zxcmx

24 ms·

151.
by zxcmx 7y ago
Not just cities. Countries. The hard part is the basics - things that get commoditised tend to get manufactured more efficiently, and at massive scale this tends towards centralisation. As a concrete example, in the entire country of New Ze
152.
by zxcmx 7y ago
I work in a huge, open plan, hot desked office, take crowded public transport (so close that everyone is touching at peak) and have kids that go to 2 different daycares. My life, almost every day of it, is basically a massive "pox part
153.
by zxcmx 7y ago
I guess so were they because they didn't put any computers in it.
154.
by zxcmx 7y ago
ESET has had high severity CVEs in a security product, including SYSTEM RCE and kernel RCE. Agree that 90% of CVE's are meaningless but unless they've done a lot of sandboxing work in the meantime (guessing not, and up to them to
155.
by zxcmx 7y ago
No :( It never really has been https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Eset But from way back it's been RCE prone: https://support.eset.com/en/news325-eset-customer-advisory-v...
156.
by zxcmx 7y ago
Personal conspiracy theory: If you're JD what you really want is to get a cut of revenue generated using the equipment. Like the copier market, all run on "clicks". Service is more or less free (and responsive), because if
157.
by zxcmx 7y ago
Just charge for disposal at the point of production. The consumer still pays but at least the manufacturer "feels" it.
158.
by zxcmx 7y ago
I think this is an amazing bug for "practical" attackers. Not quite an MS08-067 ... but also sort of better? For lots of SMBs their OWA (plus maybe a VPN server and a web site hosted elsewhere) is their only online presence. With
159.
by zxcmx 7y ago
I tried spinning up some free Oracle cloud instances (you get 2!) but it was "out of capacity" (at least in that instance shape?) in sydney region... not an experience I've had with any other cloud provider. Perhaps they are
160.
by zxcmx 7y ago
There's the worry that your platform vendor is going to squeeze you for all your profit, harvest "your" data, use your data to bootstrap competitors (seems like X is profitable!), "cancel" your platform or all the o
161.
by zxcmx 7y ago
That would be great and raise the bar, but the same dispute issues would exist, just with authenticity of goods. Scammy buyer would purchase say, 32GB sticks of RAM and ship back 1GB sticks with the stickers swapped.
162.
by zxcmx 7y ago
Does the UPX help much on top of Docker's layer compression? I can imagine it might (special purpose vs general purpose) but haven't tried it.
163.
by zxcmx 7y ago
With lots of "security best practice" crypto constructions you can quickly find yourself needing to use unreviewed and unsupported libraries. This is a different kind of security hell. It's worst when you're publishing a
164.
by zxcmx 7y ago
Yes, totally agree. I wonder what the rational tipping point would be for mask vs no mask.
165.
by zxcmx 7y ago
Not quite sure I get the reasoning in that link. Sure, it's not likely to decrease your direct infection risk. But it does decrease the risk of you infecting others. At any given time you can't really know if you're infecte
166.
by zxcmx 7y ago
I don't get it; if I'm shipping my own SOC, with my own wizzy latest hardware how else do I get drivers for all my stuff, without adding them myself? Like, I expect the results to have all the expected "quality" of softw
167.
by zxcmx 7y ago
I'm not sure how this plays out as open source. In closed source you have a bit of leverage (defender advantage) - changes which might be relatively easy for you to implement could take a long time to completely reverse-engineer to t
168.
by zxcmx 7y ago
A process with occasional bugs and rollbacks is rational if it produces more net utility than a process which only ships "perfection". What's your error budget? Not spending your error budget is velocity left on the table.
169.
by zxcmx 7y ago
One thing I've wondered about for a while is optically inspectable self-printed electronics. If you go down the rabbit hole of wondering "how can I ever trust this computer" far enough this starts looking like a moderately in
170.
by zxcmx 7y ago
Agree and am a bit disappointed with all the dismissals. Taking https://en.m.wikipedia.org/wiki/Cortical_homunculus As a starting point I think I could guess ahead of time that sensory maps might be distorted from the
171.
by zxcmx 7y ago
Couple of techniques; Per-record keys where the key can be deleted (this is a hard delete as your system can no longer access the data). Keep "sensitive" info out of messages (credit card stuff, PII, secrets?, whatever), events ha
172.
by zxcmx 7y ago
Some believe that some fines should be a proportion of income, even for individuals. Fixed financial penalties are inherently regressive; they disproportionately punish the poor and provide no disincentive to the sufficiently rich. I believ
173.
by zxcmx 7y ago
They're entirely different fields you can't draw an analogy and any attempt will be awful.
174.
by zxcmx 7y ago
Thank goodness for status ambiguity. It's possible to be rich, yet a terrific bore; a talented golfer who is a mean drunk; a world class programmer who can't weld for beans; or a respected judge who nonetheless commits a faux pas
175.
by zxcmx 7y ago
It's situation dependent right? As an engineering manager, you could support every team or even every individual using whatever they like - but you then have other tradeoffs to make. It's now not possible to run security tooling
176.
by zxcmx 7y ago
> If folks were to start opting out of academia in larger numbers for jobs in private industry, schools would be forced to improve working conditions. This is exactly what is happening! (Well, the leaving, not the improving). The argumen
177.
by zxcmx 7y ago
Yes, the "nothing is worth doing while there are poor people anywhere in the world" argument. We can work on environmental issues and poverty.
178.
by zxcmx 7y ago
Re: dynamic types with extra steps: Nitpick: In the situations you described, the type is known to the compiler at compile time no? Do you have the same problem with "auto" in other languages?
179.
by zxcmx 7y ago
Lots of advice in these threads and no one has mentioned anchoring yet so I'll staple it here; if you're a big company who can afford an HSM and the overhead of the key ceremony stuff to manage it (managed stuff like AWS cloud HSM
180.
by zxcmx 7y ago
Or make it easier to pull doctors in specific fields from countries where cost disease isn't hitting training so hard. Or allow nurses or other trained, experienced personnel to take on more duties. Or innovate on efficiency and find

More ›