News for hackers. Stuff that matters.

greyboy

Re:So You've Been Paged: A Guide to Incident Response on Monday November 14, 2016 @02:08PM (#12952374)
I'm not sure what industry this was in, but neither reflect my experience working in Telecom and HIPAA-related environments.

We couldn't push any fixes without full UAT/validation testing. No "install own paging systems" would be tolerated on national phone/video networks or anything HIPAA related. We wouldn've been walked out the door ASAP.

I think it really depends. We had critical SLA and support levels we had to respond to. If a backup was called and there wasn't a very specific reason the primary was not able to respond, there would be consequences.

I hated not being able to leave or do something spontaneously (especially on a weekend, for example), because we always had to be near. Of course, all that would change if they made it attractively worth my while. But almost nobody does. :)

Yeah, that would explain a lot:

Available At Participating Dealers In California, Oregon And Maryland In Limited Quantities.

Re:Amazon’s Ambition to Compete Directly with UPS and FedEx on Thursday September 29, 2016 @09:32AM (#12605058)
> I noticed that too. They are being overworked. > They are still relatively happy, > but I see their stress levels rising.

Don't feel too bad for them. Drivers are the most desired position. When I worked there guys were waiting 10-15 years to make it to a driver.

They bid on routes, based on seniority. Some bid on late routes (i.e. boxes where the last pickup is 7:30pm, etc.) on purpose as anything over 8 hours was time-and-a-half. Back around '00 they started at $50k for drivers, so it adds up.

> Often I'm sitting at work with my headphones plugged into my computer to listen to music...

Perhaps the videos aren't reachable via his work network, or the OP doesn't want his "work" to know what's being viewed at the office? I'm sure there are other reasons to use a cell network (which is the assumption).

Re:Unearthing the Secrets of New York’s Mass Graves on Thursday May 19, 2016 @10:53AM (#11730676)
I certainly understand the frustration and 'hurt' expressed by what is in the article. And there are some questionable circumstances and decisions, yes, along with unwillingness to work with the poor.

But it's not as if these people are being pushed into mass graves with a bulldozer. Or willy-nilly flung around without respect.

Most of these stories were of people already forgotten - strained relationships, mental illness, or otherwise out of contact with their loved ones.

If someone hasn't spoken to another member of a family or friends in a number of years and kept in contact with the caregivers/caregiving facilities, and their only contact is with someone who is paid to care for their most basic needs, how can we entirely blame a system for not going to utter lengths to 'restore' those?

Another sad reality is: some people don't care.

https://ksr-ugc.imgix.net/assets/011/165/794/c4b7b104c6d147d...

This animated GIF shows it dropping into a "receptacle" which is just a box with a cord, presumably plugged in to the nearest actual receptacle.

Interesting idea, for sure.

Re:A few things about Redis security on Tuesday November 10, 2015 @02:18PM (#10541642)
> Just been hacked through this method and cannot believe

> ... that they don't even MENTION the security

> concerns from the quickstart guide>

> http://redis.io/topics/quickstart

??

Like the 'Securing Redis' section from that link?

Securing Redis

==============

By default Redis binds to all the interfaces and has no authentication at all. ...

1) Make sure the port Redis uses to listen for connections is firewalled...

2) Use a configuration file where the bind directive is set ... [to] as little network interfaces you are using...

3) Use the requirepass option ...

4) Use spiped or another SSL tunnelling software...

Re:ProtonMail pays $6k ransom, gets taken out by DDoS anyway on Sunday November 08, 2015 @03:52PM (#10529850)
How can we even know the answer to that question?

Additionally: How many of the people who do not pay these ransoms do you really think are hit again?

You are absolutely right, and they should have been punished.

But those loans also shouldn't have been granted, which was the bank's responsibility. Most of them should have been caught during underwriting and verification. What, exactly, were they doing?

This is a deception or failure on both parts.

Re:VirtualBox 5.0 officially released on Thursday July 09, 2015 @12:36PM (#9858963)
I never do the export/import process for that exact reason.

If I need to move a VM for some reason, I copy the entire VM directory to the new location then open VirtualBox and use "Machine" -> "Add ..." and select the directory with the VM config and files.

I hope that helps, unless I missed something.

Re:“We take security seriously” on Sunday July 05, 2015 @09:43PM (#9836146)
See the sibling commenter, but think government.

Plus, the posts I read earlier didn't mention 'Fortune 500' or 'reliably' - and I'm glad you didn't use words like 'productive' and 'efficient'!

