patch_cable

You'd generate the wrapping key on the HSM you're importing to, and then you'd load it into the HSM you're exporting from. I suspect it is that loading that they messed up.

The description of the issue I read I believe said they were exporting the keys and then re-importing them. I suspect they made a mistake when re-importing the keys. Certainly sounds like a major weakness in the tooling or API though.

Having worked around these types of devices and their interfaces, I doubt they intended to create weak keys.

It is more likely they had a script which placed a parameter in the wrong field, due to something like using positional arguments. Or they misread the documentation for some interface.

Still incompetence. And I would love to see my theory confirmed or refuted.

This is very insightful. I always wonder what the gradients are that we can’t see.

I think the argument is for changing what is legally required.

I have this same discussion with folks applying formal methods to prove the correctness of software where I work. Often the "proof" is harder to read than the original code and I certainly don't feel anyone has proven anything to me.

It’s my choice to use (or not use) Gmail. What data I share with them in exchange for their service is non of Amazon’s business. (If Amazon wanted to make this feature opt-in, sure, whatever.)

Sometimes I think I'm the only one who watched https://en.wikipedia.org/wiki/Doom_Runners

It was absolutely formative for my later tastes in science fiction. For a while, I thought it was something from a fever dream until I found a DVD on eBay.

I don’t think it is so binary.

If there is more friction to communicate with me I expect to hear from people less often.

As an example, my friends that only use Discord and not SMS or Signal definitely hear from me less frequently. It doesn’t mean we’re not friends, but we do communicate less frequently.

That’s a bit uncharitable. It made perfect sense to me. I also learned something about Japanese lacquer.

In the exact same configuration? Yes.

The date of the notice is October 28th. The separation dates given in the letter are 90 days out from the date of the notice (for some technical reasons, some employees had a separation dates a bit further out.)

The books are also physically really pleasant to hold and look at.

I’ve read each book they’ve published and enjoyed them all.

I think they’re saying anyone could order “secure” checks with your account number on them.

Excited to say I worked on this feature! (Standard disclaimer: thoughts and opinions are my own and may or may not be shared by my employer.)

To give an idea of the kinds of things you can do now:

  - Keys or other secrets can only be decrypted (via KMS) by an EC2 instance if it is running an approved AMI. 
  - You could build a certificate authority (CA) which only issues a certificate to an instance running an approved AMI. 

This is similar to the functionality that was available in Nitro Enclaves. However, enclaves came with restrictions (such as only being able to communicate through a vsock) that made them not a great fit for all use cases.

I’m more familiar with the 737 (as a hobby, not as a pilot), but for that aircraft the “loss of thrust on both engines” checklist has the start levers as the second item on the list.

Note that in the checklist I am looking at the goal is to restart the engines rather than diagnose the failure and that involves these levers. I suspect you’d notice pretty quickly if they were not in the expected location.

Sorry, I didn’t get the reference. I’m a moron. My bad.

Ah I missed that. Fair enough then.

Ah fair enough.

It’s not. And the fact that you think they sing songs makes me think you’ve never watched it.

I have an elderly parent who has required multiple trips to the ER in the last year. The issue here (Seattle) is that the beds in the other departments are full, so there is no where else for them to go. The ER usually determine within a few hours she needs to be admitted, and then it takes a day for them to actually find the capacity.

It isn't quite as formal as that, but there is a group of engineers who review new APIs for following AWS-wide standards.

I haven’t explored that. My intended use case was outbound calls, so I just bought a phone that allows you to switch the ringer off.

Rather than specific hours, I would probably just create an allowlist of friend and family numbers and trust them not to abuse it.

I recently just set this up for my 5 year old.

I bought a Grandstream HandyTone 801 as a bridge. I use voip.ms as a service provider. Both are geared toward more technical users, but the service is very reasonable for the price. Instructions for configuring it are clunky but not too bad: https://wiki.voip.ms/article/Grandstream_HandyTone_802_-_HT8....

I had previously tried Ooma, but I didn't like that it wanted to sit between my router and modem.

I would also be interested to know how true this is for individual productivity versus group productivity.

Nor was it before the pandemic.

I'll throw in that the hardcover book is absolutely gorgeous and a pleasure to hold and read from.

My solution has been to use iCloud to sync photos to my desktop, but then I just backup the iPhoto directory on my desktop which has all the raw photos in case iCloud goes poof.

I found it useful to set deadlines that force me to prioritize features that add value/functionality. Since for me these are just personal projects, I try to add accountability by telling friends "hey, Monday I want to show you this really cool thing I did". This helps sharpen my focus.

Employees may still be able to limit the amount that is stolen. You may be able to steal one item, but are blocked from filling up a bag.