Puts

Sometimes we forget that cybersecurity is not just about protecting against hackers. There is a bunch of threats from the inside – and they don't have to be malicious. Failing hardware, bad software updates, human errors are also threats that needs to be considered.

The product affected here is litelarly called "CrowdStrike Falcon® Cloud Security". Meraki all tough they sell routers and switches markets their products as "cloud-based network platform". Jamf all tough their product is run on endpoint devices is marked as "Jamf Cloud MDM". I think its fair to say that cloud these days does not only mean storing data, or running servers in cloud but also if infrastructure is in any way MANAGED in cloud.

So to tie back to what i wrote earlier – none of these services has to have the management part in the cloud. They could just give you a piece of software to run on your own server. That would certainly distribute the risk since now it only takes someone hacking the vendor to go after all their customers, or in this case one faulty update brakes all users experience. And as far as I can see it seems we are willing to take those risks because we think it's nice having someone else manage the infrastructure (and that was my main point in the first comment).

Well, in all times usually there has been the option to run a local proxy/cache for your updates so that you can properly test them inside your own organization before rolling them out to all your clients (precisely to avoid this kind of shit show). But doing that requires an internal team running it and actually testing all updates. But modern organizations don't want an IT-department, they want to be "cloud first". So they rely on services that promise they can solve everything for them (until they don't).

Cloud is not just about where things are – it's also about the idea that you can outsource every single piece of responsibility to a intangible vendor somewhere on the other side of the globe – or "in the cloud".

This is an oversimplification. IF we are talking about compliance to ISO 27001 you are supposed to do your own risk assessment and implement necessary controls. The auditor will basically just check that you done the risk assessment, and that you have done the controls you said yourself you need to do.

I'd say this has nothing with regulatory compliance to do at all. The real truth is that modern organizations are way too attached to cloud solutions. And this runs across all parts of the organization with Saas and PaaS whether it's email (imagine Google Workspace having a major issue), AWS, Azure, Okta…

I've had the discussions so many times and the answer is always – the risks doesn't matter because the future is cloud and even talking about self hosting anything is naive and honestly we need to evaluate your competence for even suggesting it.

(Also the cloud would maybe not be this fragile if it wasn't for lock-in with different vendors. If you read the TOS it says basically on all cloud services that you are responsible for the backup – but getting your data out of the service is still pain in the ass – if possible at all)

Sounds like the premise then is that everybody has got some shit they are hiding but it’s better to employ a criminal than a lier.

Which would mean that the polygraph is really good at filtering out genuinely good people from the recruitment process (in the case of this article people whose actually never done drugs or talked shit about their superiors).

A feature that seems to have disappeared from a lot of blogs these days is date when a post was published. Sometimes date is required to put things into context and I can't understand why so many blogs these days don't have it.

I think the context here is when you signed up for a trial and you have a sales person emailing you every single day, and by the end of the week they start using the "I can only guarantee this price" bullshit. It's just an aggressive sales person trying to pressure you.

I don't know what companies you are working in, but if the service is deemed valuable enough really nobody cares about money as long as it's in the ballpark of what similar services costs. And When it comes to time, yes all projects starts with "we gonna start using this this week" but we also know it takes a year to roll out even the most basic tool in a medium sized organization so a couple of weeks here and there doesn't really make a difference either.

All that matters is if the tool seems to solve your problems – and the price is not significantly different from the competitors and having a sales person bugging you every single day telling you you need to make the decision now because otherwise who knows what might happen to the price – honestly they can just go ** themselves. I make the decision when I'm ready, and if they are deciding to significantly jack up the price in between that period they are just making themself less trustworthy.

Whenever I negotiate prices with SaaS companies they give you a price and then they say this offer is valid x weeks – and "after that we cant guarantee the price". And I always reply the same thing, "I'm in no hurry – let's see what the price is next time. If it differs greatly then I can not trust you, and it's better to find out now than in two years when we are locked in to your product."

Why is this being so heavily down voted? Are people actually that bad at understanding sarcasm?

I had this history teacher in high school giving the class an assignment to write an essay on the events leading up to the Second World War. The first question that came up was how long does this essay need to be – to which the teacher replied that if you can cover this complex topic on one single A4 that would give you full score on the assignment – but that he sincerely doubted that anyone could cover such a complex topic in such a short amount of text. Everyone was mind blown by this argumentation. Nobody had ever heard a teacher say anything like that and that kind of shows how we already as kids are thought that more is always better.

