Viewing profile — DrRobinson

See `command:`

This comment seems out of place to me. It brings up (claimed) political issues irrelevant to the topic at hand. The account is recently created and this is the first and only comme…

Personally I disagree, I think `--` is very intuitive. Maybe it isn't super common knowledge, but `--` is in line with the POSIX argument parsing convention[0] and is used by many …

I think some of the information here is misleading and a bit unfair. > being too intrusive and affecting their workflow Kolide is a reporting tool, it doesn't for example remove fi…

It's news _from_ 2023, not news about things that happened only in 2023. Things might have improved starting years ago but the research to show it wasn't finished until this year, …

> Terraform doesn't have a test suite- Grunt made Terratest They have experimental support: https://developer.hashicorp.com/terraform/language/modules/t...

Great to see your commitment but I'm also curious why you, unlike some other companies, have chosen not to support with any full time employees? It seems your business is largely b…

Trakt.tv is a good alternative to IMDb btw

This comment seems overly harsh in my opinion. I don't think the author comes off as a self-involved twat and I generally found the website helpful. > Neither me nor my coworkers g…

This is a scam rather than a phishing attack. They've set up fake stores to steal money, not a phishing site to steal credentials.

This would require you or the person in the data center to know which customer is using which disk. And data isn't stored on just one disk, it's spread out over multiple disks and …

> This is a different argument. Part of it, maybe. But the point about it reducing risk by very little is true. > Did you see other comments in this thread, for example someone bou…

> Do you bother with Spectre mitigations since Amazon policy is to deny service to those who would attack you? I don't go out of my way to mitigate that, no. Have you seen any real…

> Definitely not "close to useless". It lowers the risk a minimum amount (which makes it not useless, but close to it.) Your resources are limited, so you want to prioritize action…

I agree. The problem is mainly going from an infrastructure that's not setup like this, to an infrastructure that is. Usually you inherit an infrastructure, and it's usually not se…

> Saying that something is hard to clean up later isn't “close to useless and potentially harmful” The "close to useless" is based on it lowering any risk with very little, it's no…

> And yes, default service KMS keys are unique per account (why would you expect otherwise?). I expect it to be unique per account, but I would be happy if it was possible to share…

> It’s more that the author is arguing that their inexperience is universally applicable. “Why do banks have guards, I’ve never had someone break into my couch cushions?” That was …

I agree calling it snake oil is a bit too much, because I know there are benefits. As I mention elsewhere in the thread, I use encryption, but I don't consider it to be of high val…

You put it really well, I think that's close to how I think about it. Compliance has good sides too though. For example, they force you to think about areas your intuition might ot…

> Hubris of an inexperienced engineer imho. This seems unnecessarily hostile. I've worked with cloud infrastructure and security for more than 10 years. If you have experience of u…

I think this is a valid point, though I don't expect the people in the datacenter to know which customer stores data on which disks. There could of course still be someone working …