Re:“We take security seriously” on Sunday July 05, 2015 @09:40PM (#9836131)
Bingo.
Re:“We take security seriously” on Sunday July 05, 2015 @03:42PM (#9834687)
You're right. I work at a place that does all but two of those, and I wouldn't if they didn't pay me as much as they do!
Re:Docker dropping support for RHEL/CentOS6.x on Thursday July 02, 2015 @09:49PM (#9822937)
We're an external partner pulling data via a 24/7 Windows-based web service, a system of record. The three we work with are all Windows, but three is likely a blip in their system count.

All I know is it's weird how they and their vendors manage the systems and environments. Glad it isn't me!

Re:Docker dropping support for RHEL/CentOS6.x on Thursday July 02, 2015 @07:30PM (#9822430)
Interesting. All the DoD systems we interface with run Windows. There may be a mixture, we just don't work with those systems.
Re:Dropbox Is Struggling and Competitors Are Catching Up on Thursday June 25, 2015 @09:30AM (#9777698)
My account has the same "problem" as jmuguy. It's really unfortunate as I often need to share files with non-technical/older people, and it creates unnecessary confusion.

As well as anyone that shares files with me, I see the same pop-up (icognito window or not).

Re:Collateral Damage on Thursday June 11, 2015 @09:14AM (#9699469)
Read it later when around a computer, perhaps?
I see a 'showdead' option, but nothing about showing deleted comments.
Unfortunately, no.
Re:Why Subversion Scares Me on Thursday November 14, 2013 @11:03AM (#6733032)
Also, if you're working on small parts and ensuring that no tests fail/writing adequate tests, it's not so bad. Our 30-member team isn't hampered by it while we await changes next year.
Re:Git Cheatsheet on Friday November 08, 2013 @01:19PM (#6698008)
> Gitx has better UX and appeals to me as someone that prefers to view more relevant content on the screen.

... and has a Mac, of course, which rules it out for many of us (though I can't speak for the sdfjkl).

Re:Multi-tenant Java 8 VM in beta on Thursday September 19, 2013 @08:01AM (#6411073)
Interesting about keeping a JVM running for compilation. I'm curious about doing just this for my day job but can't seem to find a good explanation. Do you have any resources to point me to?
Re:Forgotten Employee (2002) on Tuesday July 23, 2013 @11:46AM (#6090754)
Because phones don't "ring" when on a call - you get a beep in the phone speaker. At least with every landline and mobile phone I've ever seen in the past few decades.

I guess there is a subset of people who may still be fooled.

Re:The History of Ctrl + Alt + Delete on Thursday July 18, 2013 @09:27PM (#6067780)
He was an interesting teacher. Not the most forgiving, however. One learned not to ask him a silly question.
Re:In 8 months at Microsoft, I learned these things on Thursday June 13, 2013 @10:12AM (#5874100)
Different strokes for different folks, right?
Re:Steve Jobs emails that show how to win a negotiation on Wednesday May 22, 2013 @02:04PM (#5752651)
I agree - that didn't seem like the Jobs-esque writing I'm used to.
Re:So, I tried Dwolla on Thursday April 18, 2013 @11:00PM (#5574487)
Interesting, none of my (four) banks have asked for photo ID. Two of which were started online (but are still a traditional bank).
Re:The Truth About Brining Turkey on Wednesday March 27, 2013 @08:50AM (#5449064)
Thanks, you're right. Of course, I glossed over some of the gory details, such as a bag liner in the bucket. Or, the upgrade to a substantial sized stainless steel stock pot (which can be sourced at your local restauraunt supply store).

OT: Not sure why I always look forward to these discussions on HN.

Re:The Truth About Brining Turkey on Tuesday March 26, 2013 @01:43PM (#5444873)
I bought my wife a five gallon bucket at the local home improvement store for a few dollars. It holds your average-sized turkey just fine. Around here, in the cooler months, it hovers around 40F over night around Nov-Dec, so we let it sit outside on the back porch in the brine until morning (with a secure top, of course).
Re:How Google Sliced Away Our Knife Ads on Tuesday March 26, 2013 @12:52PM (#5444517)
I think switchblades fall prey to a particular stereotype, hence their "bad" nature. But, ask any diver/hunter/tactical knife wearer - they are strapped to the lower leg/calf in a holster, easily concealed under a pant leg.

And what respectable criminal wears shorts?!

Older »