Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
raesene9
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
60 ms
·
751.
▲
by
raesene9
6y ago
you're assuming that Tether is not just printing Tether's out of nothing of course :) As they have never had an audit and have already admitted to not being 1:1 backed, that's not necessarily an assumption that'll play o
752.
▲
by
raesene9
6y ago
That's an interesting view, what makes you say that? Tether's market cap is about $10b now and it's daily transaction volume regularly exceeds that of BTC. It would seem likely that if that volume left the market it would hav
753.
▲
by
raesene9
6y ago
I wonder how they're hedging the risk of Tether/Bitfinex losing their case(s) against the NYAG and others and the likely resultant drop in value of BTC.
754.
▲
by
raesene9
6y ago
For me a lack of trust in Google wouldn't be security related but their committment to keeping going with the products in the long term. Google have a reputation (rightly or wrongly) for dropping support for products quickly if they do
755.
▲
by
raesene9
6y ago
Yeah I'm fairly well aware how pentests are billed (I've been in testing for ~15 years as a buyer, seller and tester :) ) My point was, that there was a gap between how the blog appeared to be billing the test "thorough secur
756.
▲
by
raesene9
6y ago
Worth noting that (IME) US day rates are a lot higher for pentest work :) your US rates sound similar to what I've seen but Morrbo's UK rates sound ballpark right for the UK (I'd have said a little higher but it does depend o
757.
▲
by
raesene9
6y ago
Interesting how little pentest rates have moved on in the UK in the last 20 years. I was a customer of big UK testing companies back then and rates were around that already, so there's been effectively no increase there in that timefr
758.
▲
by
raesene9
6y ago
It's good to see companies making reports public to provide some confidence that they're having reviews done, but in this case the scoping of this job seems a little odd, not sure if that's a bad reporting template or somethi
759.
▲
by
raesene9
6y ago
IMO it's too easy for competitors to create a similar level of functionality for it to be a standalone product. If Slack charges too much, there's a host of free alternatives that can be used, meaning they have limited ability to
760.
▲
by
raesene9
6y ago
Glass is what they already ship, store and service whisky in... I'd be interested to see if they could get cardboard working without it affecting the taste.
761.
▲
by
raesene9
6y ago
I'd say that either a) keeping it out of direct sunlight (e.g. in a warehouse or a shop) or b) making the bottles more opaque, would be a more ecologically friendly option? Apart from display bottles, it doesn't seem like that lik
762.
▲
by
raesene9
6y ago
I've never seen whisky (Johnnie Walker or others) in a plastic bottle... If the Whisky industry wants to cut down on waste, there's a really easy way to do it. Stop putting whisky into fancy cardboard/metal boxes (or at leas
763.
▲
by
raesene9
6y ago
SUSE is a still moderately large outfit. Their last valuation was $2.5b in 2019 https://techcrunch.com/2019/03/15/suse-is-once-again-an-inde...
764.
▲
by
raesene9
6y ago
It's interesting to read down the comments on that announcement page. Sounds like a lot of service providers feel like they're getting burned on this move, as their customer are using the services that are about to be deprecated.
765.
▲
by
raesene9
6y ago
if you're on k8s, and you get access to secret objects via the Kubernetes API, you're getting the secrets in the clear, no hashing or encryption. If you get it via an etcd database file from disk or via direct access to the etcd A
766.
▲
by
raesene9
6y ago
There are a number of cases, even with just bugs, which won't be deliberately hidden (unlike malicious software) where critical security issues have gone unnoticed in major open source software packages for year (e.g. shellshock). Then
767.
▲
by
raesene9
6y ago
There's no guarantees what you're getting even if it's open source, unless you read and understand the source code :) The set of computer users who a) have the knowledge to do security code review and b) have the time to re
768.
▲
by
raesene9
6y ago
AFAIK Monzo are pulling back on their US business, so probably only UK for now.
769.
▲
by
raesene9
6y ago
The EY point is interesting. I'm not sure if it's still this way, but when I worked there, a lot of care was put on audit clients as the partner(s) signing off the work had effectively unlimited liability, and could lose pretty m
770.
▲
by
raesene9
6y ago
I'm not sure the City of London can be made to look like saints of financial regulation, given their previous problems with PPI mis-selling, and the disintegration of a number of supposedly "safe, well capitalized" banks in t
771.
▲
by
raesene9
6y ago
Whilst I wouldn't put it that way , it does seem like the German financial regulators and investment industry have something to learn from the Wirecard problem. When the FT and others started raising concerns about Wirecard's fina
772.
▲
by
raesene9
6y ago
Right so in addition to the complexity of running k8s (which is the general point of the post) you now have to learn about OAuth servers and LDAP integration. In many corporates you also now have the challenges of cross-team/department
773.
▲
by
raesene9
6y ago
Under current rules, on most social media sites, things can be cause for removal without being demonstrably false. What you appear to be suggesting is that only demonstrably false or things like strong language apply. If you suggest that p
774.
▲
by
raesene9
6y ago
I agree with you, that's why I don't think it's plausible to apply legal rules to them in the way that's proposed for twitter. The point I was making is that things that could apply to twitter also apply everywhere there
775.
▲
by
raesene9
6y ago
Just as an addendum to this, HN provided a great example. This whole post just dropped off the front page and isn't showing in the top 3 pages of results. It could very much be argued that they curated the post, and if they're re
776.
▲
by
raesene9
6y ago
If they curate the content, they're responsible for it. If they are then accused of political bias or censorship (as with the case that triggered all this), can they be sued by the commentor whose comment they removed? Once they'v
777.
▲
by
raesene9
6y ago
I'd argue there's no such thing as "transparent terms of use" that wouldn't be open to legal challenge. Twitter and facebook have terms of use, they're as transparent as any other site in that regard. Reddit ha
778.
▲
by
raesene9
6y ago
All social media sites effectively curate content by dictating what is allowed on the platform and what is not, and removing content which doesn't meet those requirements. This isn't just about facebook and twitter, it's abou
779.
▲
by
raesene9
6y ago
So under this kind of system would sites like HN/reddit be responsible for comments on posts if they edited/removed them? If an HN admin removes a comment on a post, they've curated that discussion, effectively.
780.
▲
by
raesene9
6y ago
This could be quite a handy service for throwaway cloud clusters. In the past I've used https://labs.play-with-k8s.com/ but the availability on that service has been a bit spotty of late.
More ›