percent

joined 1 year ago
[–] percent@infosec.pub 46 points 2 days ago (2 children)

Many years ago, when I was a PC repair tech, software that would behave like this was generally considered to be malware. Seems a little ironic that they're McAfee ads.

Not really surprised though. That's just how the Windows ecosystem is. I've never seen any other OS constantly support so much weird advertising bullshit all the time.

[–] percent@infosec.pub 2 points 6 days ago

It's also possible to reduce perceived noise with some blade spacing tricks. I remember reading about how Apple designed the MacBook fan blades to seem really quiet under normal load. It was pretty interesting to read. I'm too lazy to find a link, but it should be easy to find with a quick search, if interested.

[–] percent@infosec.pub 1 points 1 week ago

There are a LOT of different kinds of ammunition out there. I suppose if they get to choose what kind, they could opt for subsonic ammo (the kind that people usually use with suppressors). Otherwise, if it's randomly selected or something, then there's a pretty good chance that it'll break the sound barrier.

[–] percent@infosec.pub 1 points 1 week ago (1 children)

not creds that give access to the production system

...Isn't that what we're talking about though? Or did I misunderstand the OP?

Regardless, I'll just clarify anyway: Developers should not have a plaintext .env that can be used to drop (or risk in any other way) production data.

A practice like that is only as strong as the "weakest" member of the team – "Weakest" could mean the person who is the least careful, or least experienced, or least secure work computer/practices, etc. Scale up to 1,000+ engineers and the chances of disaster (data loss, leaks, etc.) greatly increase. That's just the human factor. Add LLMs into the mix and it's almost guaranteed.

[–] percent@infosec.pub 1 points 1 week ago* (last edited 1 week ago) (3 children)

Of course it's better than hard coded, but still pretty bad to store production creds locally in plaintext — if at all.

In the uncommon event that I need production creds, it's a manual human chore by design. Normal development/experimentation should almost never connect to prod environments. That was generally a bad practice long before AI agents existed.

[–] percent@infosec.pub 6 points 1 week ago (5 children)

Production creds in .env? ...Why?

[–] percent@infosec.pub 4 points 2 weeks ago (1 children)

Anyone know if this affects GrapheneOS users? I can install GrapheneOS like 50x faster than it would take to understand what I'm legally binding myself to by signing the petition.

[–] percent@infosec.pub 90 points 2 weeks ago (3 children)

I genuinely appreciate the cause, but to sign this, I have to provide PII, agree to their terms of service and privacy policy, and get automatically opted-in to their mailing list that I'll have to unsubscribe from later.

So to petition against this shitty tech stuff, I have to go through this other shitty tech stuff. It sucks how normalized this all has become.

[–] percent@infosec.pub 2 points 2 weeks ago

Ah great. My Starlink hardware just arrived.

I wasn't charged any high-demand surcharge though. I probably wouldn't have ordered it if I had to pay one of those.

I don't think my area will have high demand for Starlink anyway. Even their fastest options are slow. There are options for like 5-10x the speed around the same price in my area. The only downside: There's like a 50% chance of lightning frying my modem each year, and it takes like a week to get a tech on site.

Starlink is a great backup connection. It's cheap to just keep in standby mode (~$15/month, IIRC). An unexpected, heavy surcharge might be a deal breaker though

[–] percent@infosec.pub 2 points 3 weeks ago

I also almost never play games, but when I do, they're very cheap. I recently got into Subnautica for like $7, so I have no problem paying that for a download.

I'd much rather have a physical copy for a game that's like $80, but I don't think I'll ever buy an $80 game

 

After MANY hours of single-player playthroughs, I decided to join one of the public multiplayer games. It was a bit crowded and overwhelming (but very cool – so much creative engineering in there 🙂), and I had no idea how to jump in and contribute.

I almost never play any multiplayer games, so this might be a dumb question, but... How does this usually go?

 

Riley entered my life in 2008. I still remember that day. I found her on Craigslist, paid a $60 "rehoming fee", and she sat on my lap as I drove home with my new puppy. I was young and broke, living alone, and could barely afford my bills. It was an irresponsible decision to get a dog at that point in life, but I'm so glad that I was able to make it work.

She was a mix of two retrievers: Her mother was a chocolate lab and her father was a golden retriever. Somehow all of their puppies were black.

I had some experience with dogs before her, but I did not know about the amount of affection that retrievers are capable of. As I was getting to know her, I was pleasantly surprised to learn that she loved hugs so much, she even initiated them! Literally the sweetest dog I've ever met.

She was very smart. I was able to teach her most of her tricks in like ~10 mins each, while heating up frozen pizzas or whatever cheap garbage I ate back then.

She was the most consistent part of my bumpy path in life. She has been with me through tough breakups, my parents' deaths, career changes, and many other ups and downs that come with adulthood.

She's also the oldest retriever I've ever met. She would have been 17 years old next week.

We were together until her last breath. With my hand on her chest, I felt her final heartbeat.

And I will remember her until mine.

Riley was such a good girl.

view more: next ›