses the problem mentioned in the article about turning up as a mass storage device. What I've found is that by USB charging a
372.
by raesene9 4y ago
I've not read all of anchor's material but I don't recall them publicly stating that the 20% APY was only going to las till they had burned through a specific amount of money. Do you know, was that stated publicly?
373.
by raesene9 4y ago
I don't think that Luna or UST were ponzi's but some of the things built on top of them had ponzi-like characteristics. Specifically Anchor which was promising 20% returns whilst charging borrowers less than that on the same funds
374.
by raesene9 4y ago
What's even wilder is the number of people in the replies still trying to buy Luna!
375.
by raesene9 4y ago
There's been several proposals from community members about "solving" this. From reading them they seemed to fall into two camps "save Luna trash UST" and "save UST trash Luna" but both relied on the idea
376.
by raesene9 4y ago
If you offer more to depositors than you charge borrowers, it's never sustainable you're making a loss. If I make £3000 in interest from borrowers on a set of money and give away £5000 in interest to depositors of those same fun
377.
by raesene9 4y ago
I would guess that in many countries a regulated bank offering more to depositors than they charged borrowers (without some kind of strict limits on the amount per customer) would get a visit from their regulators quite quickly to underst
378.
by raesene9 4y ago
Yep, I've had two electric razors in my adult life (now in my late 40's) and they do the job well enough for me. Need periodically washed out and regularly charged, but apart from that they're maintenance free. Both Philips,
379.
by raesene9 4y ago
AirBnB (and similar) has been really bad for the property market in the Scottish Highlands. Lots of people buying up scarce housing stock to use for holiday lets, means that locals who work in the area (where a lot of local employers can&#x
380.
by raesene9 4y ago
have you seen an analysis of SELinux against the recent set of breakouts? That'd be interesting to see. Definitely the CRI-O one (which is most likely to affect Red Hat based systems) was able to exploit a default OpenShift cluster in
381.
by raesene9 4y ago
I'd generally agree with this, but for production use (where it'll be CRI-O or ContainerD in all likelihood) it's worth noting that using containers does increase your attack surface. We've had container breakout CVEs in
382.
by raesene9 5y ago
So (like everything in security) it depends on your threat model. Open source has significant advantages over closed source, from the perspective of allowing the possibility of review (although that can be a false sense of security as we&#x
383.
by raesene9 5y ago
Unfortunately, the number of people qualified and with the time to do a source code review of something as complex as a browser, is very small. For the vast majority of users that's not a realistic prospect...
384.
by raesene9 5y ago
If you want to have alarms for successful intrusions, there are much cheaper ways of doing it than this :) you can either set-up your own honeypots or, if you want a turn-key solution there's great tools like https://canary.
385.
by raesene9 5y ago
The challenge is, that's just one of many examples of problems that would be very opaque to non-experts. Without deep knowledge of the crypto space, and excellent operational security pratices, putting a significant amount of money int
386.
by raesene9 5y ago
Docker CLI and Docker engine are open source :) Docker Desktop for Windows/Mac are not. So as long as the dependency is on the open source components, AFAIK they'd be fine.
387.
by raesene9 5y ago
Caveat that doesn't (AFAIK) apply in the UK. Here it looks like un-payed non-competes are enforceable but if they're too long/too broad that would likely make them unenforceable.
388.
by raesene9 5y ago
I know all gov's to this to an extent, but I feel the current UK gov excels at it, including in high speed rail. A couple of examples :- - Scotland - NI bridge. https://www.bbc.co.uk/news/business-59368707 - HS2 E
389.
by raesene9 5y ago
The problem with this (regardless of your position on Nuclear energy) is that the current UK government have a woeful record of long term commitments. They're fond of flashy announcements, but the hard long term work to bring them to f
390.
by raesene9 5y ago
So I'll start by saying that security is always relative and what's ok for one environment won't be for another :) The challenge with Linux containers as used by Docker/Containerd/CRI-O et al, is that containers run

More ›