rtempaccount1

11 ms·

31.
by rtempaccount1 7y ago
In theory sure. In practice (especially if you don't know your connection is being used like this, as the article suggests), if law enforcement turn up at your door to take all your kit as evidence in a crime, they'll likely take
32.
by rtempaccount1 7y ago
In standard consumer networking, say I have a /24 (say 192.168.1.0/24) and one dual-homed host performing Network Address Translation to a Internet routable address, how would an attacker easily initiate a connection to one of the
33.
by rtempaccount1 7y ago
I'm not sure that's a bad thing, if I'm honest. Strong top-down direction can work (e.g. Steve Jobs at Apple) but it can also cause ossification (e.g. Blackberry) where a company won't sacrifice an existing product to mo
34.
by rtempaccount1 7y ago
I'd suggest that no corporate "loves" or "likes" anything :) They're there to make money, simple as that (whether they should be or not, is a whole other discussion). What tends to get in the way is internal po
35.
by rtempaccount1 7y ago
In the current centralized markets, stablecoins are used as fiat on-ramps, there's no real need there for a crypto backed stablecoin for that kind of role. I'm sure you could have one, but in the case of Tether, that's not w
36.
by rtempaccount1 7y ago
It's entirely possible to have a stablecoin and indeed others exist. The key to a stablecoin however, is trust. Users have to trust that their holdings are actually backed by real fiat currency as that's the promise of the stable
37.
by rtempaccount1 7y ago
So on the YAML DoS one (CVE-2019-11253) it breaks down like this. If you're using an unpatched version, anyone who can POST YAML to the Kubernetes API server can chew a fairly large amount of CPU/RAM. How badly this effects you,
38.
by rtempaccount1 7y ago
yeah there's a variety of "free at point of use" services driving the Internet and, sooner or later it seems likely there will need to be a change in how they're funded. It's not just Docker hub, there's servic
39.
by rtempaccount1 7y ago
Well I find it interesting :) A huge quantity of value flows through web applications, they're used by pretty much every business sector in the world for a wide range of purposes. Security vulnerabilities in Web applications have been
40.
by rtempaccount1 7y ago
Errors and mistakes are somewhat inevitable in larger projects, and ASVS covers a lot of ground. One of the benefits is that it's open source, so you're free to contribute to improve it.
41.
by rtempaccount1 7y ago
OWASP may be a shambolic volunteer project, but it's interesting that, in many areas, it's still the best thing available for the last 18 years...
42.
by rtempaccount1 7y ago
OWASP is a not-for-profit industry group not a governmental initiative. However it's generally the most used "standard" for web application security and some regulations will use OWASP projects as references for what things s
43.
by rtempaccount1 7y ago
The OWASP Top 10 is intended as an awareness tool to help raise visibility of web app. security issues. I'd agree with the article that it gets misused (a lot) as some kind of checklist that, if you apply, you can have a "secure&q
44.
by rtempaccount1 7y ago
It's interesting to see this from a MacOS release and the security complaints are similar to what's been seen about recent versions of Windows. To me, both are a manifestation of the idea that these two Operating Systems are movin
45.
by rtempaccount1 7y ago
AFAIK there's a significant caveat to that, which is that you only get unlimited windows containers, if you're using process isolation. If you're using VM isolation, you need licenses for the containerized applications.
46.
by rtempaccount1 7y ago
I do some work in the k8s arena. Seen a couple of large corps using Windows containers, either for containerizing legacy applications, or for moving an existing Windows platform into containers to help reduce cloud bills.
47.
by rtempaccount1 7y ago
not sure I've seen a good analogue for the Model S (yet) closest competitor for the Model X at the moment appears to be the Jaguar I-Pace. For the model three there's things like the Hyundai Kona and Renault Zoe which are becoming
48.
by rtempaccount1 7y ago
Not every loss making company is an Amazon in the making :) Tesla is likely coming to the end of the period where they have a relatively unique portfolio of products. We're starting to see the traditional car makers come up with compe
49.
by rtempaccount1 7y ago
I'd say it's partly VCs but also the fact that, once they stop growing quickly, they need to start turning a profit, to justify a big valuation. As long as they're still growing they can blame any losses on the costs of expan
50.
by rtempaccount1 7y ago
For me brexit has, for many people, been a case of them voting against their own best interests, due to believing what they're being told by politicians. The Leave camp, during the campaign, were very strong on the idea that leaving wo
51.
by rtempaccount1 7y ago
It didn't, and 3 years ago that point was (in my opinion) at least partially understood. However since then it has been treated as an article of the faith by both the major political parties in the United Kingdom that "brexit mean
52.
by rtempaccount1 7y ago
(possibly) interestingly, I'm of a very similar opinion which is why I was curious :) I'd prefer remain at this point, as it's obvious the British political establishment has made a total mess of this process, and will contin
53.
by rtempaccount1 7y ago
That's just not true. If the DUP and the conservatives had voted to pass Theresa May's deal they absolutely had the numbers to pass it, especially given that on each of the votes there were a small number of Labour MPs who voted
54.
by rtempaccount1 7y ago
actually you are, unless you'd care to provide a reference for that Labour policy. My understanding of the Labour position is that they would negotiate a deal with the EU (likely including a custom's union) and then hold a second
55.
by rtempaccount1 7y ago
Out of genuine curiosity, why do you approve of the prime minister's strategy?
56.
by rtempaccount1 7y ago
The government's own lawyers admitted that prorogation had a political purpose. the only logical conclusion is that the goverment intended to restrict parliament's ability to interfere with its brexit plans
57.
by rtempaccount1 7y ago
I'm afraid I'd have to disagree with this analysis. The government's originally stated aim of the prorogation, was that it was a standard mechanism prior to a queen's speech. The court has taken the opinion that the real
58.
by rtempaccount1 7y ago
I'd say it's mainly just the US, from my experience (UK outside of london) developer salaries in Europe are much lower than the US. For one example https://www.payscale.com/research/UK/Job=Software_Develo
59.
by rtempaccount1 7y ago
However London's underground system also has unions, so if the suggestion is that it's more efficient than New York, the implication is that it's unlikely to be the presence of a union causing the issues.
60.
by rtempaccount1 7y ago
Of course each organization should have their own threat model, mitigations and the like in place. Those organizations also know not to take a CVSS base score as a gospel. However I'd suggest that many organizations are not that sop

More ›