Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
spydum
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
50 ms
·
541.
▲
by
spydum
9y ago
Echo chamber is alive and well!
542.
▲
by
spydum
9y ago
Can't wait for the peer to peer mobile malware!
543.
▲
by
spydum
9y ago
typically APIs can implement rate limits at various levels. Your IP may get throttled when they see it trip over an individual referrers quota.
544.
▲
by
spydum
9y ago
Indeed it doesn't take much imagination: chronic illness + prescriptions + high deductibles. Worse if multiple family members are sick (so many problems are inheritable and so on). Also worth mentioning, it's been broken for a whi
545.
▲
by
spydum
9y ago
Not sure what you mean about non-MS things using AD. sssd-ad is a fine client and uses kerberos, not NTLM.
546.
▲
by
spydum
9y ago
No, I am pretty sure this is just one of those "because you can". I suppose you COULD do this just to test out how Azure Stack would work on one of your existing azure templates/environments, before ponying up the $$ for the
547.
▲
by
spydum
9y ago
Untested backups are a problem, though.. Now automating Radom file restores and checksumming is a great idea...
548.
▲
by
spydum
9y ago
Ahhh, wonder if this is why Disney hasn't yet said what is replacing La Nouba in Orlando after its last show - they were waiting for the acquisition to clear.
549.
▲
by
spydum
9y ago
Just curious doesn't this further stratify the power classes? I can't make advances on someone who earns less than me now?
550.
▲
by
spydum
9y ago
Definitely a problem. People (incorrectly) compare vulnerability scanning with pen testing. Vuln scanning often is a component of a pen test, but we do a bad job explaining the distinction. Pen test should attempt to use the app(s), maybe t
551.
▲
by
spydum
9y ago
Its practically the only authentication/security mechanism available for Hadoop ecosystems?
552.
▲
by
spydum
9y ago
The concept which springs to mind is entrapment: if they convinced a guy to commit the crime, doesn't that qualify? I mean at that point he's working as an agent of law enforcement.
553.
▲
by
spydum
9y ago
It isn't stupid, it's cheap insurance that your competitor doesn't gain access to your data. Yes there are ways to make sure Amazon doesn't have easy access to it, while still hosting with them, but they are hard, and at
554.
▲
by
spydum
9y ago
I think you are simplifying the model a bit too far. Peak load is very likely not driven by dishwashers...
555.
▲
by
spydum
9y ago
Disagree on this one. I learned a ton working on my car as a kid. Though maybe we have differing values for <stupid amount>..
556.
▲
by
spydum
9y ago
Maybe they mean the inefficiency in the producer -> distributor-> retailer chain? What value does the middle guy add?
557.
▲
by
spydum
9y ago
Alexa?
558.
▲
by
spydum
9y ago
It's worse than just pricing.. I've had several taxis "pretend" their meter stopped working, to try to scam a cash ride.
559.
▲
by
spydum
9y ago
http://www.dc.state.fl.us/oth/inmates/wr.html
560.
▲
by
spydum
9y ago
https://i.imgur.com/zUl5AP8.jpg Measured 10.7cm: https://i.imgur.com/I637r2v.jpg What have you done to me!? Can't stop.
561.
▲
by
spydum
9y ago
I feel like they should be attached and not stacked? https://imgur.com/gallery/W13nR Fwiw: 10.3cm
562.
▲
by
spydum
9y ago
Problem is it's highly variable from engagement to engagement. A lot of the quality and poor performance could be bad process/management on the clients side (though a outsourcing company will profit hugely from).
563.
▲
by
spydum
9y ago
Agree -- that is a staggering figure and I'd love to know more about what they mean here.
564.
▲
by
spydum
9y ago
I can tell you most of the corporate policy says comply with all law enforcement requests when asked while traveling and report it to corporate security/legal.
565.
▲
by
spydum
9y ago
I think mostly it's people not being familiar with escape key. If you think about it, pretty rare you use Escape in anything other than a game..
566.
▲
by
spydum
9y ago
I don't disagree on this, but the mentality of pentesting (as I have seen it conducted) is wrong. Typically a firm wants to find a way in, and snatch the Crown Jewels. Once they achieve that, the level of effort goes way down, and they
567.
▲
by
spydum
9y ago
There are thousands of firms who will happily run a vuln scan or webapp crawler and send you a crappy canned report. There are less who can really perform a comprehensive test and document the hell out of it. I personally think pen testing
568.
▲
by
spydum
9y ago
Opportunity.
569.
▲
by
spydum
9y ago
You are right: checklist is not for education. If you don't know how to implement one of those items, you need to go learn. The checklist itself is still valuable, even to a seasoned security developer. A checklist will not teach a pil
570.
▲
by
spydum
9y ago
It is shocking to me to see how many developers giving this checklist a hard time. Every single item is solid advice and what I would have presumed sane people considered common sense/best practice. Just goes to show how bad a job we h
More ›