I think you are really understating it. I believe Chandler, AZ has been Waymo's proving grounds for years, and according to this article (https://www.wsj.com/us-news/waymo-phoenix-arizona-self-drivi...) the Phoenix area is the leader of autonomous vehicle service.
Is there some documentation about this somewhere? I actually own both level1techs DP 1.4 KVM 4-computer/1 monitor switch and that new USB KM switch, so I'm familiar with their products.. but I'm not aware that their KVM does anything special other than support high response rates (where most KVM's only do 60hz) and passthrough USB properly.
I think WAF is really a bigger set of tools now (bot protection, IP reputation, L7 DDoS/rate limiting, API restrictions) than just signatures. Virtual patching is also incredibly important and there's really no other security tool that gives you the granularity to restrict something like the values of some param on a specific path of your app, but only when some cookie exists.
I don't think the performance concerns here are accurate. I think these days most people are using vendors own cloud infra (Akamai, Cloudflare, F5, Imperva, etc), but even if you are using WAF on-prem, F5 and Imperva sell purpose built hardware that have no problem handling tons of requests. Most WAF's also have weighted signatures these days and won't just fire on ${jndi. "${jndi" might give 5pts, while "org.apache.*" gives another 5, and maybe their threshold is set for 10 for blocking.
I have plenty of issues with WAF's and I would invest a lot more in developer training, but I think they still have their place.
This is exactly what happened to me. I worked from home for Wells Fargo for years prior to the pandemic. This year suddenly my status got changed and I was required to go into the office. First come first serve cubicles and none of my co-workers were even in the same state, let alone office. Years prior to the pandemic when I was in the office I had my own cubicle and could at least expect my chair would be the same and nobody had messed with the monitors on my desk. It's like working from an Internet cafe every day now.
The one I referred to is a TCL 55S405. It seems the only solution is to never connect it to the internet, or factory reset it and never connect. Once connected if you remove the network details, it will blink indefinitely (at least for many TCL models).
Amazing that their budget recommendation is the Roku TV. I can tell you from experience if you don't connect them to Wi-Fi there is an LED that will constantly blink on the bottom front of the TV, with no way to disable in software. So unless you like your TV with an electrical tape aesthetic, I would avoid Roku TV's.
There's two articles [1] now on the front page of HN from this bit-101.com domain and they both seem pretty basic for HN. The other one is just about some guy installing a third party CPU cooler. No new tech, nothing interesting about the cooler, he just found it works better than the stock one. This article walks through using a shell script he found on GitHub to virtualize MacOS and his install and his very unscientific opinions on performance. Where's the beef?
The title should really be changed, there is no confirmation they were hacked. I have an equally plausible theory -- You used the same username and password somewhere else that got hacked, or your credentials were stolen through some infostealing malware. Account takeover is a huge problem these days, it wouldn't surprise me if there is a tool out there written specifically to validate combo lists against Dell's website.
Customers: stripe, Red Bull, Kickstarter.. and MongoHQ. How meta. This hack could get a lot more interesting depending on how much code they could have obtained from those companies.
I was one of those people bitten by this last night. My client called and told me he was getting access denied when trying to upload files through his CMS. After some digging I found the S3 key had been revoked. This was concerning, as I hadn't touched the CMS code I wrote in like 3 years and I've had issues deploying old stuff to Heroku in the past. I really wish MongoHQ had contacted me first about revoking the keys.