x0x0

67 ms·

961.
by x0x0 5y ago
Amazon has been selling lead toys for years https://www.theguardian.com/technology/2019/aug/23/amazon-pr... And school supplies for kids with lead https://www.atg.wa.gov/news/news-re
962.
by x0x0 5y ago
I don't know why you invested in the belief it's just impossible to have a tight turnaround on review (it isn't), but let's just start with this: "frontline staff like in Fire Service were working non stop". T
963.
by x0x0 5y ago
There was no rush to get parklet rules out in March 2020: there were no lives at risk here. The "rapid changes" could have been delayed by a week or so to think through them and the city wouldn't be screwing restaurant owner
964.
by x0x0 5y ago
Options: probably spend a day or two thinking through "what if these become permanent" before incentivizing restaurants to spend what is easily low six figures. Now, there aren't good options -- blocking sight lines in inters
965.
by x0x0 5y ago
This sounds more and more like an existential threat to Intel. I thought the industry's consensus was a key component of Intel's dominance is they leveraged the best fab tech in the world, made possible by huge volume. That'
966.
by x0x0 5y ago
You must audit every single line of code for every piece of software you use.
967.
by x0x0 5y ago
They wrote code essentially willing to run exec on any string passed to it, enabled this feature by default, and then didn't loudly warn people that any string passed to log4j must be trusted. None of this is competent work.
968.
by x0x0 5y ago
And enabled by default. That's the most mind-blowing bit of this feature. The backcompat argument is a deflection for shipping a time bomb into people's codebases.
969.
by x0x0 5y ago
with this capability enabled by default
970.
by x0x0 5y ago
No, the log4j devs really seem to have thought it was a good idea to have this (1) built, and (2) enabled by default. One of them was on twitter whinging that they needed it for backcompat. I just can't.
971.
by x0x0 5y ago
More amazingly, this is intentional. If you didn't want log4j to trivially exec remote code, you were expected to add a properties file telling it not to.
972.
by x0x0 5y ago
We can't reliably get people to vaccinate, which reduces the risk of severe hospitalization or death orders of magnitude more than losing weight.
973.
by x0x0 5y ago
> In this case the only way you could be compliant This is overstated. Yes, consent must be clear. But it doesn't have to be a popup; merely clear. And you would probably be legal to require users to pay more to avoid data collect
974.
by x0x0 5y ago
If I were cynical, I'd suspect Life 360 (and similar companies) were created first with the goal of selling location data, and from there worked backwards to figure out what sort of app/company would require a continuous stream of
975.
by x0x0 5y ago
Per GDPR, nearly anything you for which you get consent is legal. As your quote shows: a purpose must relate to a legal basis, and one of the legal bases is consent. Was there actual consent? Unlikely, but I can't read the German in
976.
by x0x0 5y ago
Renters vote at far lower rates than home owners. This leads to not particularly surprising outcomes...
977.
by x0x0 5y ago
You'd need more like 300+ to have a manager-of-managers who isn't a director or VPE.
978.
by x0x0 5y ago
Twitter hates their website. And it shows.
979.
by x0x0 5y ago
CA is 14.6 of US GDP and 12% of the population. It's hard to have a large business in the US that doesn't have $25m revenue or handle the information of 100k CA residents, so there is very broad applicability.
980.
by x0x0 5y ago
We already have a de-facto national privacy law. It's the CPRA and it takes effect 1 Jan 2023.
981.
by x0x0 5y ago
It's hard to hire. If it were easy, they wouldn't be reaching out to you with bullshit job interview offers disguised as job offers. You have (presumably) a pile of expertise in this particular area that they will have to painf
982.
by x0x0 5y ago
I personally always favor directness. That said, your post is pretty inconclusive: there's a big difference between 4x1 hour interviews and 4x2 hour interviews. You do realize that working there would probably give them broad rights o
983.
by x0x0 5y ago
Right, it's multiple benefits: the soc2 has a lot of overlap with 27001, a bunch of overlap with hitrust, it's a bit easier to do, and the CISOs we talk to want the Type 2. Internally, you can bump up your security practices, eg
984.
by x0x0 5y ago
I disagree. soc2 forced us to yubikeys everywhere; getting serious about knowing, auditing, and controlling access; etc. There def were useless bits (contingency plans? If an earthquake hits sfo bad we're screwed, you're screwed
985.
by x0x0 5y ago
Because most CISOs / security reviews we go through ask for it.
986.
by x0x0 5y ago
It's probably easier to start w/ a SOC2 TypeII though. Once you get that down, you're at least 50% done with the 27001.
987.
by x0x0 5y ago
likely dwarfed by eng time, both in dollars and opportunity cost
988.
by x0x0 5y ago
fb just had to pay $650m to people in Illinois for blatantly violating their biometrics law. I suspect that between Illinois and the EU, there's flatly no way to reliably legally do this.
989.
by x0x0 5y ago
Castro is named after José Castro, a governor of Alta California and Baja California; and a general.
990.
by x0x0 5y ago
I worked at a place with a few thousand servers. Because the business had been around for a while, there was two separate ways to deploy and manage apps: old and new. We reconfigured how code was deployed within and between racks for increa

More ›