Well if you can spin up a new environment in less than a minute – does it matter? I mean if you are Facebook yes, but having worked with a lot of people building things like web shops – having a minute downtime I would say is fine because I've seen so many of these people shoot themself in the foot trying to build high-availability solutions and having constant downtimes just because they can't handle their own complexity.

I actually think this is a beautiful thing with GDPR. Because technically platforms like Facebook could just consider themself a Publisher and then they wouldn't have to bother with the GDPR. But that would also mean that they would need to have a chief editor personally responsible for all the racism, hate and abuse on the platform. So the reason they they have to deal with the GDPR is because they don't want to take responsibility for all the shit published. So how much they may hate GDPR – they hate taking responsibility for their content even more.

On the other hand, lowercase letters tend to be more complex using more bezier anchor points. So if your priority is not bandwidth but work memory you should maybe stick to uppercase? :D

Exactly. Noise adds texture - which is an important ingredient in visual art and design. But too much noise obstructs the image. It's all about balance – just like cooking.

True true :)

I think what probably confuses people is that since everything was so dark they think that "wow the iPhone handles low light really well", but actually that only has to do with exposure. If you look at the behind the scenes shots they still had massive LED panels lighting the scenes.

I think the point here is not the effort it takes to make good lighting - but the cost. A normal person will not have 10x2000w ARRI panels. But they will look at this production and think that they will get the same result because hey it was shot on an iPhone.

Isn't this a new Schrems situation? Just because the commission can make a law doesn't mean that it's legal. Seems like it would certainly interfere with the European Convention on Human Rights that grants everyone right to privacy of it's personal life and correspondence – meaning the CJEU would overthrow this law in an instance?

As an inflation hedge, maybe you don't even care if you loose money on your gold. As long as you don't loose as much money you would have on inflation. Sometimes it's just good to have anything left rather than nothing.

Don't get me wrong. I'm not questioning the usefulness of béziers. I'm questioning the authors notion that postscript inherently is incapable of expressing accurate circles just because the language don't have built in primitives for them. :)

Yes, but as someone else commented the arc is internally based on bézier curves. How accurate thee circle would be by plotting is probably dependent on the trigonometric table built in to the postscript interpreter, but at least it would be mathematically possible to make an accurate circle where it's actually not even possible to express a perfect circle with bézier curves.

"The only primitives they have are straight line segments, rectangles and Bézier curves. The only way to create a proper circle is to have a raster image like the one above."

Is this really an accurate conclusion? Just because there are no primitives for a circle – postscript is still a programming language so you can also plot a proper circle with trigonometry?

You can use stored procedures if you want to add another abstraction layer.

This is total bullshit. Stolen sessions are being actively sold on Darknet in bulk. If nothing else the best thing that can happen is that they have expired before someone have the time to exploit them.

I think to Europeans – especially Germany, France, Scandinavia… socialism refers to what you call Democratic socialism. Wheres the far ends of the spectrum are Communism vs Capitalism. I think this actually used to be a very natural distinction although the Neo-liberal movement have done a good job to paint out any form of socialism to be equal to Communism.

No there is a middle ground called socialism.

I don't know what - but it says something that Max Schrems was still a law student when he brought on the Irish DPC, The EU Commission and an army of Facebook lawyers and got the Safe Harbor agreement invalidated.

This authority does not go after anybody. They got a complaint by NOYB regarding these specific companies and therefore was forced to investigate specifically them.

Underrated comment. In the old days, car magazines had ads for cars, fishing magazines had ads for fishing gear, food magazines had ads for cooking ware and so on. You can actually have ads tailored after the content of the page you are looking at. You don't have to stalk and track users.

Are you personally offended by someone sharing their experience of living without a car? Maybe people in the writers situation have never reflected about this lifestyle before because they take the car for granted and now he inspired people to try to live without a car. That doesn't mean that everybody needs to stop using their car – especially if they are dependent on it.

Whenever someone reacts strongly just because someone else share their personal experience of different life choices whether it's ditching the car or going vegetarian or anything progressive I can't help think it's their own guilt speaking.