staticassertion

289 ms·

1. 3361.▲
   by staticassertion 6y ago

   I'd suggest reaching out to AWS about this. Explain the situation. AWS has a number of programs for startups that you may be able to apply for, including one that includes 100k worth of credits. Also, if you can't afford to scale
2. 3362.▲
   by staticassertion 6y ago

   Totally agreed. I pay for Dropbox myself, but I don't know that I've shared a file with it in a decade or so. I just use Paper, which they continue to fail to market, despite it being absolutely amazing.
3. 3363.▲
   by staticassertion 6y ago

   I believe APP Suffers from the exact same issue, though APP is something I recently enabled anyway. I don't know of a way, even with full gsuite enterprise policy access, to prevent an attack where the attacker has an active session a
4. 3364.▲
   by staticassertion 6y ago

   I actually think their existing policy is not so bad at all, but it should notify you. So: 1. Changing recovery emails should require 2FA 2. Changing any 2FA policy should email your recovery email It does, after all, still require a pass
5. 3365.▲
   by staticassertion 6y ago

   I think the idea is that you want to be able to look back not just at the places you've been but also at yourself. I think it makes sense. Seeing pictures of myself as a teenager certainly has a different impact than seeing pictures of
6. 3366.▲
   by staticassertion 6y ago

   Redis?
7. 3367.▲
   by staticassertion 6y ago

   I think the problem is that we have a very weak understanding of "better" or "worse" or "use cases". What would a better database look like? Maybe it's faster, or more stable, etc. But if what makes it bet
8. 3368.▲
   by staticassertion 6y ago

   Yes, I only addressed the part I agreed with. I'm not the author or trying to defend the entire article, just saying that I strongly agree with entrenched technologies being entrenched for very weak reasons. Do I think relational datab
9. 3369.▲
   by staticassertion 6y ago

   I didn't say it was.
10. 3370.▲
    by staticassertion 6y ago

    Is this really so hard to believe? Lots of things that are "Default" are just that way for historic purposes. One example, and I say this as someone who's generally a fan of the language, would be Java - it's taught in s
11. 3371.▲
    by staticassertion 6y ago

    I don't totally agree about its strengths not being relevant. Memory safety is an extremely low bar that the web has generally managed to meet, but Rust has a lot of value elsewhere. The author talks about significant performance impro
12. 3372.▲
    by staticassertion 6y ago

    I often write my code to allocate at first just to get a feel for the API and business logic and then go through it later to remove them. Given that all of those frameworks are still fairly new it wouldn't shock me to hear that that&#x
13. 3373.▲
    by staticassertion 6y ago

    What does overkill mean? I think unless shell history search is a "solved problem", which I don't believe is possible, there isn't such a thing as overkill.
14. 3374.▲
    by staticassertion 6y ago

    Feels like you've just described every single bug ever.
15. 3375.▲
    by staticassertion 6y ago

    To expand on other answers HA = "Always available". Answers may be stale, but you'll always get an answers. CP = "Always consistent". You may not always get an answer, but if you do, it's consistent. You can&#x
16. 3376.▲
    by staticassertion 6y ago

    From the reddit thread I linked elsewhere ( https://www.reddit.com/r/netsec/comments/hkg8co/10_years_of_... ): > There is no restriction or prohibition, correct. In fact, we are far more lenient than ot
17. 3377.▲
    by staticassertion 6y ago

    If I had to deal with constantly having my name dragged over something I wasn't doing, I would probably be pretty upset about it as well. Further, the Linux Kernel community tends to have... some negative communication patterns. But th
18. 3378.▲
    by staticassertion 6y ago

    https://www.reddit.com/r/netsec/comments/hkg8co/10_years_of_... Brad goes into this here. Grsecurity has written extensively about this. Read the links to their site where they go even further into detai
19. 3379.▲
    by staticassertion 6y ago

    Leaving them with hundreds of millions of dollars a year?
20. 3380.▲
    by staticassertion 6y ago

    Oh duh, of course. Yes please confirm! Super eager to hear if this is the case.
21. 3381.▲
    by staticassertion 6y ago

    I would assume the agent caches the key for signing. Would someone please confirm this? If it did require another key press that would be pretty huge.
22. 3382.▲
    by staticassertion 6y ago

    Is there evidence of this? It seems like there are two views - that having an "open market of ideas" to debate things is how we should move forward, or that deplatforming is the way to move forward.
23. 3383.▲
    by staticassertion 6y ago

    builds for my 10kLOC project, which is a workspace. These are the commands run from the root of the workspace. We could clean up some deps, we use quite a few crates, and we use a number of proc macros as well. In general I'd say we&#x
24. 3384.▲
    by staticassertion 6y ago

    The problem with your analogy is that it downplays certain aspects and plays up others. Attacks on HTTP sites are known threats that we have evidence for, they aren't ridiculous or unheard of. The defense is not "everyone where a
25. 3385.▲
    by staticassertion 6y ago

    I don't really understand your point. You're upset because I am advocating for your users despite not being one? I... don't care at all. It isn't my business so I've done nothing to reach out to your users or interf
26. 3386.▲
    by staticassertion 6y ago

    Lots of startups need to worry about scaling pretty early on. I see the HN attitude a lot of "You aren't Google so don't bother with scale until later" but a lot of interesting problems require scale extremely early.
27. 3387.▲
    by staticassertion 6y ago

    You're describing a completely different attack vector, which is the entire point - to push attackers to different attacks. if we eliminate HTTP, we can focus more effort on the attacks you're describing. Regardless of the content
28. 3388.▲
    by staticassertion 6y ago

    What if I visit your roof repair guy's site and content is injected, informing me that they now take payments online? Or that I can download their special Roof Repair App to manage my bookings? Or it contains an exploit payload? It is
29. 3389.▲
    by staticassertion 6y ago

    > It's the one being discussed in this sub-thread in case you missed it and assumed the normal HN business context. I did miss that but I did not assume a business context. > The burden is real and completely unecessary for perso
30. 3390.▲
    by staticassertion 6y ago

    Responsibilities have changed a bit. If you're going to host a website you are going to have to put a modicum of effort into ensuring that you are not harming others by doing so.