News for hackers. Stuff that matters.
Re:Certificate Transparency Log Compromised via Salt Vulnera... by wolfgang42 on Monday May 04, 2020 @12:28AM (#23064552)
> How large is the company you work for (employees or revenue)? How many servers do you have to support that company?

“SourceHut [of which ddevault is the founder] has 10 dedicated servers and about 30 virtual machines, all of which were provisioned by hand... [It] made 4 thousand dollars in Q1 with two employees and an intern.” (from https://sourcehut.org/blog/2020-04-20-prioritizing-simplitit...)

> Oof... The smartest people I know generally assume the least of situations they are not intimately familiar.

Yeah, I generally think highly of Drew’s opinions on technical matters, but this thread is just painful to read.

Re:Certificate Transparency Log Compromised via Salt Vulnera... by AmericanChopper on Monday May 04, 2020 @12:38AM (#23064608)
The thing I don’t like about the sorts of claims made here is that when people advocate for simplicity like this, they often just have a highly opinionated perspective of what should be simple. So they’re not really advocating for simplicity, they’re just advocating for prioritising whatever thing they think it is that’s important. Maybe that thing should be important, but it usually depends on the context, so you end up with bad general purpose advice, which usually doesn’t accurately portray the trade-offs it’s advocating.