raesene9

30 ms·

421.
by raesene9 5y ago
Interesting. Out of curiousity, is there a flow for if a package author gets permanently locked out of their google account? There have been cases of people losing access to their entire google account due to ToS breaches on one site (e.g.
422.
by raesene9 5y ago
Often the problem with MFA setups is, what's the fallback mechanism for when the user loses their password+MFA token, none of the options are perfect. 1) Permanently lock them out of their account. Not a good customer experience and pr
423.
by raesene9 5y ago
It's a shame Github Support haven't (AFAIK) expanded on what they mean by "This is something we’ve been tracking internally and have mitigations in place for.” This problem is likely common to every public registry. Even if
424.
by raesene9 5y ago
That's a view of the world for sure :) Personally I don't think it's irrelevant. From a threat modelling perspective, exposed services are expected to be attacked. Client services with zero interaction, have traditionally bee
425.
by raesene9 5y ago
To me there's a difference between RCE and Zero click. RCE occurs on a system with a listening daemon/service (e.g. web, SQL, DNS SSH). Zero-click describes an issue on a client system where usually a user would have to click some
426.
by raesene9 5y ago
nice, though I'm very disappointed the answer wasn't hunter2
427.
by raesene9 5y ago
Marketing is way more than advertising. It can be blogs (technical or general), SEO (getting your content to the top of relevant search pages), conference attendance, social media work (e.g. posting here :P ), running webinars and more...
428.
by raesene9 5y ago
interesting idea, but with something like this it's important to keep it up to date and even browsing for a couple of minutes I noticed entries that are outdated either because the startup has been acquired, or raised a load more funds
429.
by raesene9 5y ago
As to your first point, the police have completed an investigation into the beer in question and found no offence committed, so it's not the same as the 12 (IIRC) parties that happened at 10 downing street, currently under investigatio
430.
by raesene9 5y ago
I wasn't suggesting people did want to store gold, I was suggesting that storing crypto isn't necessarily easier or safer than doing so :) That said, as the post I was responding to mentioned there are definitely people who absolu
431.
by raesene9 5y ago
So once I've got my 24 word backup, how is that any safer than storing gold? Anyone who could come steal my gold can come take my hardware wallet, could they not? Also the problem with duplicate hard wallet backups is, if I'm unde
432.
by raesene9 5y ago
The difference between storing gold and crypto, is the range of people that can attack it. With Gold someone has to physically come to the location I've stored it in, that necessarily limits my attacker set. With crypto, if I use a hot
433.
by raesene9 5y ago
A lot of interesting ideas in this for sure, but at various points when reading it I was thinking "I bet the people who have to implement what you're selling are not going to be happy" :) The problem with reducing products or
434.
by raesene9 5y ago
Kubernetes Dual-stack is enabled by default... https://kubernetes.io/docs/concepts/services-networking/dual...
435.
by raesene9 5y ago
Kubernetes isn't IPv4 only. https://kubernetes.io/docs/concepts/services-networking/dual... Dual stack is stable and has been around a while. Also you don't have to use NAT even with IPv4, it&#x27
436.
by raesene9 5y ago
I'm sure it can improve in the future, but it seems that at the moment Ethereum is very unsuited for small transaction style fundraising, like this. The level of transaction fees is orders of magnitude higher than other options (heck i
437.
by raesene9 5y ago
The only reason they should have spent $2.6m at auction is, if there was another bidder taking them that high. Short of someone literally bidding against them with the foreknowledge of their maximum bid, it seems very unlikely that anyone e
438.
by raesene9 5y ago
The covid dashboard I've found the nicest to use, is actually not one of the official ones but instead this https://www.travellingtabby.com/scotland-coronavirus-tracker... . The information is presented clearly and it&
439.
by raesene9 5y ago
I'm guessing that very much depends on the jurisdiction. Those people that took $30m this week and all the previous thefts this year alone, they all had a plan for how to move that money and I've not seen many of them get caught..
440.
by raesene9 5y ago
Why do you need to move it out of crypto to launder it? Laundering is concealing the source of funds to avoid it being associated with a criminal activity. You can run it through a tumbler then use the proceeds to buy an NFT, the coins used
441.
by raesene9 5y ago
I would imagine that OPs could be thinking of the recent story ( https://www.bbc.co.uk/news/business-59990477 ) about North Korean stealing $400m of crypto. It seems reasonable to suggest that groups who want to avoid sc
442.
by raesene9 5y ago
Houses leave a trail, and they can be easily seized at a later date if evidence turns up. Not saying it doesn't happen (obviously it does) but there's more to catch than with crypto currency.
443.
by raesene9 5y ago
So in this weeks crypto.com hack the attackers appear to have moved $30m through tumblers to launder the money ( https://cointelegraph.com/news/crypto-com-breach-may-be-wort... ), doesn't feel like they found it tha
444.
by raesene9 5y ago
My guess here is that WebAssembly will become more popular for new developments, but I don't see it supplanting containers/Kubernetes across the board. One of the reasons that containers have been successful is that, in many cases
445.
by raesene9 5y ago
I think the answer's yes, and it's something that would make me leary of relying on a car's automated systems for anything safety related. Ultimately if I'm going to be criminally liable in a crash caused by my car, I&#x
446.
by raesene9 5y ago
The legislation that is relevant here is GDPR which is EU wide (each country has it's own implementation but they should be overall similar). In the article it points out that there are similar suits across the EU by the same organizat
447.
by raesene9 5y ago
I wanted to know what time it was for things like how long till my talk starts and how I was doing for timing. :)
448.
by raesene9 5y ago
I'm a great fan of cyberchef, really easy for quick chaining of decoding techniques to look at various types of data.
449.
by raesene9 5y ago
I don't think in this case it'll be messenger IDs (and if it is definitely not chinese) as GCHQ is the UK's equivalent of the NSA. They're a pretty secretive bunch, when they present in person they don't use real
450.
by raesene9 5y ago
I've done both sides of the coin as well and Ian's points definitely resonate. There are downsides (IMO) though :- 1. Pressure to do things quickly, which you may not fully understand. Consultancy sales don't always sell enti

More ›