spydum

15 ms·

151.
by spydum 4y ago
Probably a text to speech fail (edit: errr speech to text). Bot or robot == butter robot
152.
by spydum 4y ago
omg yes. state the underlying goal to achieve and detail how you intend to go about it and seek help. i dont know how many problems i helped solve only to find out the underlying problem was already solved in another way. ive learned to ask
153.
by spydum 4y ago
is this not a pavlonian response? i mean, its cool if it works, but makes me wonder if you are just training the behavior
154.
by spydum 4y ago
if the coins are stolen or lost in some way, they cant be liquidated and thus shouldnt devalue the coin right? could reducing the availability actually be a way of preserving the market?
155.
by spydum 4y ago
not a ton of market for that. and it changes the risk nature of their own facilities. already plenty of hyperscale datacenters with space to lease. what advantage does meta offer? surely they wont beat on price.
156.
by spydum 4y ago
On one hand I wish there was more, on the other I think it would have been too much? It's brilliant for sure. I love that these guys have been making this stuff since the ASCII scene (for those unaware lot of cool procedural bits like
157.
by spydum 4y ago
i mean ubers former CISO did just get convicted, so it could be starting? (granted his scenario seems more about intent to hide a breach vs ineptitude)
158.
by spydum 4y ago
Just because the company has money, doesn't mean the department or line of business does. I didn't read the report but wouldn't surprise me if this was some acquisition infra (it would explain why they hired a moving company)
159.
by spydum 4y ago
for sure; the real failure in this setup was again, having a single credential with access to so many other critical secrets. I have yet to see a secret vault that had good analytics for this kind of thing - it assumes you have designed you
160.
by spydum 4y ago
the cute answer to all this is always: how do people think your service accesses the secret vault? its anlther credential. the real issues are tougher, like why does this one cred have access to all these other creds, and how or if they wer
161.
by spydum 4y ago
here's jpmorgans own api: https://www.jpmorgan.com/solutions/treasury-payments/insight... and the developer portal: https://developer.jpmorgan.com/ Other big corp banks have similars. A lot o
162.
by spydum 4y ago
I suspect the reason is far more complicated: customers were also asking to defer sales starting in Q1 2020 due to pandemic complexities and fears. A lot of big corps will hold up delivery of HW and purchases to to align with their finance
163.
by spydum 4y ago
so, treasury management systems exist for big corps (FIS, FIServe, GTreasury, etc), and some banks do have legit apis for cash flow mgmt (payments transfers etc). i think problem is most dont want the hassle of supporting it for consumers.
164.
by spydum 4y ago
If there are no incidents to respond to, we have to cut the secops team. Ohhhhhh.
165.
by spydum 4y ago
1:20 is better SNR than most interactions...
166.
by spydum 4y ago
Government controlled media and censorship, what could possibly go wrong?
167.
by spydum 4y ago
$79 would not have gotten you any of those premium content providers. That collection of content would have easily hit 120+/month, plus a bunch of bs service charges for devices. They also did not give you the ability to drop the conte
168.
by spydum 4y ago
I think it's cute he assumed he got a bad sensor replaced.. following the story, it's more probable the shop replaced two good sensors and never the actual bad one until the end. Seems far more reasonable explanation of the whole
169.
by spydum 4y ago
Almost all schools have a acceptable use waiver the kids (and maybe parents) have to sign to use Internet and it calls out monitoring of internet etc. It's just nobody reads those terms.
170.
by spydum 4y ago
If you don't use vpc endpoints, usually you end up having to open network traffic to all of a particular aws service, not just yours. This means as an attacker, I can also go spin up (s3/lambda/etc) and if your app was vulner
171.
by spydum 4y ago
What the heck is Willis Tower Watson??
172.
by spydum 4y ago
real question: we are assuming the value of the gold is market price by weight, but would people really melt this down? i think the value of the coins could be quite different than just the materials they are made of (maybe that sets the fl
173.
by spydum 4y ago
used to build and work in a couple DCs in the 2000 era.. can confirm the battery room was legit the most terrifying room we had (multistory buildings, so they were inside). something about the stored potential energy and risk of physical ha
174.
by spydum 4y ago
I'm pretty sure all the big box sporting retailers sell based off total length though? I thought his point was total length is wrong, it's shaft length which matters. Paddle shape and length are independent and surprisingly uncorr
175.
by spydum 4y ago
For what it's worth, opnsense has suratica as a service, I've spent a good amount of time configuring it and setting up alerting on drops. The only thing it's ever alerted me to is a few malicious domains (malvertising) and m
176.
by spydum 4y ago
check out managed instances like azure sentinel
177.
by spydum 4y ago
Not IPS, those tools don't block access.
178.
by spydum 4y ago
wondering the same, maybe simple word play on ethernet.. who knows what floats about in the brain of a developer! naming vars is hard dangerous work in my experience!
179.
by spydum 4y ago
I was watching this just because it's fun to see bad implementations. I was totally caught offguard when the vendor presented their own view of the problem! Did not see that coming. Makes for a more interesting presentation IMHO (both
180.
by spydum 4y ago
Actually the AES encryption they implemented is ALSO broken. The premium instances of AES-256, "512" and "1024" were totally broken and based on zero-content blocks, the security gets reduced to 128-bit in all scenarios.

More ›