dyu
Re:How Zillow's homebuying scheme lost $881M
on Friday March 18, 2022 @03:36PM (#30726540)
While it is true cash offers in the strict sense mean real cash, it may also mean no-contingency offers. You can go through mortgage underwriting first and commit to pay the gap between appraised value and deal value, and can make a no-contingency offer with minimum risk. Or, if you are willing to lose your deposit (usually 3-5%) you can also make a no-contingency offer to be more attractive.
Re:Executive Order on Improving the Nation’s Cybersecurity
on Wednesday May 12, 2021 @11:14PM (#27138019)
US federal gov has their own PIV/CAC
Re:Robinhood Files Confidentially for U.S. IPO
on Tuesday March 23, 2021 @06:56PM (#26561411)
A short is not an option contract
Re:They want us to be compliant, not secure
on Saturday December 26, 2020 @07:24PM (#25547620)
I've had luck showing that the cloud provider fulfills the 'local backup' requirement as part of their compliance (provided they do meet the same framework that you're trying to meet), and us inheriting the control from the cloud provider.
Re:They want us to be compliant, not secure
on Saturday December 26, 2020 @07:14PM (#25547570)
They could be referring to the list of FIPS-validated crypto modules.
Re:Ask HN: What's your quarantine side project?
on Thursday May 14, 2020 @02:40AM (#23176171)
clquery, a SQL interface to cloud resources. Using SQL and tables to interact with AWS (and eventually others) makes it easier to quickly query and join across various resources and services without needing to remember how to make and parse the underlying API.
`pip install clquery` or https://github.com/dongting/clquery
Re:Show HN: Insomnia Designer – Open-source collaborative editor for A...
on Wednesday April 29, 2020 @03:57PM (#23023453)
Can it use an exportable/importable file as source of truth which you can then check into git?
Re:Launch HN: Castodia (YC W20) – Populate Google Sheets from databases
on Wednesday March 18, 2020 @05:16AM (#22614853)
Also worth looking into using ALB instead of API Gateway, and have ALB call Lambda (I think this is possible).
Re:Cambridge University Press make their books free until May
on Tuesday March 17, 2020 @10:11PM (#22612908)
To be fair, this is exactly CUP's intent.
Re:Text Processing in the Shell
on Tuesday March 17, 2020 @03:05PM (#22608873)
It appears sort has a --stable flag for order preservation. I actually thought sort was stable by default already, but now I know.
Re:Hacking GitHub's Auth with Unicode's Turkish Dotless 'I'
on Monday December 16, 2019 @10:04PM (#21810129)
I believe you are correct. However, this particular example may not be the best one, see: https://en.wikipedia.org/wiki/Capital_%E1%BA%9E#Current_situ...
Re:Airbus hit by series of cyber attacks on suppliers
on Tuesday October 01, 2019 @08:57PM (#21132522)
ISO27001 (the main security one) has annual reviews which are more lightweight. After two years, the three-year cycle restarts.
Re:Cybersecurity Pros Name Their Price as Hacker Attacks Swell
on Wednesday August 07, 2019 @09:58PM (#20641139)
from your website: HIPPA should be HIPAA
Re:How many kinds of USB-C to USB-C cables are there?
on Monday July 15, 2019 @06:23PM (#20445848)
Sounds like the Boeing 737 MAX problem (without the killing part).
Re:AWS Control Tower
on Monday June 24, 2019 @08:50PM (#20270150)
You can also check out https://divvycloud.com/, which is similar and supports a few other clouds.
Re:Why people confess to crimes they didn’t commit
on Sunday June 16, 2019 @06:39PM (#20198421)
I am not well-informed, but according to https://en.wikipedia.org/wiki/Miranda_warning :
>If you cannot afford a lawyer, one will be appointed for you before any questioning if you wish.
Re:Google Cloud Is Down
on Monday June 03, 2019 @12:48AM (#20080477)
Different locations see different counts because of aggregation/de-aggregation.
Re:SaaS CTO Security Checklist
on Thursday May 30, 2019 @06:11PM (#20056457)
the assumption is you do not come up with your own words, and pick words at random from the whole dictionary.
Re:Ask HN: Why are phone numbers considered a secure personal identifier?
on Thursday May 09, 2019 @04:06AM (#19866274)
Also a nasty surprise when you travel to another country and realize your mobile plan cannot have roaming, and you have no service at all.
Re:Design Patterns for Managing Up
on Saturday January 26, 2019 @04:57AM (#19005660)
Also used in research grant proposals
Re:The Chinese scientist who allegedly created CRISPR babies is being ...
on Monday December 31, 2018 @10:38PM (#18798791)
It's like editing a piece of code without fully understanding what it does, without unit tests, and your text editor may be buggy.
Re:Gravitee: Open-Source API Gateway
on Sunday December 30, 2018 @03:03AM (#18788027)
I'd say it's lower in the stack, and probably for a different audience. If you really wanted to, you can probably implement BeyondCorp using (but not only using) this or one of its competitors mentioned in this thread; but it's only part of the equation and leaves out the authorization logic of BeyondCorp.
Re:Quora User Data Compromised
on Monday December 03, 2018 @08:38PM (#18595096)
As an example, consider an army attacking a defending army. The defending side is as good as the weakest member, because you can presume the attacking side to be looking for the weakest part and attacking that. On the other hand, the attacking side is as good as the strongest member, and having a few weaker members is ok. It is generally harder to make sure you have uniformly good defense, than getting a few really good people to spend dedicated time attacking.
Of course, this model assumes that as soon as you have penetrated the perimeter, the rest becomes easy. This is the more traditional model. People are increasingly adopting a you-are-already-hacked approach, which makes it harder to move laterally once someone gets in. However, the general challenge still applies.
Re:Ansel Adams’ pictures of LA recall an era of war factories and 10-c...
on Monday December 03, 2018 @12:40AM (#18586589)
I think they provide the machines as an incentive, and in turn it can only dispense their brands.
Re:XSStrike: XSS detection suite
on Monday November 12, 2018 @08:22PM (#18437599)
Interestingly, as of last year Azure no longer requires advance notice: https://www.microsoft.com/en-us/msrc/pentest-rules-of-engage...
Re:Google's interview system: it's not about solving the problem
on Sunday November 04, 2018 @11:20PM (#18379849)
If you are in California, the employer is now required by law to disclose salary range.
Re:Tesla Faces U.S. Criminal Probe Over Musk Statements
on Tuesday September 18, 2018 @05:26PM (#18019292)
You can do a straddle and get the best of both sides.
Re:The Secret API of Banks
on Wednesday August 08, 2018 @09:42PM (#17721105)
FYI if they enter the final amount incorrectly you can dispute the charge with your credit card provider. It's probably a stronger case if you kept your own copy with the final amount that you wrote down.
Re:PIN number analysis (2012)
on Friday August 03, 2018 @04:54AM (#17678266)
If you are interested in this sort of analysis, I recommend reading into works by Joseph Bonneau: http://jbonneau.com/publications.html
Re:Let's code a TCP/IP stack, 1: Ethernet & ARP (2016)
on Thursday June 14, 2018 @09:31PM (#17316829)
It might not be the author's intention, but I think there is now a push for MAC addresses to be 64 bits instead of 48.