998 karma · joined June 21, 2010
Traffic fines are often considered regressive because a rich person can laugh at a few hundred dollars whereas a poor person suddenly can't afford rent.
So yeah, perhaps some fines should scale to ones means, otherwise it won't deter bad behavior.
Example: https://www.amazon.com/Jagwire-Inline-Indexed-Tension-Adjust...
Word has some ribbon bullshit: https://www.howtogeek.com/679956/how-to-paste-text-without-f...
Fta: Microsoft made a particular point of outlining its efforts to ensure the new Adobe PDF tool is secure. Miscreants will use malware-infused PDFs to muscle their way into enterprise networks, so Microsoft's Edge Vulnerability Research team was involved in the process of bringing the Adobe engine to Edge.
That includes adding security features to the PDF stack such as PartitionAlloc a secure heap implementation developed on Chromium and already used in Edge, according to Gareth Evans, principal security research lead at Microsoft.
"PartitionAlloc is designed in such a way as to keep objects of different types separate from each other with minimal intervention from the developer," Evans wrote.
The package also includes mitigations such as Intel's Control Flow Enforcement Technology to protect against the hijacking of control-flow transfer instructions, a technology that complements Microsoft's Control Flow Guard. Fuzzing – automatic testing for vulnerabilities – is another security feature included with the new Edge PDF stack.
In addition, Edge's Acrobat engine will be included in the software vendor's bug bounty program to incentivize developers to find and report flaws. And there have been quite a few flaws in Adobe's PDF code.
I need to get off my arse and rotate my most valuable passwords.
> As in most phishing campaigns, the attacker sent out plausible-sounding prompts pointing employees to a website that cloned the behavior of our intranet gateway, in an attempt to steal credentials and second-factor tokens.
The R naught number was very high event for the early strains: https://abcnews.go.com/Health/r0-covid-19-virus-key-metric-o...
Example: https://www.independent.co.uk/news/business/news/toyota-staf...
1. Check their password iterations to evaluate how urgent the rest of these steps are: https://support.lastpass.com/help/how-do-i-change-my-passwor...
2. If iterations are 100100 and your password is not a dictionary word (or quite short) you are probably ok but...
3. I'd still identify any high value passwords like email, financial, cryptocurrency, etc. and rotate them.
I am guessing the iterations are stored in the vault so would point out the low hanging fruit to the hackers.
All the other things LP is doing doesn't really matter since the customer vaults are already exfiltrated and do not use any sort of MFA offline.
In one way that's good vs. some of the CEOs that publicly said "these folks are the fat and we're trimming it" which is especially cruel.
That might result in much more than the 60 to 70% premium they are willing to pay! ;-)
I have read the above in the past but can't find a good source at present as I am on mobile so apologies.
2. I think having folks "near shore" makes it far easier to train, mentor, manage, etc. when there is a lot of overlap in time zones. When I had a team in India that was THE major challenge. The speed of iteration was abysmal.
3. I may be wrong but I have some nephews by marriage getting STEM degrees in Tijuana (TJ) and salaries for a new mechanical engineer hire are terrible IIUC. Per https://www.salary.com/research/mx-salary/benchmark/mechanic... average annual salary is 324,000 MX Pesos which is < $17000 USD. Software is similar: https://www.salary.com/research/mx-salary/benchmark/mechanic... . And TJ has a higher cost of living than other cities in MX and thus salaries due to proximity to the US. It will take years for supply to meet demand but I can see Mexico and South America being good sources of talent in the future. To me it's just a marketing, education and pipeline problem.
The job of the C-suite is accurate forecasting which is why they make 400x what the line worker does in large companies. Obviously they don't have a crystal ball but if scaled up the company hugely during a black swan event like covid and assumed that was the new normal I'd be personally ashamed and would either resign or give back my salary for a year+ to keep most of those employees and find a function for them. Perhaps via retraining, perhaps with instituting optional pay cuts to let people work 4 days a week, etc.
I don't know that it makes you smarter but it's full of puzzles and brain teasers.