raesene9

80 ms·

931.
by raesene9 8y ago
I was with you on the first part, in other industries such a loss making company might have difficulties going public. But lost you on the second part. It's not for the SEC (in my opinion) to police who can and can't go private i
932.
by raesene9 8y ago
The question of what's covered and what "reasonable" security looks like is the problem for this industry. If those definition's aren't clear, it'll mean that every major claim becomes a lawsuit, that's no
933.
by raesene9 8y ago
so the difference I thought there might be now, as compared to 2008 is the percentage of funds that are passively managed. If a proportionately smaller percentage of stockholders are selling then it seems possible/likely that any pric
934.
by raesene9 8y ago
That's exactly what I think's happening, what you're doing is what a lot of people are doing. what will be interesting is, say there's a genuine market rout (e.g. what happened with Lehmans), which should depress stocks
935.
by raesene9 8y ago
I have a theory (it's a totally unproven one, I hasten to add). There's been a huge move into passively managed index funds over the last 10 years, with many smart investors touting them as a better long term bet than actively man
936.
by raesene9 8y ago
sure but what's the alternative? Unlike mail servers where there's tonnes of good commercial solutions you can use, I'm not aware of many good options for curated software library repo's There's tools you can use to
937.
by raesene9 8y ago
Really the only "solution" is to ensure that you have some way to establish trust in all the software libraries you use. For commercially provided libraries that could be a contract specifying security requirements, with some spec
938.
by raesene9 8y ago
Lots of things could be done, it's whether people are willing to accept the tradeoffs, which they haven't been (in general) up until now. Unfortunately, modern software development has heavily embedded the idea of using large num
939.
by raesene9 8y ago
Another one in the line of inevitable supply chain attacks on software libraries. This isn't going to go away, it's just a question of if/when the damage caused will get bad enough that people start to accept some of the trad
940.
by raesene9 8y ago
gems don't, NPM doesn't, PyPI doesn't, NuGet doesn't.... you get the picture. Basically all apps using package repo's (i.e. all of them) are relying on massive piles of unaudited 3rd party code with usually no idea
941.
by raesene9 8y ago
Cisco have a loong history of things like the. I mean go back to 2005 when they actually sent people to a security conference to rip pages out of the handouts that mentioned a security vulnerability in their products ( https://ww
942.
by raesene9 8y ago
From the article it appears that the Hardware management software was hard-coded to use Asus' update servers. that's not an uncommon model from what I've seen. Unlike Windows updates, firmware/utility/driver update
943.
by raesene9 8y ago
Interesting hack, but not really a surprise that attackers are continuing to look at supply chain's to get into targets that might otherwise be quite hardened. From what I've seen of PC laptops, in many cases (especially with comp
944.
by raesene9 8y ago
This looks cool, but really really don't run something like on a system which has any data you care about on it :) I don't mean to be negative about this project, but it feels worth a reminder of the risks that this kind of instal
945.
by raesene9 8y ago
My preference for Windows SSH moved from PuTTY to MobaXterm https://mobaxterm.mobatek.net/ . It's got a load of useful features, like tabbing, embedded X Servers, which makes things easier.
946.
by raesene9 8y ago
That was a runc vuln, which affected other conatinerization solutions on Linux, not just docker. Also it didn't really have anything to do with the Docker daemon running as root, it was triggered by the use of root users in containers
947.
by raesene9 8y ago
out of curiousity, where you say Docker is "insecure" what specific aspects of Docker were you thinking of?
948.
by raesene9 8y ago
isn't taxation, in this case, a type of government enforced savings :) So the gov. could force people to essentially provide for a level of healthcare for everyone. Also on the Obesity point, if the UK was a US state we would rate some
949.
by raesene9 8y ago
Isn't the best idea to make healthcare affordable/free at point of use for everyone (rich or poor) with the rich contributing more (through taxes) to subsidise the poor. That way no-one gets into medical bankruptcy :)
950.
by raesene9 8y ago
I can understand (although not agree with) the idea that rich people don't want to subsidise poor people's healthcare, but the argument I was responding to appeared to say that Americans don't mind paying more for their hea
951.
by raesene9 8y ago
but of course that doesn't mean Sweden pays more from those taxes on Healthcare than the US. Looking at the "Government and compulsory" figures here https://data.oecd.org/healthres/health-spending.htm th
952.
by raesene9 8y ago
It's interesting you say that, I've heard that line of argument before but it is quite puzzling. Are you suggesting that a person on Low income in the US doesn't object to paying more than they have for their own healthcare (
953.
by raesene9 8y ago
Jaguar I-Pace has 0-60 in 4.6 seconds, don't think that's slower than all Teslas, is it?
954.
by raesene9 8y ago
CRI-O isn't comparable to Docker for developers, it's a replacement for Docker when used as part of a Kubernetes cluster. The thing is that whilst various operations are shipping bits of the functionality that Docker provides in v
955.
by raesene9 8y ago
I just looked at https://github.com/containers/libpod/blob/master/docs/tutori... . For debian/ubuntu users (of which there are a fair quantity) whilst podman's install process looks like t
956.
by raesene9 8y ago
That Redhat don't like Docker is not surprising :) Whether their tooling will supplant Docker is more debatable. From what I've seen they don't have huge traction outside of Redhat for their stuff, so all the other major pla
957.
by raesene9 8y ago
Microsoft's containerization strategy heavily depends on Docker (they've got a licensing deal so that Windows server can use Docker EE for free) they might well pay good money to by Docker
958.
by raesene9 8y ago
When you say "People demand the system spare no expense on their care." is that really all americans? So there's no market for cheaper but somewhat less effective health care? Given that medical bills are the number one c
959.
by raesene9 8y ago
Well you've got your experiences and I've got mine, I don't think one set necessarily invalidates the other :) My experiences are that every k8s cluster I've seen uses Docker as the underlying CRI and in development land
960.
by raesene9 8y ago
So it's mainly in GH issue comments things like https://github.com/Microsoft/WSL/issues/2291#issuecomment-38... show that people have got it working. Whether MS ever use that tech. for production linux c

More ›