bonfire
bonfire on Hacker News
Check Point Research combing through the Conti leak and extract org structure and modus operandi of this cyber crime group which is actually a start-up company
Posted by
bonfire on Friday March 11, 2022 @03:44AM
from the research.checkpoint.com dept.
Why is this a .com site and not just a post on Medium? :-$
This is similar to the experience of driving a car and listening to music at the same time. When you are in a tight situation, like a very busy road or a narrow street with lots of traffic you'd usually stop talking to the passengers or turn the radio down a bit to "concentrate". It's because you want to use all the mental capacity at that time.
How difficult is it to just deny access for a few IPs? Firewall, ACL, something?
Poor CEO, be dragged through this for nothing..
I bet they also get more money. Come on.
If you want to eat in a restaurant it's better not to look in the kitchen :-|
Will MSFT fix their earning statement then? :-P
Posted by
bonfire on Wednesday November 11, 2020 @12:03AM
from the wired.com dept.
Really liked this blog post. Thank you.
I've always found eBPF to be "magic"
Posted by
bonfire on Tuesday October 20, 2020 @01:31PM
from the orca.security dept.
Thanks!
I was thinking perhaps surveying customers after purchase/renewal to tick multiple selection boxes and say which features they liked which contributed to their decision. Still it can be a combination with the new marketing campaign but at least I will know that feature X is one of the reasons they decided for the product.
Thanks!
You know what, I think I wasn't accurate enough with what I'm asking. In our org when I decide on a feature I know to say that customers need and want that feature. What I don't know is how to /measure/ it even after it is generally available.
For example:
Lots of customers say "yes I need X, if you build this that'd be great". So we go and build X. Release it. Customers use it. Now the question is - how do I know it helped increase sales? If sales didn't grow more than it usually does (by inertia) does that mean feature X did not contribute at all?
I am a middle manager, so have quite an influence but not ultimate decision. I do have to justify projects to my managers. The KPI is clear, we are trying to increase the sales. But the product is so large that it is extremely difficult to measure the contribution of a single feature.
Also, the client base is very large and as I mentioned thousands of sales persons so no matter who I ask I can't get clear answers. That's why I'm trying to find a measurement that somehow averages the answers.
Posted by
bonfire on Friday October 02, 2020 @06:48AM
from the ask-hn dept.
Dear HN
I am at a dilemma and seek the crowd wisdom. How can I justify the work I'm doing? (or rather: want to do).I work at a B2B software company (~1500 R&D, and few thousands of people doing sales, support etc).
We have one main product (accounts for the majority of sales) - a hardware appliance with two bundles of licenses - basic and premium. When the product is sold it comes with the...
Couldn't agree more. The most important thing for me as a manager is always exposing the work of my subordinates upwards so that they are known to my managers when opportunity comes.
Not a lot of HN posts make me emotional, but this one did.
I'm a middle-manager in a corporate, manage about a dozen teams (just to give you a sense).
I want to say we don't have those practices in our company, but you know - I just don't know. I was promoted not because I played a better political game than someone else, but because I (think) I was the best for this job (got promoted instead of my own manager who left the company).
I don't see other people playing the game but I could be blind to it. That's why this post made me _feel_ I might be missing on the game that's going on. However knowing my peers (same level as I am) I don't see them doing these things.
I don't like this post.
Who knew?!
Why is this useful? for what? did anyone ever use this?
Posted by
bonfire on Friday September 25, 2020 @12:41AM
from the docs.aws.amazon.com dept.
Posted by
bonfire on Saturday September 12, 2020 @12:00PM
from the owaspsamm.org dept.
You mean a SOAR system?
like Demisto, Swimlane etc?
Posted by
bonfire on Sunday September 06, 2020 @12:11AM
from the ask-hn dept.
I want my devops to be focused elsewhere but on the other hand the CI/CD pipeline has permissions to access and do many things in very sensitive places.
Specifically we use gitlab & jenkins.
I know there are "best practices" documents for how to secure , but are there tools to monitor, offer compliance checks etc?Thanks!
So basically we can give up HTTPS for origin authentication (leave it for encryption/privacy) assuming the bundles are all signed?
I wrote a manager's README and give it to new hires and even in some cases candidates I'm trying to convince come work with me. It is realistic (I hope :D) and in no way is it meant to compensate on things I do or are annoying .. "you should have known, it is written in the README" is never an acceptable response.
So in one way I appreciate her "user guide" as I know how difficult it is to write such a document and she does it with high detail.
I wonder if it raised the grade on the next survey though :D
> I think there's a solid argument that getting billions in billing while being stagnant is self evidently a valid excuse to be stagnant.
yes.
For me, I have to say it, it's MS Outlook. I do e-mail all day every day and I use VBA macros and all sorts of shortcuts to make it very useful. Love it.