twunde

15 ms·

121.
by twunde 5y ago
Regarding your questions, they make sense in the context of modern software built in the last 5 years. However, most large enterprises have a long tail of legacy applications built years ago. These may be inherited from a combination of acq
122.
by twunde 5y ago
If the company is in healthcare or finance, yes. Otherwise the typical answer is no. Most companies just load up on cyber insurance and call it a day. That said, reputational concern, is a big thing for companies. Take Dropbox for example.
123.
by twunde 5y ago
Basically PDM supports project-specific python package installs. This is different from how python has traditionally worked where it has installed globally for the user running it. Why is this important? Because with virtual environments it
124.
by twunde 5y ago
If you are in a regulated environment, it's likely because of either compliance or security concerns (I'll note that while Slack has HIPAA-compliant plastered over its website, the last time I checked only the Slack Enterprise was
125.
by twunde 5y ago
The reason why the focus was on the first one is because that was the easiest and fastest to do (You only need local officials to sign off on it because its a temporary order and its also the simplest). 2 and 3 need the federal government t
126.
by twunde 5y ago
While it can be put into a work contract, its never been in any contract of mine (I assume it is in contracts for union employees and for some executives). Many states do require that companies above a certain number of employees have to gi
127.
by twunde 5y ago
For anyone who wants to learn what a good authorization system looks like take a look at Tailscale's recent blog post: https://tailscale.com/blog/rbac-like-it-was-meant-to-be/ Really, if you're going to
128.
by twunde 5y ago
I haven't used Five9 for about 5 years, but even then their tech seemed old. The new thing then was starting to add multi/omni-channel support ie adding chat and maybe email. My guess is that the integration will likely be adding
129.
by twunde 5y ago
Lastweekinaws just published an article about whether you should get a certificate: https://www.lastweekinaws.com/blog/is-aws-certification-wort... While this is focused on AWS, the same holds true for Azure and GCE. A
130.
by twunde 5y ago
To be fair about this page, this was used to migrate versions of postgres __prior__ to the introduction of logical replication. Logical replication makes this significantly easier (ie you no longer need the triggers)
131.
by twunde 5y ago
Most engineering internships at this point are paid and most people on HN are working for companies that do paid internships. Unpaid internships tend to be more prevalent in the arts and at small companies. Anecdotally I distinctly remember
132.
by twunde 5y ago
So a while back Gene Kim and a few others wrote up the Devops Audit Defense Kit, which talks about this exact scenario (There's a link in https://itrevolution.com/devops-audit-defense-toolkit/ , then see page 12).
133.
by twunde 6y ago
FYI, for anyone interested Pettus does consulting work as the founder of https://pgexperts.com/ . Highly recommend working with him if you need a postgres DBA.
134.
by twunde 6y ago
One thing that's been interesting is that there's been a noticeable dichotomy in how people and companies have been affected. Those who are lower-class and potentially worked in retail or restaurants have been slammed economically
135.
by twunde 6y ago
To add on to this, this results in an odd job market where demand for COBOL programmers is pretty low most of the time since there isn't a ton of work, but when a company does need to hire COBOL programmers its much more difficult to f
136.
by twunde 6y ago
This may have been true in the past, however per https://www.shopify.com/security they are SOC2-certified (SOC2 is significantly more common in North America), they are certainly PCI Level 1, and have GDPR/CCPA complia
137.
by twunde 6y ago
This is a common requirement for security-conscious organizations, especially those with HIPAA or PCI requirements. For shopify, this likely was originally created as a customer requirement, so that clients could monitor their staff. The ty
138.
by twunde 6y ago
From what I've heard from ex-FB employees, they are told repeatedly during onboarding that snooping for personal reasons is a first-offensive firable offense, to the point that engineers often won't try to look up information even
139.
by twunde 6y ago
TX is __slightly__ different in that its fully deregulated and there's simply more knowledge about REPs/ESCOs and their pricing (because they customers HAVE to choose a REP). Also in what other state do you see billboard ads for R
140.
by twunde 6y ago
Small quibble here. I'm pretty sure that most regulated companies do NOT own their own generating plants, since for a long time they were legally not allowed to be in both the distribution business and the generator business. I _think_
141.
by twunde 6y ago
Regulated suppliers operate somewhat differently than deregulated suppliers. 1. Regulated suppliers have rules around how much a rate can change, and those rate changes have to be approved by their respective PUC. This limits the sticker sh
142.
by twunde 6y ago
Not directly. In Texas and other deregulated markets, you can be on either a fixed rate for n months or on a variable rate. If you're on a variable rate, the rate will be much higher than normal for the next few months. If you're
143.
by twunde 6y ago
As a former PHPer myself, I agree with you on all counts. Python's tooling, especially around package management is _terrible_, hand's down the worst of any major dynamic language, even comparing where they were 5 years ago to whe
144.
by twunde 6y ago
1. There's a good chance that the malware has updated your browsers preferences, especially if you're using Chrome (which syncs preferences/profiles). To test this, you can try using a different browser and see if they have t
145.
by twunde 6y ago
For those interested in understanding the security of Chrome extensions, duo introduced CRXcavator ( https://crxcavator.io/ ) a while back, which does some risk scoring around permissions. It is chrome-only, and it doesn&#x27
146.
by twunde 6y ago
Neverware's original business/idea was in enabling massive reuse of older, slower computers in the education space by making them thin client devices if I remember correctly (back when it was 5 guys working out of General Assembly
147.
by twunde 6y ago
It was almost certainly the state public utilities commission PUC, which depending on the state may have a different acronym (PSC is also common). These regulate telecom, water, and energy companies including ESCOs (companies that in theory
148.
by twunde 6y ago
While most mid to large size enterprizes are likely running Active Directory, it makes sense to set up SAML as GSuite, LDAP and Active Directory all support SAML workflows including Just In Time (JIT) provisioning.
149.
by twunde 6y ago
Sorry, I should have edited. This is why the article is NOT a HIPAA violation. Damn you slack distractions
150.
by twunde 6y ago
Why is this not a HIPAA violation? HIPAA is a US law that's focused on protecting the privacy of a person's medical history. In SQL terms you can't JOIN a person's identity with their medical history (unless explicitly a

More ›