lando55 2 days ago • 100%
Are we married to the same woman?
lando55 5 days ago • 100%
Yeah that's what I'm curious about; I'm used to copying code snippets or codes from websites by clicking a button (presumably through some browser API?), but am just now realizing that this in itself has security implications.
Using noscript or some such JS blocker would prevent this but break a lot of other things in the process. That's why I'm wondering why the API isn't locked down via some user prompt.
lando55 5 days ago • 100%
Why isn't the default behavior for browsers to not allow access to the clipboard? Similar to how it prompts you for access to camera/microphone
Edit: On a per-site basis, like if you use the Zoom website it asks you for access to the webcam, would something like this work for clipboard as well or would it break stuff?
lando55 6 days ago • 94%
Goddamn you for making me chuckle
Bring back the ice buckets :(
lando55 6 days ago • 100%
No joke, I thought for a second you were referring to Infinite Solutions and were trolling hardcore. I haven't thought about that in a long time.
lando55 6 days ago • 100%
sware on me scrum
lando55 7 days ago • 100%
Honestly it's not that weird a question when making idle chit chat. It becomes weird when that's the only thing you ask, follow it up with "Okay", and then proceed to do it six more times.
lando55 1 week ago • 100%
Whoa whoa hold the phone - King Tut died?
lando55 1 week ago • 100%
Or like - don't unmute? Seriously he starts off talking on mute and someone makes a conscious decision to turn on his mic
lando55 1 week ago • 100%
I thought his smallest problem was his hands
lando55 2 weeks ago • 88%
Thanks for calling attention to this. Oftentimes when a patent is applied for there is no intent to implement it. This is actually a clever way to get ahead of the direction of the market and license to other manufacturers.
Having said that, it's still Ford, and once it's generally accepted for this type of ad to be displayed they'll jump on it real quick.
lando55 2 weeks ago • 100%
"Bluesky! You didn't file your paperwork last night."
lando55 2 weeks ago • 100%
Make sure you back up all email and IM communications and don't rely exclusively on server-side retention (provided your DLP policy allows for this.)
If it ever comes down to it and you are facing the possibility of being the scapegoat for a security incident, your attorney can review the relevant policy and determine whether or not and when you can use these to demonstrate that you communicated your concerns to management and stakeholders.
Depending on who you reached out to and who was included, absence of a response to your various methods of communication can be used to establish acceptance of risk by leadership.
lando55 1 month ago • 100%
Usually?
lando55 2 months ago • 100%
Indifferent take: Jacobin is a publication.
lando55 2 months ago • 85%
I hear you, but there's no reason to be angry.
When I first learned of the issue, my first thought was, "Hey our update policy doesn't pull the latest sensor to production servers." After a little more research I came to the same conclusion you did, aside from disconnecting from the internet there's nothing we really could have done.
There will always be armchair quarterbacks, use this as an opportunity to teach, life's too short to be upset about such things.
lando55 2 months ago • 100%
Let me tell you about my mother
lando55 2 months ago • 100%
Crowdshite haha gotem
lando55 2 months ago • 100%
sungloc.utus
lando55 3 months ago • 100%
What about this scenario:
- you keep your main garage door, side doors, and windows locked
- provide a key to anyone who wants to borrow your lawnmower or whatever
- someone discovers a window you mistakenly left unlocked and starts using it to take stuff without using a key
Would this be considered breaking in? Probably. Here is where the analogy breaks down; if I were to leave the front door of my house unlocked, even if there's a welcome mat outside, anyone who enters without my knowledge or consent can be charged with breaking and entering (yes, even though no actual breaking is involved).
The interesting thing with public APIs is that there are generally terms and conditions associated with creating an account and acquiring a key, though if you are hitting an unauthenticated endpoint you technically never agreed to them. In this particular case with Authy, it would probably be argued that the intent was to acquire data by exploiting a vulnerability in the custodian's system and use it for nefarious purposes or profit. I'd call it a hack.
lando55 3 months ago • 100%
To build on you analogy: if you left your garage door open and people came in and started taking your things, is that not stealing?
lando55 3 months ago • 100%
They could bundle in my idea of having a telephone in your house, not a cell phone more like a land phone
lando55 3 months ago • 100%
Sorry
• • • ノ( ゜-゜ノ)
lando55 3 months ago • 92%
You know what they call alternative medicine when it works? Medicine.
lando55 3 months ago • 50%
lando55 3 months ago • 73%
I signed up for a family plan a couple years ago and it's honestly one of the last subscriptions I would cancel. I can justify it by the literally hundreds of hours of watching ads me and my family would have been subjected to otherwise.
lando55 3 months ago • 100%
My sex toy goes to a different school
lando55 3 months ago • 100%
Got me good
lando55 3 months ago • 100%
Sir this is a Wendy's
lando55 4 months ago • 100%
Lose the blackjack too
lando55 4 months ago • 100%
F91W will never not be supported
lando55 4 months ago • 100%
Your girlfriend has birthmarks all over her body?
lando55 4 months ago • 100%
The ol' Uno reverso countersquat technique, I like it
lando55 4 months ago • 100%
It's an odd position to be in; I work in the private sector but my company deals almost exclusively with government and NGO contracts, so at times I feel like I'm public sector.
What I've noticed is that even though the desired outcome is nearly identical for both sectors, the buzz words associated with each is what determines who responds to my job applications. As an example:
Private: IaC and Policy-as-Code, supply chain and software composition analysis, SAST, DAST, etc.
Public: Compliance automation, risk management frameworks, risk quantification (this one has generated a lot of excitement recently), etc.
This is purely anecdotal, but you may find adjusting your resume to include some of these buzzwords as applicable to the industry to which you are applying may help you get your foot in the door.
To reiterate, yes I know in the end all of these companies strive toward the same goals, whether it be passing audits or being able to demonstrate prudent security practices to clients, sometimes the hiring manager is looking for specific terminology and will discard any applications that exclude it.
lando55 4 months ago • 100%
Make sure to wear your favorite Music Band tshirt.
lando55 4 months ago • 83%
LLM just autocomplete on steroid.
Funny you should say this. I only have anecdotal evidence from me and a few friends, but the general consensus is that autocomplete and predictive text are much worse now than they used to be.
lando55 4 months ago • 100%
Rs: "Individual freedoms! No government overreach!"
Also Rs: "Let's track these motherfuckers so they can be punished."
lando55 4 months ago • 100%
I can't remember, is Lithuania on Trump's "shithole" list?
lando55 4 months ago • 100%
The Nodfather
I'm thinking of applying, but I don't want to be typecast as Adam Driver
As with most films I went into this completely blind and it turned out to be one of my favorites of 2023. While not super original, the acting is top notch, set design is phenomenal, and atmosphere is pretty unsettling at times. *** Mild Spoilers *** Creepy monster design will make you check the closets tonight. Anyone with kids might find this one tough to watch in some parts.
I am a hobbyist, and my job will probably never require me to design and print anything for work. I do really enjoy the process of conceptualizing, designing, and printing, and have done so for myself and some close acquaintances. I've spent many hours/days learning the tools of the trade and was wondering if there was an opportunity to make some money as a side gig. Has anyone been successful doing this, and how did you go about it? Here are a couple of my early designs, I plan to upload more once I clean things up a bit. https://www.thingiverse.com/landon8848/designs