Viewing profile — Msurrow

Honest question: For let’s say a senior developer having to go through all of these steps for the model to implement a feature: > Product Design > System Architecture > Program Des…

> month ago there was a wave of posts and tweets about engineers walking around cafes and parks with their MacBooks propped half-open, as fully closing the lid forces sleep that st…

> They would NEVER admit any failure in their society, no matter the hard evidence in front of their eyes. That must be the swedes. Danes complain constantly, about everything. Edi…

I think he meant that at that time all users were programmers. Yes, _all_ .

I agree that yes most just want PnP and basically don’t care about security. But it seemed on the posts above that there was an engineering complexity, and a robot vaccum needs loc…

I have not knowledge of this kind of software dev/hw production, so can you please explain why the units cant just be born with a default pass and then have the setup process (whic…

Yeah was thinking the same thing. I wonder if the author didnt known that passpory chip == fingerprint. And FP is a much worse modality to have registered because, as opposed to Fa…

That that is exactly why [more] regulation is necessary! Regulation is not done with the purpose of preventing companies from profits. It is done because companies cannot be expect…

No, they are not. Doesn’t matter how many LoC; it only take 1 LoC to introduce a vulnerability. Wireguard is a protocol. So what implementation is “very intentional about its choic…

You are still implying that wireguard are somehow different from ssh in its suceptibilty to vulnerabilities existing or being introduced into its codebase. And it simply is not. Ed…

I’m calling it consultant speak because your response to an argument is to bring up something else, instead of actually responding. The same with this last reply; you can keep thro…

Sure, no one said it wasnt layered. But saying ssh is a risk “on principle” due to possible vulnerabilities, and then implying that if wireguard is used then that risk isnt there i…

But doesn’t your argument that the principal risk [with ssh] is vulnerabilities also apply to the alternatives you say is best practice? Firewalling off ssh (but not http(s)) has t…

You cant.

Depends on environment variable P=NP

> *If you don't want your LG TV quietly snooping on what you watch and using it to serve you ads, here's how to turn Live Plus off. If LG makes money from snooping on you, what mak…

Yes, it does. First of all: occam's razor. Political theatrics seems simpler than the US defence/intelligence forces sudenly realizing that drones can be launched from ships. Esp. …

The construction on some of these windmill farms started years ago. Before that permits & legal has been in the works for a long time. This surely included security clearances. The…

Man, I got my rope out for this..

If the employer says so and I do so anyway then that’s a employment issue. I still have to follow company rules. But the point is that the company needs to delete the collected dat…

Yes. GDPR covers all handling of PII that a company does. And its sort of default deny, meaning that a company is not allowed to handle (process and/or store) your data UNLESS it h…

If that’s the case why give the OSS project any time to fix at all before public disclosure? They should just publish immediately, no? Warn other users asap.

My takeaway from the article was not that the report was a problem, but a change in approach from Google that they’d disclose publicly after X days, regardless of if the project ha…

In addition to your point, it seems obvious that disclosure policy for FOSS should be “when patch available” and not static X days. The security issue should certainly be disclosed…

The OP/article is very clear and very direct on what the problems are. The response is so typical american conflict-shy “let’s talk so we can slowly dimish your critique, and also …