sneakerblack

Do you want to be targeted? Then don't look Latino, black or foreign, work blue collar or service jobs or speak a language that is not English. There are plenty of examples of law abiding citizens getting illegally arrested or killed by ICE.

ICE is facing backlash because they are breaking the law and discriminating. Flock is facing backlash because they are enabling ICE and the general oppression of opposition to the current administration. Crimes should be investigated, but this falls outside of an immigration agency's responsibilities.

All this coming from a non-american by the way.

Man, you Americans are really playing with fire

Skill issue

Jokes aside, I agree on the sense that this should be a solved problem. On the other hand, if the only implementation is a broken one, there's only one way to help yourself, and that is learning how to do it and helping yourself

Being in Kubecon this week and now this project, I'm a bit surprised at how heavily some people lean into Operators. I've always been hesitant to deploy operators into my clusters unless they provide a significant advantage compared to just using argocd just because of how heavily they can hit the k8s API. Not sure if anyone has run into the same issues?

This all stinks of Lazarus:

https://en.wikipedia.org/wiki/Lazarus_Group

I've done incident responses for this exact type of attack multiple times. They've gotten much better organized lately and will often contact developers directly (over LinkedIn or WhatsApp) to run this type of attack. (Although, usually pretending to run a test for a job interview -- which is maybe why the author was confused about the code)

I think this was posted because the of the recent Npm malware fiasco. The malware monkey-patched native JS functions to replace strings that matched crypto addresses in certain the fetch, and XMLHttpRequest functions:

https://www.aikido.dev/blog/npm-debug-and-chalk-packages-com...

Considering there's no way to check whether a function is monkey-patched, this just tells me the JavaScript ecosystem was not designed with malicious actors in mind

This was discovered last year:

https://www.youtube.com/watch?v=D0st_6sE7Bk

I think the issue with this is that you'll never be able to have the deep integration current FMD implementations have (where you have Bluetooth beacons to track the phone even when it's "off") and also be able to use anything that requires a signed bootloader and OS (such as banking apps)

Not OP and don't work at Jane Street, but I have a friend that does and yes, they do.

I think this article sidesteps what this bill also means: a return to cold-war-era thinking of "passive" advancement of military capabilities for the "just in case" scenario

I wonder if this was cyber sabotage....

Obviously just speculation but considering the escalating tensions between Russia, the EU and the US, I wouldn't be surprised if it were

I work in the security industry and use WIZ and while I do despise all of the buzzword acronyms this industry has come up with, CSPMs have been one of the few tools that have actually made my life significantly easier. Due to the nature of the industry I work in, there is a lot of regulation that we need to comply with, and CSPMs (and wiz in particular) gives us both observability and alerting for all of our resources in our cloud environments, including the configuration of the cloud environments themselves. I don't know how they managed to get a $32B offer so soon after coming out of stealth, but considering the amount of problems it solves for me and my team, I can see why they're doing well financially. We're definitely happy with the pain point the product fixes.

I can now say "I know for a fact we have x number of AWS/GCP/Azure accounts that are either not using our IdP or 2A, here's a list" without having to script across multiple cloud APIs

Similarly, I can say "here's a list of people that accessed x resource in the last y days". It really makes my life easier when I want to access metrics about my company's cloud environments

Try JumpServer:

https://github.com/jumpserver/jumpserver

Its an open-source PAM solution

We're not using it in-house (we're actually using teleport), and I haven't tried it, but I've heard many good things about it

I'm not too familiar with the situation in Portland, but I have heard that programs which decriminalize drugs and provide care centers are not effective without existing social nets such as solid unemployment programmes and public health programmes that treated addicts can use to get themselves out of the socio-economic hole they got themselves into

Maybe the US is lacking in those programmes and is why the drug legalization programme is not effective in Portland?

I think your accidentally misinterpreting the law

As explaine by the article, counterfeiting involves pretending to be a product it's not. For example, if you sell your hypothetical channel bags as genuine channel bags instead of as generic, no-brand bags, then that would be counterfeiting because you're pretending they're something that it's not. Using genuine apple parts in third-party screens is more comparable to putting channel bag straps (which, yes, have the channel logo on them) into fake bags and selling them as generic, non-channel bags. Similarly, if you don't label the third party screen as "genuine apple", you're not infringing copyright.