spydum

26 ms·

271.
by spydum 7y ago
It was in the table (image): https://adriancolyer.files.wordpress.com/2020/02/ott-table-2...
272.
by spydum 7y ago
Maybe I'm too optimistic but I think the net risk is reduced with more readily access to updates. The terrorism line just really doesn't strike me as a likely threat. Regular bug fixes and improvements to daily use are likely to s
273.
by spydum 7y ago
But even non OTA cars with lane assist and such have this same threat vector. If attacker compromise the vehicle code supply chain to introduce such a thing, whether it got loaded via OTA update or flashed by dealer when I took it in for se
274.
by spydum 7y ago
Minecraft mods?
275.
by spydum 7y ago
In what way? Sign updates, validate signature, and only apply when car is off and at home charging. Maybe some POST/rollback logic even possible. It's not much different than going to a dealer to get ECU flashed.
276.
by spydum 7y ago
This ends up tougher than the expected because most Enterprise folks don't deploy entire systems to cloud providers. They deploy some subset, and still need connections back on prem. Instead of abstracting them into APIs, they just spi
277.
by spydum 7y ago
Correct - the guidance serious shops give is to created privileged access workstations (PAWs) for critically sensitive work (think AD domain admin work or NW engineers, etc). You wouldn't expect most devs to be down in the weeds, but w
278.
by spydum 7y ago
really? it's quite stark, especially if you examine the "y"s
279.
by spydum 7y ago
What absolutely confuses me is.. aren't TOTP authenticators like the cheapest 2FA option to begin with?? No need to have some fancy SMS Enterprise account with a Telecom or pay okta or duo or entrust a bunch of money. It's FREE, a
280.
by spydum 7y ago
That sounds like exactly like AWS though doesn't it? EFS iops scale with data size allocation.
281.
by spydum 7y ago
while opioids are clearly awful when abused, they are at least a controlled substance and a bit expensive. There are MANY more people who manage pain with alcohol due to it's price point and availability.. I'm very interested to s
282.
by spydum 7y ago
The days are coming where STBs and TV's can do Direct Ad Insertion right on top of your existing video stream, either augmenting or outright replacing other advertisers content. Going to be super interesting..
283.
by spydum 7y ago
Yes they can, but what we often see is accounts sold off to others. They don't give away their infected machine. They just harvest credentials.
284.
by spydum 7y ago
This doesn't help if your machine gets infected with malware. They can steal that password and you'd never know - which is the point: unusual account activity should alert the user.
285.
by spydum 7y ago
absolutely this. most solid security people were devs with an interest who were given the opportunity to flip. the problem is employers want to pay below market prices, for someone who already has all of the skills they want. that just does
286.
by spydum 7y ago
Totally agree - it still cracks me up in my particular industry. “There’s a shortage of security engineers and architects” is a common trope. No there isn’t- you just aren’t paying more than SWE and other dev salaries. People would consider
287.
by spydum 7y ago
I'm not a huge fan of anybody (china or otherwise) performing content inspection or filtering on my behalf transparently. That's just another instance of the Great Firewall with other people at the reigns. If you chose to do that
288.
by spydum 7y ago
They should - high entropy dns names and frequent subdomains should be indicators to watch for. The bad news is they can be noisy and not get the attention they deserve (never saw a SOC that wasn't swimming in alerts).
289.
by spydum 7y ago
Incredibly thankful for the overwhelming opportunity we are all afforded in our industries. As many gripes and flaws we all enjoy pontificating about, there simply is no other line of work such as ours.
290.
by spydum 7y ago
I think there is room for three types of folks along this dimension. Yes, some people enjoy the validation, but there are plenty of obsessive folks who simply don't care for the validation. They take delight in the subject matter indep
291.
by spydum 7y ago
I suspect because cinder block or ICF is just so much more economical and you can make it look like anything you want (brick will always be brick). Plenty of wood framed but that’s purely cost.
292.
by spydum 7y ago
Just for an interesting spin: anybody have recommendations for first day of a FULLY REMOTE job?
293.
by spydum 7y ago
I definitely want to believe, but they implemented this for one month. So literally four days off, and declared success? Couldn’t many of those measurements be just standard deviations? Curious how productivity gain was measured and whether
294.
by spydum 7y ago
Like git-secrets? It’s mentioned on the site.
295.
by spydum 7y ago
As long as you keep taking out those sweet sweet tuition loans subsidized by fed, schools will be glad to take on more and more students. Performance doesn’t matter as long as we can keep selling prestige and keep enrollment growing
296.
by spydum 7y ago
better link from the mit folks working on project: http://news.mit.edu/2019/leonardo-da-vinci-bridge-test-1010 sure, bridge may have worked, but did they actually have the capability to build it? suppose it's not
297.
by spydum 7y ago
Yes this is basically just client side authentication, easily tampered with.
298.
by spydum 7y ago
So basically gait analysis using WiFi power levels. At present requires making the user walk through a specific choke point to measure the gait, then can compare any other captured video to compare. Pretty neat!
299.
by spydum 7y ago
for what it's worth, signal strength is not usually a great indicator of distance. I would think some sort of beacon/latency measurement would be far more robust way to measure relative distance?
300.
by spydum 7y ago
how powerful is this LED? https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4870908/ seems to suggest you need several watts.. "snouf and colleagues reported that only 34% of an 850 nm continuous light source

More ›