slt2021

44 ms·

1. 871.▲
   by slt2021 3y ago

   SRE is really a more familiar "sysadmin" from good ole days. You know, that bearded IT guru in a basement floor, will curse and shout at you, but will keep your company running when it comes to IT. if you switch back to sysadmin m
2. 872.▲
   by slt2021 3y ago

   thats not the job of red team, this is blue team work (Detection Engineering or Incident Response or Security Operations whatever they are called) - a SIEM tool monkey basically. again, no need for a fulltime red teamer
3. 873.▲
   by slt2021 3y ago

   Computer Janitor is a more correct description that Security Engineer. Because at the end of the day we are cleaning up and tidying others' mess that they left. Whether it is random software dependencies, or glaring holes in firewall c
4. 874.▲
   by slt2021 3y ago

   >Qualys isn't going to find custom written malware using common utility as a C2 channel. yeah, but crowdstike or whatever antivirus you use can. Again, no need for red team, just an operator for Security Tool X/Y/Z
5. 875.▲
   by slt2021 3y ago

   so you agree that it is cheaper and better to ask SRE team to run BurpSuite for 30 minutes once a week, rather than hiring FTE to do that?
6. 876.▲
   by slt2021 3y ago

   >>Now there's thousands of potential issues. Many are false positives. Inspecting output/logs of Qualys is no different than inspecting logs of kubernetes (or other SRE platform). and both overlap. If you have highly skilled
7. 877.▲
   by slt2021 3y ago

   Security jobs are tiered: Tier0: Pure security research shops, like Google Project Zero and alike. YOu can only get this job after doing PhD in Computer Security at top-tier university lab, and have publications on stuff like linux kernel f
8. 878.▲
   by slt2021 3y ago

   mainly two: 1. Outsource companies are NOT known to be staffed with cyber pros, you won't be able to get a meaningful return on your money. Good security pros will NEVER work for body shop like Infosys who only focus on minimizing staf
9. 879.▲
   by slt2021 3y ago

   interview vs real work is different. FAANG engineers are not flipping a binary tree either, yet this is a common question they ask. as for Burp Suite - why would a company keep engineer full-time only for him to run burp suite for 30 minute
10. 880.▲
    by slt2021 3y ago

    a lot of your suggested vulnerabilities could be prevented from appearing if company just hired a person who can configure SAST and WAF and etc solutions (solving a class of security problems from showing up on a platform level, not on per
11. 881.▲
    by slt2021 3y ago

    the actual reason for mandating companies to spend on cyber is because they are cutting costs on SRE/Ops by outsourcing all KTLO work to India and other offshore countries. If you ever looked at average S&P500 company IT Budget, th
12. 882.▲
    by slt2021 3y ago

    I am gonna surprise you, but nobody from cybersecurity is finding vulnerabilities either. ALL of cybersecurity is just operating and configuring a platform, whether it is Qualys or Snyk or Wiz or something else. "cyber" people are
13. 883.▲
    by slt2021 3y ago

    Fully agree with the author, the often quoted CIA (Confidentiality Integrity Availability) actually belongs to the SRE platform's concern. What I often see however, is SRE teams keep extremely understaffed (because "cost center&qu
14. 884.▲
    by slt2021 3y ago

    This blog is blocked by DNS Security solution because of "personal VPN".
15. 885.▲
    by slt2021 3y ago

    This is awesome! I am going to try to use it to make surgical edits to the terraform state file, in rare cases when I have to. Some terraform providers would rather delete and recreate resource, while a simple edit would do the trick for me
16. 886.▲
    by slt2021 3y ago

    old VMWare used to cater to boomer enterprise companies and thats how they sold their products. These new owners however are not interested in catering to customers' needs - they just want to milk license fees like Oracle and outsource
17. 887.▲
    by slt2021 3y ago

    There is still benefit in shooting laser at a speed of light, instead of a guided rocket which travels at 2-3 Machs at best. 2 machs is ~0.686 km/s - vs 300k km/s for laser. and laser can be mounted on a plane, which makes it even
18. 888.▲
    by slt2021 3y ago

    Directed energy (laser) will solve this issue, so that Patriots are only engaged for expensive planes, while lasers will destroy drones and cheap ballistic rockets
19. 889.▲
    by slt2021 3y ago

    Silver Lake was also partner of Michael Dell in taking Dell Computer Corp private (while keeping VMware public) and they did all sort of financial machinations to screw VMWare shareholders
20. 890.▲
    by slt2021 3y ago

    CA Tec, Symantec and now vmware - sounds like a combo of failed software companies which are no longer competitive and exclusively cater to boomer enterprise companies and close b2b deals with heavy bribes and quid pro quos
21. 891.▲
    by slt2021 3y ago

    these 3rd world authoritarian regimes try to do this all the time, for example Russia routinely tries to recruit russian-speaking engineers at US/EU companies for industrial espionage. for example [1] there are more cases that nobody p
22. 892.▲
    by slt2021 3y ago

    thanks for sharing, fantastic letter
23. 893.▲
    by slt2021 3y ago

    have you seen Kia Carnival ?
24. 894.▲
    by slt2021 3y ago

    thanks to newsom, it is all his legacy that he is trying to expand nationally by trying to become presidential candidate sometime in the future
25. 895.▲
    by slt2021 3y ago

    basically military budget will always eat 1/4 to 1/3 of the US budget no matter the output, so if it produces few dozen F35 then yes - it will look like costs per unit are outrageous. a lot of military spending is fixed costs that
26. 896.▲
    by slt2021 3y ago

    having a pilot makes it somewhat protected against electronic warfare you dont want russia/iran to just steal your latest tech bomber, do you? https://en.wikipedia.org/wiki/Iran%E2%80%93U.S._RQ-170_incid... also r
27. 897.▲
    by slt2021 3y ago

    most employees at faang data centers are contractors at rates like $30/hr, nowhere near the faang salaries. dont need CS grads to do racking and stacking compute appliances, might as well hire associates from home depot
28. 898.▲
    by slt2021 3y ago

    the O(1) random access doesn't look like advantage at all, honestly. if I load my parquet into memory - I will have O(1) random access to any row just as well. plus, considering that Arrow recommends to work in chunks of 1000 rows per
29. 899.▲
    by slt2021 3y ago

    I was just trying pandas native .to_parquet and .to_arrow() without any extra config knobs
30. 900.▲
    by slt2021 3y ago

    question about Arrow: the format seems to be not very space efficient. I tried converting one of my parquet files from datalake from parquet to arrow and size difference is staggering. 20mb parquet -> 700mb arrow. doesnt seem fit for dat