Viewing profile — drablyechoes

There's this: https://cbeci.org/cbeci/comparisons

We use `sops`[1] to do this and it works really well. There is a Google Cloud KMS keyring (for typical usage) and a GPG key (for emergency/offline usage) set up to handle the encry…

The moral, legal and technical imperative to protect this data is 100% on the company storing this data. Even if the onus of protecting sensitive personal information were passed o…

A lot of concepts that originated in plan 9 have been widely adopted by modern unix-like operating systems, most notably the /proc file system, so in a certain sense I would say th…

Presumably because they do not want huge segments of the human population to die because they are unable to afford access to the literally most basic necessity for life on this pla…

Maintaining your own email infrastructure is a security nightmare on its own right, you are probably better off using Gmail and just GPG encrypting everything unless you really kno…

Way too common. So many clients I've dealt with have a deployment workflow that is some variation of this.

Fun fact: a monoid is a category with one object.

[flagged]

Amphetamines (used to treat ADHD and narcolepsy) and Benzodiazepines (used to treat anxiety disorders) are both well-known to be addictive. Benzodiazepines in particular can have f…

In my experience, the sense of "enlightenment" that came from experiments with psychedelic drugs arise from the realization that a very small quantity of chemicals (a dose of LSD i…

Some people have underlying neurological issues that can manifest in teenage/early adulthood years independently of drug use, although use of psychedelic drugs does tend to exacerb…

The real difference is that a cancer diagnosis is probative (based on measurable, detectable underlying physical pathology) whereas a psychiatric diagnosis is not.

I think a big part of "mathematical maturity" is knowing how important it is to have someone else look over your proofs. Of course you can learn a ton on your own by reading and wo…

It is really hard to truly self-study in mathematics. Going through the opencourseware and reading textbooks (working as many exercises as you can, of course) will get you only so …

Topics to study should include: Unix IPC, signals and syscalls, filesystem and kernel implementation details, and network/socket programming. Being able to read and write C program…

There are also excellent free and open source frontend interfaces for vault that are out there, such as vault-ui and goldfish. We have used both at my org, since the HashiCorp ente…

You can also set up vault to encrypt each shard of the root key with the GPG pubkey for each administrator before dumping them to output. This way, plaintext shards of the root key…

> Users won't care whether or not they are using something decentralized This is a good point, and it is demonstrably the case even among cryptocurrency users who have a coinbase w…

There is more than one way to construct a synthetic identity, but in most cases that I've been aware of, a stolen SSN is used to construct the totally fake identity. Using a comple…

The SSN of someone "off the grid" would actually be perfect for doing what is called synthetic identity fraud. If a given SSN has no credit history, you can make up a fictitious pe…

It is also worth noting that agriculture itself (especially in the developing world) is a major contributing factor to climate change. Governments in these countries are either una…

Heh, I have been writing "crappy scheme" in Perl (and more recently JS) for years. Perl is actually kind of nice to use as a functional programming language, once you get used to t…

The last time I used pine was sometime in 2012 or so, then I switched to mutt. This was how everybody was doing it in that particular organization, for some reason. The only way to…

I have used Makefiles for a lot of little things over the years. One of the latest things I have found it useful for is automating deployment of websites via Jenkins jobs. It is a …