Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
raminasi
Jan 25, 2005

a last drink with no ice
my first question was why the water treatment system needs to be connected to the internet in the first place

i’m not asking rhetorically, i don’t know anything about water treatment

Adbot
ADBOT LOVES YOU

raminasi
Jan 25, 2005

a last drink with no ice

Shaggar posted:

edge syncs its passwords to microsoft authenticator which you can use as an ios password manager

i do this, it became quite needs-suiting once microsoft fixed the edge bug that kept it from suggesting new strong passwords

raminasi
Jan 25, 2005

a last drink with no ice
logging failures i can see the particular stupid logic of (“we need it for troubleshooting”) but why on earth would you log a hashed password on success? what operational capability does that provide?

raminasi
Jan 25, 2005

a last drink with no ice
how is that even an “exploit.” “you can exploit the library to download and run arbitrary code by using the built-in feature designed to let you download and run arbitrary code.”

raminasi
Jan 25, 2005

a last drink with no ice

ate poo poo on live tv posted:

This seems like a fine question even if you are blind. As long as you have the clock defined as a mathematical construct, which it already is, it's a circle with discrete hours defined every 30 degree's and minutes defined every 6 degrees. Then you are just asking the person to do some geometry with the "cleverness" to understand how a clock works. For a millennial or a blind person who has no concept of an analog clock you just explicitly define the clock for them.

an interview question that uses a concept that is intimately familiar to one subset of respondents but alien to another seems risky from a fairness perspective. even if your explanation of an analog clock is really good, the people who need it explained are going to have to use part of their brain to for understanding it that the other group will be able to use on the programming problem itself.

raminasi
Jan 25, 2005

a last drink with no ice

Achmed Jones posted:

nah i misunderstood. "bottom" was for bdsm thing, not for "gay guy who prefers a certain type of sex". when read correctly it's fine

thanks for the correction!

fwiw i read “bottom” as the bdsm kind and had the same reaction because i didn’t realize that it was supposed to reference a specific archetype of sub rather than generalizing across the whole category

raminasi
Jan 25, 2005

a last drink with no ice

Subjunctive posted:

FB got a lot of education (including security education) mileage out of little posters above urinals and on the back of washroom stall doors. the qr codes were a little awkward over the urinals, but they always put one by the door or some other “safe” spot so you could reasonably aim your camera

the security education required you to scan a random QR code you found in a bathroom stall?

raminasi
Jan 25, 2005

a last drink with no ice

Lain Iwakura posted:

i have my full name on linkedin. it's useful for me to know if it is a robo email contacting me due to the inclusion of my middle name

my linkedin job title is "computer button pusher" and every once in a while i get recruiter spam about how i'd be a great fit for a computer button pusher role they know of

raminasi
Jan 25, 2005

a last drink with no ice
there's some ops guy at work who is trying to write some script to a monitor a thing. nobody has asked him for this. nobody wants it except him. but he's running into trouble because the only api that can be used to monitor it can't be invoked by an arbitrary script running somewhere. so he comes to me to ask my recommendation for how to handle it. he doesn't like my answer of "don't, nobody ask you to do this," and then we have this conversation:

him: how do backend services use this api?
me: their iam roles give them permission to do it
him: oh, can i get that permission attached to a role i can assume?
me: no
him: i'm pretty sure that's possible

no poo poo it's possible dude, i'm just not going to do it. this guy spends half his time complaining that my team builds things insufficiently securely and the other half of his time requesting nonsense like this.

raminasi
Jan 25, 2005

a last drink with no ice

mystes posted:

Obviously you should have said "you can but you may not"

yeah i have historically had a problem being blunt at work so i'm working on that and apparently overcorrecting sometimes

raminasi
Jan 25, 2005

a last drink with no ice

CommieGIR posted:

He gives you poo poo about insecurity and yet he wants to attach his monitoring script to the api and get elevated privileges to do so? Why can't he just do what he wants through log aggregation and monitoring of said logs?

for stupid historical reasons that are not his fault he doesn't have access to our logs. but this is because there's a huge loving wall between what he does and what we do, and the thing he's been told to do is throw some data over the wall (into an s3 bucket) and forget about it. but he wants to monitor everything we do with the data once he throws it over despite, again, him not being asked to do that in any way by anyone

raminasi
Jan 25, 2005

a last drink with no ice

maxwellhill posted:

sounds sketchy honestly

he is a sysadmin who wants to be a software engineer, thought he had a chance to do some software engineering, and is mad that we’re taking away his toy

nudgenudgetilt posted:

yeah, isn't ops job typically to provide visibility into the health of services?

i should not have used that term because it doesn’t mean the normal thing at my company

Main Paineframe posted:

if it's not his job to do it, claim you need his manager's signoff or something, so he wastes his boss's time with this poo poo instead of wasting your time.

at least as long as you're sure his manager isn't a gullible dumbass who'll be talked into it

oh, it’s not happening. our common management ancestor is the cto. this guy has zero leverage. and if he does talk someone important into backing him, whatever, i’ll do whatever stupid poo poo senior leadership asks for as long as my checks cash.

raminasi
Jan 25, 2005

a last drink with no ice

Chris Knight posted:

grandboss or great grandboss?

