staticassertion

52 ms·

1. 3271.▲
   by staticassertion 6y ago

   Sure, long term maybe you have to pivot or whatever. But companies spend millions on these multicore licenses today .
2. 3272.▲
   by staticassertion 6y ago

   If you can execute code on the host I don't think this attack is necessary, unless maybe you disable execution entirely for unsigned programs. The attacker can drop/ exec files as they please, regardless of whether they're si
3. 3273.▲
   by staticassertion 6y ago

   > That's a licensing hack: since most enterprise software is paid per-core. Shit. That's actually awesome and could easily pay for itself.
4. 3274.▲
   by staticassertion 6y ago

   > Google doesn't monetize developing Blink/Chromium. I disagree here. Of course they do. They could not monetize Chrome successfully without: a) Having huge amounts of control over the direction of the web b) Having a best-in-c
5. 3275.▲
   by staticassertion 6y ago

   Scathing. Well written. Extremely hard to argue with. GCP will fail, I think everyone knows it, and even if they don't, they fear it .
6. 3276.▲
   by staticassertion 6y ago

   I feel very similarly. This isn't just boneheaded project management, that would be simply killing great projects. Firing huge amounts of top tier talent is absolutely another story altogether.
7. 3277.▲
   by staticassertion 6y ago

   Not that monetizable? See my initial post? Google absolutely monetizes the hell out of Chrome, in areas they compete with MS (O365? GSuite?).
8. 3278.▲
   by staticassertion 6y ago

   > They've had that advantage since Chrome came out. Didn't stop them from losing almost all their market share. Absolutely. But it certainly is a huge benefit to them. > Chrome has been technologically ahead of IE since it c
9. 3279.▲
   by staticassertion 6y ago

   This is a really weak response. The post announcing the feature makes an extremely strong case for why this is a good thing.
10. 3280.▲
    by staticassertion 6y ago

    > Other browsers have to put in significant effort just to play catch up and can't really offer any new renderer/js feature without Chrome's blessing. Microsoft still runs the dominant operating system! They have a huge op
11. 3281.▲
    by staticassertion 6y ago

    Sure. At the same time, is it really smart for them to just completely abandon the idea of independence? There's a lot that a browser can do for a company. Google has built GSuite and ChromeOS around Chrome - the integration with the
12. 3282.▲
    by staticassertion 6y ago

    I don't believe this is an attack. It hides the full address, but you can hover over it to see the whole thing, or even enable full addresses easily. I believe this is legitimately done to improve UX for users who may be phished. Tying
13. 3283.▲
    by staticassertion 6y ago

    Sure. We are always germy. But if you feel explicitly under the weather and you have to go out to the store to pick up something, it would be great if you wore a mask - even if it isn't covid times. I've never done that. I've
14. 3284.▲
    by staticassertion 6y ago

    It sounds like the build tooling was forcing them to distribute a dependency across every lambda build, which was forcing a redeploy of all services, which is a code issue that maybe looks like a tooling issue. Just going off of context. Re
15. 3285.▲
    by staticassertion 6y ago

    > 23 microservices he had carved up out of a Java Spring app. A small change anywhere in the code meant he had to redeploy all of it, Those aren't microservices, by definition.
16. 3286.▲
    by staticassertion 6y ago

    Hi, I downvoted you. Normally I don't bother explaining why a low content post was downvoted, but whatever, I'm here. 1. Even if you were right it doesn't matter. Coming to the comments to split semantics while obviously miss
17. 3287.▲
    by staticassertion 6y ago

    Honestly, no matter how you interpret the sentence, the article is so blatantly not about whether you thought the NSA was hacking companies, it was why the security community failed to concretely detect it. All of the talk of how some peo
18. 3288.▲
    by staticassertion 6y ago

    Not really many relevant comments in this thread. Everyone seems to have read the first sentence (if even), interpreted it as 'why did no one think the NSA was hacking?', and responded. It's a shame, this is a great piece, I
19. 3289.▲
    by staticassertion 6y ago

    It's a contract for a few years. They'll probably re-up it, the question is for how much money.
20. 3290.▲
    by staticassertion 6y ago

    I mean that your statement implies that people are advising to perform expensive work without considering the cost, specifically the cost in terms of time, and that's not true. No one has said that. The article addresses cost in a numb
21. 3291.▲
    by staticassertion 6y ago

    First off, I upvoted you, and I wish people wouldn't just downvote. That said, > Half of those are classes of bugs that would probably still exist with the usage of Rust, that is, they're simply a diversion from what you expec
22. 3292.▲
    by staticassertion 6y ago

    In fact it's not science at all. I didn't claim it was science, I claimed it was so obvious and intuitive that science was unnecessary. > without any memory safety bug at all. Most QEMU escapes I have seen are memory safety iss
23. 3293.▲
    by staticassertion 6y ago

    Honestly, I think anyone who has written Rust, even low level Rust, intuitively understands that it wouldn't even be close. It's not really worth measuring - like measuring C vs Java, no one really needs to do it because it's
24. 3294.▲
    by staticassertion 6y ago

    Rewriting the device drivers would be huge. Having been tasked with "Make a QEMU environment safe against advanced attackers" memory safety issues in device drivers were by far the most concerning issue, and the hardest to mitig
25. 3295.▲
    by staticassertion 6y ago

    Damn, that sucks. I use GSuite to SSO to AWS though.
26. 3296.▲
    by staticassertion 6y ago

    FWIW this is why it's a good idea to have two MFA mechanisms. If you can afford it I recommend getting 2 hardware tokens, and storing them separately (you can leave one in your computer, hard to lose).
27. 3297.▲
    by staticassertion 6y ago

    What does it mean to be the 'Project Editor' of C?
28. 3298.▲
    by staticassertion 6y ago

    The NSA invests heavily in its defensive role, providing guidance and awareness training both to the US privately and globally through open recommendations. It doesn't matter. We've invested so heavily in offense that we can tell
29. 3299.▲
    by staticassertion 6y ago

    Pulumi probably has a better story around multicloud, but yes, it does seem like it's going to be difficult to differentiate.
30. 3300.▲
    by staticassertion 6y ago

    Sure, CF is garbage, I won't try to argue otherwise. There's this though: https://www.hashicorp.com/blog/cdk-for-terraform-enabling-py...