varunjain99

10 ms·

31.
Cisco to Acquire Cloud Security Vendor Lightspin(blogs.cisco.com)
2 points by varunjain99 4y ago|0 comments
32.
by varunjain99 4y ago
All the more reason to not rely on the cloud provider itself as your security vendor, I suppose...
33.
by varunjain99 4y ago
Fascinating! And even now we don't have a unified quantum + GR theory. I've always wondered if we had all of the notebooks and scratch work of the greats, could it inspire us to see something new?
34.
by varunjain99 4y ago
I like the idea of Beeper but two issues bug me - reliability (especially for iMessages) - having to give them custody of passwords like iCloud
35.
by varunjain99 4y ago
It will be an interesting race... I do think that it'll be easier to find vulnerabilities than to design systems that are provably secure. It's like evaluating a function f(x) vs finding the values of x for which f(x) = 0.
36.
Why building security products is hard(ventureinsecurity.net)
2 points by varunjain99 4y ago|0 comments
37.
by varunjain99 4y ago
Hm, I think the national security concerns are far heftier here than kids being influenced. ByteDance can be forced to do almost anything by the CCP. Sure, American tech companies might be forced to do things by the American govt but theore
38.
by varunjain99 4y ago
While the language of the bill is certainly way too broad and confusing, there's also a lot of fearmongering + exaggeration going on... E.g. I'm hearing folks talk about criminalizing VPN use... but the bill does lay out very hi
39.
by varunjain99 4y ago
Even with all these crazy CVEs / new attack techniques, basic misconfigurations are still the cause of most cloud breaches! I wonder why Bing's cloud configuration checker didn't catch this multi-tenancy misconfig. Or if they
40.
by varunjain99 4y ago
Pretty cool that all you need is the sitemap for the assitant to index the data! Will give this a try soon :)
41.
by varunjain99 4y ago
I guess we don't need to worry about authoritarian China stealing our data if we become authoritarian China!
42.
by varunjain99 4y ago
I've found Linkedin to work reasonably effectively for marketing / sales personas. In general I'd focus on the problem and not the solution you're proposing. In your initial out reach message and during the conversation.
43.
by varunjain99 4y ago
Rather surprising to me that it's taken this long to bring such a lawsuit... They literally don't put a headquarter to claim to avoid all regulations
44.
by varunjain99 4y ago
While it is significant, the article also does mention they've faced larger outflows in the past.
45.
Barney Frank and his role in the banking crisis(nytimes.com)
4 points by varunjain99 4y ago|0 comments
46.
by varunjain99 4y ago
Right now, we have misconfiguration (your cspm stuff) and identity features (e.g. privilege escalation / identity-based attack paths). We're launching in a week more identity-based features (i.e. an IAM evaluation / simulatio
47.
by varunjain99 4y ago
On our roadmap to add an integration with SecurityHub (e.g. piping ZeusCloud findings to it, if that's the workflow you prefer) More broadly though, we've found SecurityHub to be too disorganized - findings from Config, Guardduty,
48.
by varunjain99 4y ago
Thanks for the feedback! You're right that this is a bit of a false positive. For the sandbox, since we've hooked up 1 account, it flags such org trust relationships. I'd figured that it'd be good to showcase a 3rd party
49.
by varunjain99 4y ago
Yep! We want to democratize access to core preventative cloud security features that companies like Wiz offer. And as open source, we hope it can be more transparent, easier to try out, more configurable, and offer better shift left functio
50.
Show HN: ZeusCloud – an open source cloud security platform(github.com)
29 points by varunjain99 4y ago|10 comments
51.
by varunjain99 4y ago
Hey folks - sharing something we're in the early innings of developing. Hoping to get some feedback from the community! ZeusCloud is an open-source cloud security platform that thinks like an attacker! We’re hoping to give teams the on
52.
by varunjain99 4y ago
Not only do you have to worry about employees directly sharing data, but many companies are also just wrappers around GPT. Or they may use your data in the future to roll out new AI services. While this is not a new problem -- employees sha
53.
by varunjain99 4y ago
My understanding it goofys and s3fs support these types of operations? Still, a win for reliability / performance of whatever aws will be supporting
54.
by varunjain99 4y ago
There must be a way to trick it into turning against Xi... The censorship machine kept up w/ social media but will it with AI?
55.
by varunjain99 4y ago
It seems like whenever a bank fails, there are custom rules as to what happens made up on the fly. In this case, surprisingly, bondholders were wiped out. Does this have long-term implications on how bankers will act? If so, what?
56.
by varunjain99 4y ago
Interesting using observability frameworks for testing - sort of a 'shift-left observability' Are you able to use the same prod monitoring setup as integration test time? Or does it require any differences in setup?
57.
by varunjain99 4y ago
Or more like transferring ships while the ship goes down :)
58.
by varunjain99 4y ago
Well, a company doesn't exist to just be profitable. But to maximize profits (mostly). So it's certainly possible that cutting costs - even when profitable - can increase short-term and long-term profitability.
59.
by varunjain99 4y ago
I don't think this will be anywhere close to 2008. In many ways, SVB was a perfect storm of many factors. High uninsured deposits. Few, tech-savvy despositors. Bad investment choices w.r.t. interest rates. Makes sense why a run was pos
60.
by varunjain99 4y ago
Well it's doing 6 word palindromes - would it really be that challenging to get to 36? 216? I'm sure complexity grows non-linearly. But it's pretty impressive to me it can do multiple 6 word palindromes that are related to ea

More ›