Viewing profile — InitialBP

Let me correct this then: "Do product managers get to claim that they helped to make something?" I think product managers surely have a right to claim they "helped" to make somethi…

The restaurant comparison doesn't really hold up. The parent didn't go choose from a menu of new apps that they wanted AI to create. They discovered a problem or a feature that doe…

This is actually the exact opposite for me. Rubber tipped buds will not stay put in my ears when I move around, while the original airpods models sit within my ears and don't fall …

You should really remove the entire PDF of the book that you've shared on a public repo. No Starch Press is a gem and worth protecting.

Another example is Old School Runescape, who reverted back to an earlier save and has now diverged as an entirely separate game running with older systems as they lost a ton of pla…

This comes entirely down to the scope of the agreement for the assessment. Some teams are looking for you to identify and exploit vulns in order to demonstrate the potential impact…

I'm sure you are correct about being able to do some clever prompting or tricks to get it to print inappropriate stickers, but I believe in this case it may be OK. If you consider …

It sounds like that's a possibility, but why on earth would you take the time to setup a 3 node cluster of object storage for reliability and ignore one of the key tenants of what …

"If you select those people, what’s to keep them from creating a system that gives them ever more amounts of money, to the detriment of their constituents?" That is literally the s…

I'm not sure where you got a quote from, but CVS is advertising on their website without insurance that it costs far less. https://www.cvs.com/immunizations/flu?icid=immunizations-…

That is awful, but it doesn't lessen the impact of someone who right now has access to your email and or other accounts. China having your DNA profile is not near as impactful as s…

New macbooks with a notch hide icons underneath of the notch and those icons are completely inaccessible without installing 3rd party software to manage your status bar, or turning…

Defaulting a furnace to on certainly shouldn't be considered safe. What if it's leaking CO into your house, what if it gets dangerously hot and causes a fire? A thermostat and cont…

I have a nest and it's wired directly to your furnace via the thermostat control wires. While it is controllable via the cloud, even without wifi it continues to function.

I believe the CLI _does_ ask permission for each program trying to access it. The author's example includes a malicious vscode extension abusing the fact that he intentionally gran…

The “whole point” of 2fa is that even if someone knows your password they cannot login with just credentials. Compromising or stealing a device is a significant escalation from gue…

https://news.ycombinator.com/item?id=44259556 I posted another comment explaining why 1Password Vault with both a password and a OTP code is still secure, but in short it does not …

Two Factor doesn't mean 2 devices. Two factor generally has been thought of as "something you know, and something you have." Let's do a quick threat model on putting both passwords…

Not sure which ranger you're talking about - but if you mean the 6ft one, 18 inches of bed length is definitely noticeable. It's also definitely possible to haul all those things w…

I think that you're looking at extremes exclusively when it comes to your assessment. I live in a "city" in WV and need my truck all the time to get to rural areas, but that doesn'…

A company that has to "follow the rules" is way less desirable to work for then a company that embraces the spirit of the rules. I'm in the US so can't really speak for companies i…

Glad to hear you guys are making progress. Password rotation is definitely more of a hindrance than a help and is a big reason that you end up with Spring2025! style passwords for …

I'm a former red teamer - Credential spraying attacks are incredibly successful on a business that has at least a few hundred employees. Many employees not only aren't aware of why…

Because they have evidence "in writing" that everyone at the gym had to pass a test that proves they know how to properly and securely belay a climber. In the event that there is a…