tetha

92 ms·

871.
by tetha 5y ago
There is an implementation and a paper called peep, the network auralizer. I've been thinking of building something like this in rust or go as a learning project, but audio streaming and mixing is harder than I thought. If someone has
872.
by tetha 6y ago
In every commercial pentest I have been in, you have 1-2 usually senior employees on the blue team in the know. They have the job to stop employees from going to far on defense, as well as stop the pentesters from going too far. The rest of
873.
by tetha 6y ago
Additionally, well. the BKA, similar to the FBI, looks for security experts. However, since they would be employed by the BKA, they have to go through mandatory physical exams and drug tests. That's just dumb. I'd be able and inte
874.
by tetha 6y ago
I was thinking that when reading the exchanges. This is a really good interaction. Linus and the kernel have strong requirements for good reasons, and the rust teams are trying to address them in useful ways. Rust in the kernel is not a sim
875.
by tetha 6y ago
From our experience. 0.11 -> 0.12: We're not attempting. We're in the process of changing out config management anyway and we're unhappy with a bunch of decisions in that terraform stack, so it's a good point to get r
876.
by tetha 6y ago
A programming language professor working on interpreters once said - for short-living processes the most effective and efficient garbage processing might be... not to and terminating the process. The OS will collect all garbage at once very
877.
by tetha 6y ago
Also in my opinion, blue teaming is harder. Red team has to find one weakness to win. If blue team misses any system, vulnerability, process, anything, they are in trouble against the right attackers. This can be seen by how many automated
878.
by tetha 6y ago
> Linux somewhat supports /dev/tcp/HOSTNAME/PORT (technically that's application level in bash so not everywhere), and im sure there's daemons you could run to automount things on the fly. Do note that this
879.
by tetha 6y ago
Interestingly, this is water on mills we are currently thinking about. We're in the process of scaling up security and compliance procedures, so we have a lot of things on the table, like segregation of duties, privileged access workst
880.
by tetha 6y ago
> If you use cloud services that offer automated builds you can push the trust onto the provider by building things in a standard (docker/ami) image with scripts in the same repository as the code, cloned directly to the build envi
881.
by tetha 6y ago
This goes into the same vein I was going to point out. Most uncontrolled space usage comes from logs, users doing user things, or something like build servers just eating temporary and caching storage for lunch. Databases also tend to have
882.
by tetha 6y ago
At work, there are several layers. As an immediate plan, the 2-3 business critical systems are replicating their primary storages to systems in a different datacenter. This allows us to kick off the configuration management in a disaster, a
883.
by tetha 6y ago
> I imagine an in-house team is being paid a salary or a retainer, in which case their work hours are moot I would not call it moot, but opportunity cost - and opportunity cost is very hard to measure. Technical debt is similar. If you h
884.
by tetha 6y ago
Hm, some of the bug reports report unencrypted databases, some report encrypted databases. That suggests something is going very wrong with their sqlcipher+encryption handling/encryption parameter handling/key handling. Those are
885.
by tetha 6y ago
Currently, the automated parts are on terraform/chef and there is a bunch of manually setup stuff in the company.
886.
by tetha 6y ago
We're pulling the trigger tomorrow to migrate the first productive system to nomad, and launch 1-2 new products on nomad first. It's quite exciting. We chose nomad there, because it's a business requirement to be able to self
887.
by tetha 6y ago
To me, there is also the question of change frequency. Of course, it's a guesstimate all the time, but things that look to be rarely-changing (and usually ends up being high-impact) deserve over-documentation. Something like our AWS VP
888.
by tetha 6y ago
> no backdoor access for federal agencies Tragically, I have to strongly doubt this is secure against the almighty warrant-backdoor for physical security. And once they have their hands on the bowl, the content is freely accessible.
889.
by tetha 6y ago
Hm, currently, this sets of marketing alert bells. It looks pretty, it has good points. I'd like to have some structured approaches to some internal concerns we have. However, there seem to be zero links to tools and approaches to actu
890.
by tetha 6y ago
Or you end up with java-like names once you forgot the option object. toReabableNumber, toReadableNumberWithBase, toReadableNumberWithBaseAndPrecision, .... or I guess toReabableNumberWithOptions.
891.
by tetha 6y ago
I've seen this question a few times and have been looking for hard sells, especially because I spent quite a few workdays during summer in a hammock without a second screen. I've found about two hard sells so far: Online presentat
892.
by tetha 6y ago
Self-Hosting is a similar tradeoff to running your own hardware, imo. You can increase control and overall cost effectiveness for additional scaling, but these choices have a certain base cost you can't reduce. Thus, they only work bey
893.
by tetha 6y ago
Curious, I learned something. > You're stuck in the early 2010s. For you, music's been all downhill since Orden Ogan made The Things We Believe In. Now I wonder if this is because my account is old, or if I really listen to tha
894.
by tetha 6y ago
Hm, we have multiple layers of protection of different kinds there, since defense should always be in depth. First off, I'm pushing the principle that secrets should only be issued, created, stored and distributed by the secret managem
895.
by tetha 6y ago
I'd say that depends on the retention requirements of the recording folder and the public folder. If you symlink "./public/recording" to "./recording", the public file only exists as long as the origi
896.
by tetha 6y ago
Since I got a bit engaged there, this has led to my lesson of rust today. Or, the first one: There is the "rust" extension for vscode. This extension can be configured to use rust-analyzer as it's backend and I figured that w
897.
by tetha 6y ago
I'm currently working myself into rust, and yes, it is certainly a mighty inconvenience. Probably of my setup, I can't tell yet. In java with a good IDE, you can ^Space yourself through a lot of problems without knowing the librar
898.
by tetha 6y ago
This becomes even more complex in the case of java, at least I'm the most familiar with java. And yes, at work, we are distributing jar/war-files built on linux to linux and windows targets, and back in the day to solaris as well.
899.
by tetha 6y ago
> All HTTPS does is ensure security between your client and the server with the private key of the certificate. Just for completeness, HTTPs does not necessarily guarantee you are connected to the right server. This depends on the CAs yo
900.
by tetha 6y ago
To me, python deployments are painless, as long as you can stick to pure dependencies and possibly wheels. Once a pip install needs to start compiling C, things do go way south very quickly. At that point you can install the union of all co

More ›