Viewing profile — ragona

Definitely, but when we're running around sprinkling PQ algorithms all over the place, it's on top of the asymmetric bits, not replacing the "boring" stuff like your symmetrically …

> encrypts it with a static key What type of static key? If it's just a big symmetric key that isn't derived from an asymmetric handshake of some type then no, that's not our curre…

I don't think that's quite right. PQ attacks focus on the "trapdoor" functions in asymmetric cryptography, _not_ the symmetric encryption that happens after key negotiation. The cu…

(Note; I also work for OpenAI Security — though I’ve not worked on our bounty program for some time. These just my thoughts and experiences.) I believe the author was referring to …

Yeah if you click into the report per industry it shows a totally different number -- $1.7T, which is obviously smaller than the ~$5T that the same site lists for oil and gas.

The "eval" phase is done after a model is trained to assess its performance on whatever tasks you wanted it to do. I think this is basically saying, "don't evaluate on the entire c…

It’s handy for uploading a dataset and having it play with it.

> it's about being genuine I think this is an incredibly important lesson. Don't lie, _actually_ find something good to say. It's a goddamned super power, and it's also very good f…

I agree that complexity and quality can be unrelated. I think that quality is often misinterpreted as beauty, or brevity, or cleverness — and those are not the same as quality, in …

The CDK and Pulumi teams must be truly delighted by this move.

You don’t think handling edge cases and errors is fundamentally necessary?

I think the problem with this assertion is that over time "good" code often ends up littered with important conditionals to handle cases that upset the general readability and expr…

Yeah I'm sure there are counter-examples. My experience is that I worked at Amazon from 2012-2020, and I recall trying to shut down a project in maybe 2013 and it was _incredibly_ …

Dang, I'm actually surprisingly sad about this. DPReview is _the_ site for extremely detailed analysis of cameras. When I want to buy something I go through their report first, and…

I bet it's easy to make $500/day briefly, and hard to sustain it. Catalytic converters have the benefit of not requiring you to break into someone's house where risk of being caugh…

> poor IAM policy and role modeling This is a bad take. Making good IAM Roles and Policies is incredibly complicated if you have a complicated account. You WILL get it wrong. This …

You're missing the core challenge of JWTs, which is revocation. If you just check the signature then users can't log out.

> understood that managing down is much more important than managing up and (3) knew how to say "no" to upper management effectively. Wait, saying "no" to upper management _is_ man…

I get it -- it's such a trap to say, "well, does it!" But in this particular case, I actually think they're walking the walk of having small teams that act like startups. You end u…

I've started to believe that product engineers should manage their own infrastructure. I think the key ingredient is _isolation_, so that it's not that they have to figure out how …

I have the worst news for you about blockchains.

There are entities other than the government that you might want to hide money from.

Your certificate is bad; it's serving the Squarespace cert for the justvanilla domain.

I'd say distributed is about redundancy and scale within a single entity's infrastructure, where as decentralized implies multiple entities working together.