Stuckinsofa

You store trade secrets in your configuration file? I still don't understand what the big issue is. Can you clarify that instead of critizising my lack of knowledge?

Can you explain why this search feature is a problem because I don't understand?

So the laws are extremely backwards but you aren't really sure about a single example to show that this claim is correct? Come on.

He was in the embassy on his own free will. I can't rape some women and then hide under a rock for 5 years and come out claiming it's fine because I hid. Because that's not how stuff works.

As for rape, what he allegedly did was just that. You can make up your own meaning of the word but they are e completely irrelevant in this context.

So rape.

Because he ran away.

No shit.

I will refer you to reading TFA. Also: rape.

Why were the charges ridiculous?

Few if anyone on Sweden care about this. It's a normal rape case albeit with a celebrity in it. It should go through the normal process. Hardly something Putin would discuss with Löfven.

Oh come on. The fact that he has done some good doesn't mean that he is above the law.

I haven't had to enable some global setting to allow unknown programs on Windows 10. What are you referring to?

Don't you have to enable some kind of global special access right? So it's not the same thing.

Maybe because there are so many incompetent PMs? The PM working I'm working with does not know the product feature set (except for the very basics), does not have any vision or goals, does not have a systematic approach to talking to collecting feedback from customers. What's on our backlog changes dramatically and when project ends we basically start with a new product backlog. When customers have questions on basic stuff he has to defer to engineering.

Any competent hire can be useful, but hiring good PMs is maybe even harder than good engineers. So people bitch.

Yeps. And at Facebook-scale, when you realize the issue after it has went live you have already "stored hundreds of millions of user passwords"

The person I replied to wrote that this was "algorithmically enforced". I'm just pointing out that this is incorrect.

But anyone can screenshot the message or take a photo of it. The point is that it's not actually enforced.

Sorry but this type of issue often occur because developers has your mindset. I've had so many auditors and security reviewers ask me "how do you hash your password?" but no one has asked me if I log http request, session tokens, outbound emails or any other thing where sensitive data can be transmitted. Nor have they asked me what the actual process for rotating credentials when employees leave, more than "Do you do it?"

The password is stored in plaintext since they could read it via Kibana but I'm guessing you mean that their identity system which they use to store users store credentials in plain text.

To that I say meh: Could just as well be that they decided to log all Http request to troubleshoot some issue without realizing the security implications. The article even says it was a rolling list of passwords which further indicates loggimg since you probably don't store trace logs forever.