his grandboss, my great-grandboss. (he’s not a manager or anything, the reporting tree is just unbalanced)

raminasi
Jan 25, 2005

a last drink with no ice
at the london science museum many years ago there was an exhibit called "don't touch." it was a big metal column with a big sign reading "DON'T TOUCH" on it. it hummed with the sound of electricity. on the floor was a big sign with arrows pointing to it reading "DON'T TOUCH." there was a convenient bench nearby where you could sit and watch person after person walk up to it, touch it, and get angry that it shocked them.

raminasi
Jan 25, 2005

a last drink with no ice
i’m pretty drunk but i still genuinely do not understand running a plex server or client or any goddamn thing on a corporate machine

your work box is your work box, if you want to watch weird hentai or whatever do it on your personal machine. why is this difficult.

raminasi
Jan 25, 2005

a last drink with no ice

Pile Of Garbage posted:

literally never did that are you all high or something

your posts are bafflingly aggro to multiple people itt

raminasi
Jan 25, 2005

a last drink with no ice
win11 has played much nicer with multiple audio devices than win10 did for me

raminasi
Jan 25, 2005

a last drink with no ice
let’s all get really opinionated about a system we learned about five minutes ago entirely via a journalist’s third-hand attempt to explain a bespoke search algorithm

raminasi
Jan 25, 2005

a last drink with no ice
a couple of jobs ago one of the staff engineers started a voluntary salary survey and shared it to the entire company as his hackathon project. he was smart enough to only do it after he'd made himself unfireable, which was good, because the c-suite was incensed.

raminasi
Jan 25, 2005

a last drink with no ice

abigserve posted:

i don't think I've ever met anyone that actually liked splunk and by the same token I've never met anyone that didn't hate cisco so seems like a partnership that should work out really well

tbf it might actually work if Cisco basically bundles it with any of their devices or services somehow because there is no market demand for SIEM anymore, it's a fuckin dead concept

i like splunk. if i want to search for something in my logs i just type it and i when i want to visualize the search results i put the query into a widget and it just works.

raminasi
Jan 25, 2005

a last drink with no ice

well-read undead posted:

this is a super clear no-one-good-answer topic, because the characteristics of your deployment environment matter a huge amount. web app? fire poo poo out there, you can roll it back instantly if things go bad. mobile/desktop app? now a fix/rollback requires end users to receive an update, so you gotta be more careful. embedded software in an on prem device? lol idk how the gently caress that poo poo works at all

of course there’s an additional dimension of the sensitivity of the domain but that’s even more subjective

plus, in some domains, change risk can vary over time - the correct deployment philosophy might be different on black friday or new year’s eve than then it was the week before.

when reading someone else’s confident prescriptions about the correct way to do deployments, pay close attention to how well their circumstances match your own.

raminasi
Jan 25, 2005

a last drink with no ice
the one phishing test email i fell for was purportedly from hr right before halloween asking us to not wear inappropriate costumes on the holiday - and which included a link to pictures of past colleagues making bad costume choices. yeah, i clicked the "look at pictures of your racist and/or slutty coworkers" link. the only consequence was a popup calling me an idiot so i'm not mad.

raminasi
Jan 25, 2005

a last drink with no ice
a couple of jobs after that one the security team sent out an email announcing mandatory security training and the cto immediately followed it with an email saying "that was phishing, don't click it." it was not.

raminasi
Jan 25, 2005

a last drink with no ice

SlowBloke posted:

Once i grown tired of unifi bullshit, i moved to zyxel nebulaflex. If you feel that the government is watching you you can run them standalone, otherwise you can run them on cloud-based management.

what's poe's law for technology companies

raminasi
Jan 25, 2005

a last drink with no ice

Cybernetic Vermin posted:

yep, agreed. in fact i'll also accept the extension on the technology side "what we're you *expecting* it to do?" as far as social impact

if you don't understand anything about united states policing you probably think it provides timely information to competent, upstanding cops, thereby allowing them to intervene immediately after gunfire, which makes the community safer for everyone

raminasi
Jan 25, 2005

a last drink with no ice

Last Chance posted:

why is Zuckerberg such a huge piece of poo poo?

billionaires are pieces of poo poo, tech bros are pieces of poo poo, and 20-year-olds (where his emotional development was frozen by $$$) are pieces of poo poo

raminasi
Jan 25, 2005

a last drink with no ice
to be a fly on the wall right now of the office of whoever spent all the time and energy to set this up

raminasi
Jan 25, 2005

a last drink with no ice

PIZZA.BAT posted:

genuine question: do people really think this is a state actor? the patience definitely points to that but fumbling it in the way they did at the last minute looks like a lack of discipline i wouldn't expect to see. idk i'm not at all well versed in this area so maybe they fumble things like this all the time

i know it's weird to see a government organization act incompetently but

raminasi
Jan 25, 2005

a last drink with no ice

JunkDeluxe posted:

My favourite is the 2 hr work-item in the afternoon going through all our repo's to check if any devs accidentally pushed secrets.

why don't you have a robot do this

Adbot
ADBOT LOVES YOU

raminasi
Jan 25, 2005

a last drink with no ice

Volmarias posted:

Why would you trust a robot to keep your secrets???

the robot doesn't need to keep any secrets, it just needs to know how to identify them. e.g. if it sees GITHUB_TOKEN=hex-lookin-thing it can try to use the token to do a github and tell you if it worked.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply