mdmglr

The bogus CVE problem has caused delays in my projects because the CIO wants our COTS scanner tool reports to have 0 CVE's or a detailed explanation on why it is not an issue.

Also I'm having difficulty communicating: CVSS is not a measure of risk, and that many of the ReDoS vulns are very much dependent on the context.

I've always wanted this feature for my bookmark manager. I've found myself saying like I remember a website that was x color on the header.

I’m wondering if eventually airspace will be carved out for commercial drone operations. And if in the future the FAA will attempt to stop enthusiast drone operations via costly regulations in the name of safety for commercial drone ops. As it’s very easy for someone with a DJI drone from to fly beyond LOS.

Also a Walmart in my area has blocked off part of its parking lot to launch 6 delivery drones. I’m going to miss the days of quiet skies.

I think this is disingenuous. Example: configuring a linux firewall properly is not on the same competency level of changing your oil.

This script doesn’t harden sshd to the level I’d call safe. Disabling root login is minimum. I’d have port change, timeouts, fail2ban, otp via Pam all configured. Only allow specific IP ranges and users to ssh. I’d use ansible to properly configure instead of this script.

In the case of httpd. Id run it in docker or chroot. Again fail2ban, otp, I’d probably put it on a different port have it proxied via Cloudflare and have httpd only allow Cloudflare ips.

All this that are difficult to learn.

Source: I run my families infrastructure. Which spans multiple servers, routers, switches across 7 houses in 3 countries. I also change my own oil.

Flicker has been one of my biggest pet peeves of LED lighting. Had to return numerous LED products for this reason.

I don’t understand the tech independence claim? The script is replacing a unified service like Google or Apple iCloud with a lot of other services. Vultr and mailgun for example.

There is something to be said about the larger centralized services. I’d be hesitant to put any sensitive files on my own server. The larger firms have security departments ready to respond to CVE’s and 0days.

Question for someone more knowledgeable: as the iPhone’s periscope lense tech improves will this effectively make the low end of professional mirrorless/dslr cameras obsolete?

Good thing I don’t work with you. Can I have your name so I make sure my company never hires you?

lobste.rs. Wish I had an invite. Community seems better overthere.

What do teams at google and meta practice?

This will not be popular but you don’t need ECC or Xeons.

You can find great deals on powerful PCs from eBay sellers who are IT recyclers.

I’ve found the SFF/Mini PC’s to be great.

You also have to decide what you want to do. And if you want the headache.

For example it’s easy to start doing home automation, dns server, NAS. When things break or updates break things and nothing is working and you have to pull it all apart again was to much for me.

> Daco acknowledged hearing from clients that remote work could be making employees, well, work less hard.

So just hearsay it is remote work. No evidence.

I agree. Many applications log for the hello of it and log unnecessary information.

We have concepts of debug, info, warn and error… but I think we need apps to be developed with the concept of log concern.

For example take sshd. For infosec they are interested in IP of failed attempts, operations might want to know connection failures, etc.

Sure was a mistake. Humans are social creatures. Remote work short circuits that.

I’ve recently built a VPN into my network using Cloudflare Zero Trust and Cloudflare Tunnels. Highly recommend over maintaining Wireguard or anything else. Much more comprehensive security controls.

I would like to see a change in public policy on this. If you’re going to operate a car that costs 40k to get repaired on a small accident on public roads perhaps the operator should have to foot most of the bill. I believe the state of Michigan has this implemented.

How can I try Bluesky?

There are already processes in place to make code developed from tax payer funded R&D available to American companies with a licensing agreement. To protect my anonymity I cannot elaborate more.

Instead of these models constructing frames it would be interesting if these AI systems could instead produce skeletal character movement data (similar to the motion capture of real humans acting) and could operate maya/blender.

What js library is being used for the visuals?

First mistake of this small business:

> signed into her personal iCloud account.

It’s not the employees personal computer. No personal iCloud.

Well as coding is going away. Perhaps just show them how to login to ChatGPT and how to engineer a prompt to code. Oh an how to write requirements documents and manage an Outlook calendar. :)

In more seriousness, from personal experience, I’ve found is that when talking with younger children things need to be highly visual and interactive to keep attention.

The changing font idea is good.

An extension of that might be showing Scratch in real time and making changes or perhaps an Arduino and some LEDs.

Similar to how some movies and TV shows can activate Alexa. I believe at this point writers are doing it on purpose.

I sent out emails on a “Who is hiring?” thread and received zero responses. However so far in my career I’ve found success in seeking out opportunities.