News for hackers. Stuff that matters.

andersonmvd

Meta is also influencing Brazil's election: https://www.reuters.com/world/americas/meta-employees-said-l... - other social networks as well.
Re:Show HN: I made a site that lets you punish yourself on Tuesday January 30, 2024 @08:58AM (#39190155)
Related thread: Boss as a Service – Hire a boss, get stuff done (bossasaservice.life) https://news.ycombinator.com/item?id=18512197
Re:Show HN: I made a site that lets you punish yourself on Tuesday January 30, 2024 @08:55AM (#39190116)
Does it impact your friendship? I'd guess you may resent them if they kept a lot of money, especially when you need the money. Or you may start avoiding them completely when you're aware that you didn't achieve a given goal, no? I guess for small amounts it may work but on the long run it seems like a trap.
Re:No star, No fix on Tuesday December 19, 2023 @01:29AM (#38692519)
I fail to see a reason where it would be a violation because of the following reasons:

1) it's a response to a user's request, i.e., not initiated by the repo author

2) it depends on consensus of the user.

3) it's not automated (most of the items from the policy are related to automation).

4) the repo author has no obligation whatsoever of maintaining the project. He is not paid or forced to do it.

5) if the user really wants to apply this change or disagrees with this practice, he/she can always fork it.

That said, I understand that it may still not feel "fair" compared to other projects that don't follow this practice. Or the feeling of "wanting to help but you're asked to do some things first".

Companies already do that to accept your pull requests though [0], which takes way longer than giving a star - and I didn't see a complaint about it on HN

[0] https://github.com/google/eddystone/issues/258

Re:Cybersecurity Isn't Special on Wednesday December 13, 2023 @09:31PM (#38637085)
The goal of cybersecurity should be to align cybersecurity with existing processes, but minimizing friction. What the author experienced seems to be a high friction security program, which is the result of a suboptimal cybersecurity program.

This is unfortunately the reality in many companies because cybersecurity is implemented as a subset of a high level information security framework without qualified people to connect the high and low level requirements.

In the past, security departments were the "firewall gatekepeers", choosing who to allow or deny access. They started to change over time from gatekeepers to support the business but this transition is not complete as we know from experience.

The CISO has also has the dillema of having to support the business but will also be held accountable for any hack, which increases the tension on reducing friction vs increasing friction (and increasing control).

This is not an easy problem to fix, but I particularly think it's very productive to see posts like this so we can bring this topic to light and find the right balance.

And for those interested in learning how to add security to their organizations with minimal friction (security by design, especifically), I'm creating some webinars (free on youtube) here: https://devops.security/webinars.html

Show HN: GPT4-Generated Security Checklists for Any Tech and Language

https://checklist.devops.security

Hey HN!Check out GPT4-SecCheck, a tool I built that's all about making security checklists for any tech in any language. It's powered by GPT-4. Here's the summary:- GPT-4 powered: the brain behind the checklists- Tech-Agnostic: input any tech such as AWS S3, Java, Flask, etc- Language-Agnostic: output the checklist in any language you wantGive it a whirl if you want and let me know what you...

( Read More... | no comments | on HN )
The 7 offences are not detailed individually in the news, or I couldn't find it.
Re:Plaid Layoffs on Wednesday December 07, 2022 @11:30AM (#33896341)
> Macroeconomic conditions have changed substantially this year. Despite being well-diversified across every category of financial services, we are seeing customers across the industry experiencing slower-than-expected growth.

sry for the stupid question, but does anyone have a good breakdown/video/article/explanation on the market change? I have some idea, but I'm not a pro.

imho, 3 months at least, 4 would be nice and 6 great
Re:Hello on Sunday November 06, 2022 @04:50AM (#33490879)
I see. You definitely could learn japanese ... if you want to. If you don't want it's another story xD. In any case, about FF14, trial works still (I had no problems) and I recommend this client for Mac https://github.com/marzent/XIV-on-Mac - which is better than the official hehe.
Re:Hello on Sunday November 06, 2022 @04:15AM (#33490672)
Another FF fan hehe. Btw if you still play, FF14 online is a banger to enjoy some nostalgia. I'm having a great time at least :) About working, well Square Enix is always hiring, but you need to speak japanese. Their offices are in Tokyo if I am not mistaken.
Re:Hello on Sunday November 06, 2022 @03:57AM (#33490584)
Hello from Switzerland (I'm not swiss though). I am passionate about reducing the suicide rates in Japan (I'm not japanese though). To contribute the way I envision, I'm building a business (one man show) to fund this endeavor. Easier said than done. First it starts by covering my costs, then moving on to this ambition. It's a journey so gotta enjoy the day-to-day, so I am happy to do a business on what I love, which is cybersecurity. I just got started, but I am already all in :) wish me luck lol. As for why this mission .. gosh it's a book to explain, but in short I want to give back what I received all over the years. If you have ideas to contribute about Japan, please write to me. Info on profile. Peace and love :)
Re:Postgres WASM on Monday October 03, 2022 @04:39PM (#33073371)
It's complicated indeed. A simple "clear browsing data" would make him lose the data forever hehe. And if you keep the key in the server, it would be "hackable", which is what I was trying to avoid. I haven't looked at it but https://solid.mit.edu/ looked promising.
Re:Postgres WASM on Monday October 03, 2022 @03:33PM (#33072510)
I was trying to find a way to make apps "data-leak resistant" and one step into this direction was to let the user store the data by bringing his/her own database. I even made a poc https://github.com/andersonDadario/byoda (explanation in the blog post link found on the readme) - but no user would manage his own database. Having a database in the browser opens more possibilities though. I will give it some thought. Looking forward to what else will be built on WASM.

Older »