vngzs

25 ms·

1. 211.▲
   by vngzs 6y ago

   Paxos Trust Company | Security & Site Reliability Engineer (SSRE) | New York City | Remote or NYC area | Full Time | https://www.paxos.com/careers/role/?gh_jid=4883718002 Paxos enables enterprises to integrate
2. 212.▲
   by vngzs 6y ago

   I realize I'm a bit late to the party, but GL-iNet does this. They run OpenWRT, too! PoE support can be hit or miss, but being able to truly own my devices without compromising on features is amazing. You probably want something like [
3. 213.▲
   by vngzs 6y ago

   I'd buy one if they had high DPI panels. Even 16:10 would be a significant improvement; 1080 vertical pixels feels awfully cramped these days.
4. 214.▲
   by vngzs 6y ago

   Hardware keys. If you can't use those, HOTP (push notification-based - OTP with an HMAC and a counter).
5. 215.▲
   by vngzs 6y ago

   I believed this, but watching the movie Parasite changed my perspective on personal recommendations more than a little bit.
6. 216.▲
   by vngzs 6y ago

   Maybe if you're only counting brain cycles saved, but brain cycles of pure joy and amazement are worth more than ones spent doing pointless tasks.
7. 217.▲
   by vngzs 6y ago

   I see the ideological foundation for a theoretical 51% attack more aligned with causing mass disruption & chaos than some kind of financial gain. Yes, it would likely be detected. But it would undermine BTC, lots of people would lose lo
8. 218.▲
   by vngzs 6y ago

   You have the right idea, but an unhelpful perspective. Certainly not everyone who isn't a software developer is a "phony scientist!" If you'd like to convince scientists to come around to your line of thinking, explain t
9. 219.▲
   by vngzs 6y ago

   Incognito mode includes the following text on the new tab screen: > Now you can browse privately, and other people who use this device won't see your activity. However, downloads and bookmarks will be saved. > Chrome won't s
10. 220.▲
    by vngzs 6y ago

    For more on what's wrong with this, see gwern's "In Defense of Inclusionism" [0], an essay on this topic. [0]: https://www.gwern.net/In-Defense-Of-Inclusionism
11. 221.▲
    by vngzs 6y ago

    > so much data passes through at a time can they even isolate particular data let alone encrypted data. They can't. That's why they call it "bulk collection." https://en.wikipedia.org/wiki/MUSCULA
12. 222.▲
    by vngzs 6y ago

    I suppose it should be clear from context that I meant online, but I'd like to offer some food for thought around offline trust as well. In 2009, a man arrived at the world-famous Sun Studio in Memphis, TN for a private tour. He told D
13. 223.▲
    by vngzs 6y ago

    Trust is a difficult problem. Geopolitical entities have been using the Internet to undermine trust in "the West," broadly speaking, for at least half a decade. Warfare has always included disinformation campaigns (they called it
14. 224.▲
    by vngzs 6y ago

    I haven't actually tried this, but based on my understanding of the MS-DOS memory model it should read the contents of memory at address 0.
15. 225.▲
    by vngzs 6y ago

    I think a healthy degree of skepticism is warranted with all the bogus 5G news about. But the author of the cited study, Professor John Frank[0], has past research in occupational and environmental epidemiology. That sounds like exactly the
16. 226.▲
    by vngzs 6y ago

    You're right that it's not the way to divulge important information, but (barring more reputable reports) I'm inclined to believe him. It's a somewhat regular occurrence for employees to comment on these things on HN, ev
17. 227.▲
    by vngzs 6y ago

    The title has been edited at least twice since it was published. The original title: > Russian Software Company May Be Entry Point for Huge U.S. Hack Which was changed to: > Russian-Owned Software Company May Be Entry Point for Huge U
18. 228.▲
    by vngzs 6y ago

    Thanks for the reply! With that CrowdStrike founder Dmitri Alperovitch quote in the article > Compromising and introducing a back door into a build environment such as TeamCity is the holy grail of a supply chain hack. It can allow an ad
19. 229.▲
    by vngzs 6y ago

    Reading between the lines, does this mean the attack may have simply been an on-prem install that was compromised, rather than every TeamCity install ever, or JetBrains' official SaaS version? Any developer tools company worth their sa
20. 230.▲
    by vngzs 6y ago

    I suppose it's probably possible for this thing to download and run some malware, but the VirusTotal results are clean[0]. [0]: https://www.virustotal.com/gui/url/826fca3edb8d883bb9710cabb...
21. 231.▲
    by vngzs 6y ago

    I share your concerns. I am of the opinion that we shouldn't be using machine learning algorithms to make decisions of consequence in people's lives without filtering those decisions through human operators. You can use machine le
22. 232.▲
    by vngzs 6y ago

    If you want to write free software for money, a good choice would be working for a company like Red Hat (though they are gradually getting IBM-ified as time goes on). If you work for an employer whose income depends on the existence of high
23. 233.▲
    by vngzs 6y ago

    Does anyone here actually use tig to interact with Git repositories, rather than simply as a repository viewer? I've been a user for 8 years, but I only use it for viewing. Editing a repository remains a task exclusively for the CLI (o
24. 234.▲
    by vngzs 6y ago

    I love i3, but I dislike manually positioning windows. I much prefer dwm[0], which will do window arrangements for you. The tagging features are also much more robust than virtual desktops ("mail folders" vs "gmail tags"
25. 235.▲
    by vngzs 6y ago

    Since this is a supply chain attack on software downloads, I think it's interesting to consider the implications for the security posture of a cloud-native organization. While cloud-native is commonly recognized as less secure (because
26. 236.▲
    by vngzs 6y ago

    NIST no longer suggests such a rotation policy. They have accepted that it weakens security. Anecdotally, colleagues have successfully lobbied to drop (or not enforce) password expiration policies from other government bodies on the strengt
27. 237.▲
    by vngzs 6y ago

    I'll name some more, with the same disclaimer: Confluent (Kafka), Redis Labs, Eucalyptus Systems Inc. (AWS clone, acquired by HP), Instructure (Canvas)
28. 238.▲
    by vngzs 6y ago

    Paxos Trust Company | Security & Site Reliability Engineer (SSRE) | New York City | Remote or NYC area | Full Time | https://www.paxos.com/careers/role/?gh_jid=4883718002 Paxos enables enterprises to integrate
29. 239.▲
    by vngzs 6y ago

    FIPS 140-2 level 3 128GB flash drives are available for $223.39[0]. I don't know why you'd pay $1,665. [0]: https://www.cdw.com/product/kingston-datatraveler-4000-g2-ma...
30. 240.▲
    by vngzs 6y ago

    Thanks for pointing this out - here's the link, for anyone interested: https://github.com/jarun/nnn/wiki/Basic-use-cases#configure-...