Viewing profile — preinheimer

Great post. Anyone who talks, and actually implements, client key rotation gets a +1 from me. Far too many systems don’t have a zero downtime key rotation.

You want to use a lot of electricity? Great! We sell electricity. We will need cash in advance to handle some upgrades, rather than passing those costs on to other rate payers.

Stripe is at I. I think they’ll ipo.

Lots of endowments come with strings attached. We made a charitable donation to a local university for them to buy some specific science outreach equipment, they bought it. This al…

No, they came up with some legal theory in which they’d bought the assets of some company, including the company’s ownership of some art, but not obligations like paying royalties.…

> I have absolutely no doubts a court would consider it impossible to transfer goods under consignment to a different entity free of the burden of the consignment contract. Reminds…

IPInfo did a report on this: https://ipinfo.io/blog/vpn-location-mismatch-report From our side we noticed a VPN provider had a location we'd been trying to get, but had been unable…

I mean, most “residential proxy” providers are selling access to hacked devices, or sneaky plugins https://medium.com/@xianghangmi/resident-evil-understanding-... Technical paper: …

I discovered Terry Pratchett's books my summer in New York. I was a university student, and I'd gotten a job at eDonkey doing technical support. I lived in a crappy apartment in Br…

Heads up: there's audio. It does add something.

I think the OP is presenting themselves as the cryptographer, and the authors behind Forgejo as the amateur. At this point they've only filled one envelope but believe there is man…

They may not advertise “getting you there at 1.2x legal speed” but the sooner they drop you off, the sooner they can get another fare. Over a whole fleet it will add up to changing…

There’s an old cryptography story. A cryptographer friend tells the story of an amateur who kept bothering him with the cipher he invented. The cryptographer would break the cipher…

We used to run some servers in a colo, we had 4u. The problem with actually owning hardware is that you need a lot of it, and need to be prepared to manage things like upgrading fi…

I find short form content really addictive. It’s so easy for me to lose half an hour to it, and at the end just feel like I’ve wasted my time. Lacking better options I’ve turned on…

This feels like it would run against the “I bought my device, I should control how it behaves” line of thinking.

Stripe supports 3d secure and has for years. https://stripe.com/en-ca/guides/3d-secure-2

There was a research paper several years ago showing that the "residential IP" stuff is powered by botnets and compromised devices. Luminati is specifically called out. Paper: http…

I mean it’s a template, but in theory someone went and checked stuff. Did you actually have a quarterly security team meeting? Was there minutes? Was there an invite? Did someone a…

We did SOC 2 a few years ago, I'm glad we did it. In my mind getting a clean report required three kinds of work: 1. Work that actively improved our security posture. 2. Work that …

Looking at our SOC 2 report (we don't use Delve, our auditor isn't on their list) I don't think this is quite the smoking gun it might look like if you're not reading SOC 2 reports…

What about a “right to create act” giving people the right to create things and not have their creation be ingested to train ai for billion dollar companies?

> AI moderation is currently a "black box" that prioritizes safety over accuracy to an extreme degree. I think there's a wide spread in how that's implemented. I would certainly no…

You're right. I agree.

I think it’s important to test these systems. Let some % of candidates who get this wrong through to the next stage and see what happens. Does failing this test actually correlate …