HackerTrans
トップ新着トレンドコメント過去質問紹介求人

ivanmontillam

837 カルマ登録 6 年前
My blog at: https://www.ivanmontilla.com/

投稿

Leonid Radvinsky Has Died

bloomberg.com
5 ポイント·投稿者 ivanmontillam·4 か月前·0 コメント

GitHub Bans Vmfunc

twitter.com
5 ポイント·投稿者 ivanmontillam·9 か月前·5 コメント

コメント

ivanmontillam
·3 日前·議論
[flagged]
ivanmontillam
·3 日前·議論
Not needing to be at the top of his game anymore makes anyone lose that sharpness. As you just said, he doesn't need to fight New York politicians anymore.

I stopped coding for the past year or so and I'm considering going back because I definitely feel my own sharpness lost.
ivanmontillam
·3 日前·議論
I do that too, and meditate if YouTube wounded themselves by adding that feature.

View rates must have dipped for a percentage we don't know of, but definitely made a dent.
ivanmontillam
·11 日前·議論
Though you have a physical copy of the game, I don't discount a future where a console refuses to load a physical copy of the game because DRM impedes it. Much like when short-lived TLS certificates expire on their own, even by being offline.

Physical copies of games have in their EULA that the game is licensed to you, so theoretically they could still disable it.

Precedent? BlackBerry phones refused to connect to WiFi if you didn't pay for your mobile data plan. It became a 2G brick.
ivanmontillam
·12 日前·議論
I fondly remember Backtrack 2, running as a Live distro. I remember going to university labs where a teacher taught us a couple of techniques or so. Great days.
ivanmontillam
·12 日前·議論
That's such an unfortunate name for a good, reputable distro.
ivanmontillam
·15 日前·議論
For JSON serialization, which doesn't support fixed-point precision it does.

Floating-point precision has too many gotchas for being suitable to store Decimal types, especially for the Currency use case.
ivanmontillam
·15 日前·議論
A string type. As parent says: it completely bypasses the problem. Save the numbers between double quotes and be done with it.
ivanmontillam
·17 日前·議論
This.

If you want to be a security vendor reseller, just make sure to sell to orgs that have a compliance requirement, either by law or similar.

Do you sell firewalls? sell them to banks or something. Anti-malware endpoints? Insurances too. SIEMs? payment gateways for their PCI DSS environments.

Price it just below what would be the fine for not complying, that way you maximize the invoice.

I stopped playing the security vendor reseller game because it got too boring this way to make money.
ivanmontillam
·18 日前·議論
This reminds me of these enterprise solutions to prevent data leakage, Data Loss Prevention tools (Safetica, Forcepoint, etc.).

Could this be adapted to inherit DLP policies? I have a sample use case, for example:

- Some DLP customers don't need full name protection but might need to prevent credit card PAN numbers from being leaked, per a PCI DSS compliance standard. Expiration dates don't need protection, and only the first 6 and last 4 numbers of a credit card can be shown; CVV2 is off the table, of course.

By checking out the repo, I know this can be configured manually, but can you make it so that it inherits DLP configuration instead of manual configuration? This could considerably boost enterprise adoption.

Big companies don't want to keep manual maintenance of a separate tool, whereas if they adopt it and "just works" with their existing ecosystem, that's an easy win.

This is easily, easily something you could sell as a business exit to a DLP company, because it's one of the "limbs" of protection they offer.
ivanmontillam
·27 日前·議論
yeah, but who's to say Fox is gonna screw up this one?

Like the government saying: "Sorry Fox, you cannot have this one, this one is too good for your dinosaur management."

Since that's a very dangerous government hand meddling, I guess the correct move is to let it happen (to our liking or not).
ivanmontillam
·27 日前·議論
If the spirit of the antitrust law is to protect consumers from enshittification, then yes.

But as written to the letter of the law, no, as this would not create a monopoly. More consolidation yes, but a monopoly technically not.
ivanmontillam
·30 日前·議論
WhatsApp got toxic also.

Statuses cannot be disabled, so the little notification dot is always there (I solved that by archiving everyone's statuses) and the phone call feature cannot start a recording when you get called. If you need to record a call you need to do so separately.

If for some reason you want to stop using WhatsApp, you just cannot. You socially exclude yourself.

Most people you know are there so you cannot just leave it. Some companies run their business there. Some government services and banks have a WhatsApp chat bot, and don't accept email or phone calls anymore.

I wish I could fully leave WhatsApp, but I can't without paying a social price. The network effects are a straitjacket.
ivanmontillam
·30 日前·議論
Adding to the 2nd point: It's one of the most watched APIs for suspicious activity ever.

Anything not from their vanilla app, the littlest dot on their charts will trigger severe alarms and actions.

Big correlation systems. The safest path used to be to automate the app itself, through mobile automation, but they even got too sensitive to that.

I don't doubt the whole app has a behavioural analysis component, full screen size, much like a big "I am not a robot" checkbox.

Also, it's very likely their private APIs are CSRF-protected or similar.
ivanmontillam
·30 日前·議論
Pray for the organic, pay for the boost.

I realized months ago that social networks are distribution systems. Want acceleration? Pay.

There is little incentive to make anything viral/organically boosted.
ivanmontillam
·先月·議論
Yes! I had to search who Ralph Wiggum is, had I known I'd have undestood the humour hah!

I thought he was some mad Karpathy-tier ML scientist or something.
ivanmontillam
·先月·議論
You still need domain knowledge and a solid understanding of what you're doing/what you want to achieve.

If you don't have that, now that writing code is basically zero-cost now (in terms of time), you'll still be slow.
ivanmontillam
·先月·議論
I did not realize it's possible that AI could engage with a project in such a way that Brooks' Law becomes applicable. Fascinating.
ivanmontillam
·先月·議論
Not to kick dirt on their faces, but I also think Discord is just not the proper chat community open source projects should have.

Might be my IRC mind talking, but a proprietary service like Discord, or Slack, or even Telegram at times, is just not suitable for the target community, as there's often a data privacy concern.

I never had a Discord account, and I'm hoping I can keep that streak.
ivanmontillam
·先月·議論
Don't ask the why, ask the how. How did they get acceptance into an incubation stage with what you just mentioned?