You're right that FIM assumes the possibility of compromise, but that's exactly the point - it's a detection control, not a prevention control. Prevention (read-only mounts, immutable bits, restrictive permissions, etc.) is necessary but not sufficient. In practice, attackers often find ways around those measures - for example, through misconfigured deployments, command injection, supply chain attacks, or overly broad privileges.
File Integrity Monitoring gives you a way to prove whether critical code or configuration has been changed after deployment. That’s valuable not only for security investigations but also for compliance.
For example, PCI DSS (Payment Card Industry Data Security Standard) explicitly requires this. Requirement 11.5.2 states:
"Deploy a change-detection mechanism (for example, file-integrity monitoring tools) to alert personnel to unauthorized modification of critical content files, configuration files, or system binaries."
Sure, a "sufficiently advanced" attacker could try to tamper with the monitoring tool, but (1) defense in depth is about making that harder, and (2) good implementations isolate the baseline and reports (e.g. write-only to S3, read-only on app servers), which raises the bar considerably.
> Hospitals led by doctors outperform those run by non-medical managers. Universities, business schools and academic departments led by good scholars outperform those that are not. The best sports teams – using data from 15,000 basketball games and 60 years of Formula 1 racing – are led by great former players or run by racing specialists.
IMO, Resumes attempt to solve a problem that precedes what some consider the actual hiring process: the need to quickly screen thousands of candidates.
Unfortunately, this approach has flaws. The person doing the initial screening may not have a deep understanding of the role and is often working with secondary information. This can sometimes lead to them becoming gatekeepers, filtering based on superficial criteria (like career gaps, job switches, etc)
IMO, resumes, while ideally intended as experience summaries, often function as gatekeeper proxies, filtering candidates based on arbitrary criteria rather than actual potential. Unfortunately, I too can't think of a good alternative solution that can scale well.
Looks like your website has a bug - try entering a house number which is non integer (Like say B-123) Submission fails with error:
```
{"statusCode":400,"error":"Bad Request","message":"ValidationError","data":{"errors":{"houseNumber":["houseNumber must be a `number` type, but the final value was: `NaN` (cast from the value `\"B-123\"`)."]}}}
```
It's wrong to assume that a house number is always an integer. My address has an alphanumeric house number. I have been in apartments without a house number (Instead they may have an alphabetical name. Something like XYZ House)
Agreed. Anyone who has not tried Ember should check out their getting started guide: https://guides.emberjs.com/release/getting-started/quick-sta....
Also, I highly recommend `ember-concurrency: An Ember Addon that makes it easy to write concise, robust, and beautiful asynchronous code.`
LinkedIn's Trust Engineering team is looking for Frontend developers who are eager to tackle the challenges of a rapidly growing web application with millions of daily visitors.
- 8+ years of hands on experience with semantic HTML, CSS and JavaScript.
- Ability and eagerness to program progressive, single-page applications (Ember / React / Angular / Backbone)
Every two minutes, a woman dies from complications related to pregnancy and childbirth. More than 99% of these deaths occur in developing countries. We are passionate about social healthcare and are working with a vision to see the world where no mother and newborn dies during the pregnancy period. We are working on innovative products to solve the grass root level problems related to maternal and child health-care.
If you are someone interested in end-to-end mobile application development and can translate designs and wireframes into high-quality code, please contact abhas [at] janitri.in - Send your resume with 'Hacker News' in subject line.
Every two minutes, a woman dies from complications related to pregnancy and childbirth. More than 99% of these deaths occur in developing countries. We are passionate about social healthcare and are working with a vision to see the world where no mother and newborn dies during the pregnancy period. We are working on innovative products to solve the grass root level problems related to maternal and child health-care.
If you are someone interested in end-to-end mobile application development and can translate designs and wireframes into high-quality code, please contact abhas [at] janitri.in - Send your resume with 'Hacker News' in subject line.
Every two minutes, a woman dies from complications related to pregnancy and childbirth. More than 99% of these deaths occur in developing countries. We are passionate about social healthcare and are working with a vision to see the world where no mother and newborn dies during the pregnancy period. We are working on innovative products to solve the grass root level problems related to maternal and child health-care.
If you are someone interested in end-to-end mobile application development and can translate designs and wireframes into high-quality code, please contact abhas [at] janitri.in - Send your resume with 'Hacker News' in subject line.
File Integrity Monitoring gives you a way to prove whether critical code or configuration has been changed after deployment. That’s valuable not only for security investigations but also for compliance.
For example, PCI DSS (Payment Card Industry Data Security Standard) explicitly requires this. Requirement 11.5.2 states:
"Deploy a change-detection mechanism (for example, file-integrity monitoring tools) to alert personnel to unauthorized modification of critical content files, configuration files, or system binaries."
Sure, a "sufficiently advanced" attacker could try to tamper with the monitoring tool, but (1) defense in depth is about making that harder, and (2) good implementations isolate the baseline and reports (e.g. write-only to S3, read-only on app servers), which raises the bar considerably.