mdb333

3 か月前議論

I could never quite get too into the game because of such viciousness -- you really had to grind!

3 か月前議論

Hackaday is still pretty cool if you're into technogadgets and the like

3 か月前議論

so true, re: patience

I was just thinking back the other day about BBS days and how frustrating a busy signal could be, or connection time limits, etc.

mdb333

6 か月前議論

is grad school an option?

not a solution to the problem as you presented it... but a solution none the less: You'll spend your time learning more, developing more skills, more opportunities for internships, networking, growth, etc. and hopefully when your done in a year or two the job market is better and you're entering at a high compensation level.

mdb333

7 か月前議論

yes!!!

mdb333

12 か月前議論

Looks like you submitted opposition to their new registration (Deepki) and then they retaliated by applying for cancellation to your existing mark (Deepkit)?

are they actually pursuing use of "Deepkit" or possibly did you just piss them off? Either way, I wouldn't expect to win anything going up these majors. Also, isn't clear there's any tangible benefit even if you were to win appeal.

mdb333

昨年議論

surprised no mention of Craigslist? or is it not an "Internet artifact" because it remains in essentially its original form...?

mdb333

昨年議論

"Alarmingly, a Department of Energy server allowed anonymous login with write access, raising the risk of hackers uploading malicious code or installing backdoors for persistent network access."

I sincerely hope that's a honeypot

mdb333

3 年前議論

I found it really hard to read this as I kept envisioning Alex P. Keaton interrupting, "but Mallory..." and then taking over the whole conversation after she stormed off upstairs.

mdb333

4 年前議論

sorta related: I remember first day of CS101 class circa 1998... professor starts off with question, "why are you here? why are you all here?"

After going around and replying "no" to a half dozen or so different individuals with increasingly philosophical responses he broke it down for us with, "you're all here because 60k! You're going to graduate with a computer science degree and make 60k a year!"

to even imagine that was supposed to be an inspiring number back then is pretty laughable. I was already making as much doing chinsy web dev stuff.

It was a different time for sure. There were no (or very few) laptops, you took notes on paper, you went to the computer labs to do work (with old sparcstations and such) or you remoted in to your shell and used emacs and gdb. Pretty simple times.

mdb333

4 年前議論

huh... never knew they were the same shop responsible for Lemmings. what an awesome bunch!

mdb333

4 年前議論

Basically the same article that ran ~6 months back...

Anyhow, I happened to interview with these folks a year or two ago:

   20% interesting concept 
   80% red flags

At that time I could barely find anything more than tenuous links to Sam Altman. Seems like maybe he's upped his role as they're getting into bigger $$$ raises.

mdb333

5 年前議論

Unlimited PTO is fundamentally use it or lose it... which is illegal (at least here in Cali). I don't know why the Division of Labor hasn't come out and said as much yet.

I filed a claim against previous employer (several years back before everybody was on the unlimited bandwagon) with an 'unlimited' PTO and ended up with ~20k awarded. Process took forever, and of course the devil is in the details with employment docs, agreements, etc... but worth pursuing if you're still salty over the situation.

Prior to that I found myself in a similar situation... basically getting the boot for availing myself of sick leave when my family needed me. Fortunately, I got a big chunk of cash upon leaving and it gave me a much needed boost for moving on. So best advice I can give is to not let the situation keep you down or hold you back. And in general, a good reminder: HR has one job and its not to protect you the employee.

mdb333

5 年前議論

NM... presume it's due to the news re: ExpressVPN --> Kape

mdb333

5 年前議論

Curious what was the impetus for this statement? Rumors about selling out or something else?

mdb333

5 年前議論

ON24 (NYSE: ONTF) | Engineering, Operations, and Security roles | SF/Charlotte/Remote | Full-time

Variety of roles open at ON24 as we continue to scale up post-IPO: http://jobs.jobvite.com/on24/jobs

Security Engineer-- https://jobs.jobvite.com/on24/job/o3uYffwu

Compliance Analyst-- https://jobs.jobvite.com/on24/job/o5uYffww

Linux/Ansible System Administrator-- https://jobs.jobvite.com/on24/job/oHsCffwK

Network Engineer-- https://jobs.jobvite.com/on24/job/oT4ydfws

Sr. Director Program Management-- https://jobs.jobvite.com/on24/job/oDoAgfwB

SRE Manager-- https://jobs.jobvite.com/on24/job/obsAgfwd

mdb333

5 年前議論

ON24 (NYSE: ONTF) | Engineering, Operations, and Security roles | SF/Charlotte/Remote | Full-time

Variety of roles open at ON24 as we continue to scale up post IPO: http://jobs.jobvite.com/on24/jobs

Also hiring Security Engineer and Compliance Specialist role which aren't posted yet but em me @ matt dot bateman at on24 dot com and I'll send specifics.

Senior Product Manager - http://jobs.jobvite.com/on24/job/oygCffwp

Senior QA Engineer - http://jobs.jobvite.com/on24/job/o9vJefwl

Software Engineer (Analytics) - http://jobs.jobvite.com/on24/job/omBuefwp

Sr. Cloud Engineer - http://jobs.jobvite.com/on24/job/obSwefwx

UX Designer - http://jobs.jobvite.com/on24/job/oQb3dfw1

Linux/Ansible System Administrator - http://jobs.jobvite.com/on24/job/oHsCffwK

Network Engineer - http://jobs.jobvite.com/on24/job/oT4ydfws

mdb333

5 年前議論

LOL not that long ago (late 90s early 00s in my case), student ID number WAS your SSN... [facepalm]

mdb333

6 年前議論

pretty straightforward, but does it scale? and can the answers be captured objectively in order to inform consistent decision making?

i.e. this is fine for a one shot review, but would be tough to operationalize...

Plus, keep in mind diagrams can be critical. If you're going to be sharing sensitive data with this vendor you're going to need to know and have documented how that data will flow, where it will persist, etc. Can be a lot easier to capture in a diagram than narrative format.

There is variety of other FOSS type stuff out there that is useful for anyone that needs more:

Vendor Security Alliance -- https://www.vendorsecurityalliance.org/downloadQuestionaire (disclaimer: I'm an advisor @VSA)

CSA CAIQ -- https://cloudsecurityalliance.org/artifacts/consensus-assess...

SIG --NM, looks like this is closed/member only now, but if you can track it down (SIG Lite/Full, Standard Information Gathering) its ridiculously comprehensive.

Google VSAQ -- https://github.com/google/vsaq

As someone who deals with both sides (asking the questions to vendors, and answering them for prospect customers) I can say they mostly all suck pretty hard... and that's probably why there's a whole ecosystem of vendors in this space nowadays.

mdb333

6 年前議論

and to be fair, Information Security is generally accepted to cover Confidentiality, Integrity, and Availability (see: CIA Triad)... so DR/BC are definitely within scope.

投稿

Flipper Zero can be used to crash iPhones running iOS 17

Security firm Keeper sues news reporter over vulnerability story

Votebook – A proposal for a blockchain-based electronic voting system [pdf]

コメント