Readit News logoReadit News
all_blue_chucks commented on Interview with an anonymous AWS cybersecurity engineer   logicmag.io/commons/insid... · Posted by u/who-knows
all_blue_chucks · 5 years ago
Almost none of those questions were about AWS cybersecurity.
all_blue_chucks commented on U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise   krebsonsecurity.com/2020/... · Posted by u/picture
hamburglar · 5 years ago
I don't think OP meant to imply that backdoors had anything to do with this. It's meant to underscore the argument against backdooring encryption by pointing out that when you trust some entity with a backdoor, you're potentially opening that backdoor to anyone who can break that entity's security, which may be very, very flawed.
all_blue_chucks · 5 years ago
That's unrelated to backdoors (deliberate covert access mechanisms). All parties with access to data, regardless of whether it is via a backdoor, can put that data at risk due to their own security.
all_blue_chucks commented on U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise   krebsonsecurity.com/2020/... · Posted by u/picture
random5634 · 5 years ago
A couple of quick notes:

1) The OPM hack and now this all illustrate - if govt gives itself the big backdoors into everything, it's likely they will give it to russia, criminals, ex-boyfriends stalking ex-girlfriends etc.

2) My own impression of govt IT is largely security theatre in the area I was involved. In particular such massive complexity that agency staff think going around the rules is normal, because it's the only way to actually get work done. And then such glaring weaknesses that no one cares to fix. With google I've had one password for 20 years (my google account) which allows a hardware key for 2FA or google authenticator with what I imagine is sensible monitoring, new device authentication etc (I find this pretty secure).

Govt you are forced to write down these insanely long passwords with super complexity that cannot be cut and pasted that change very 30 or 60 days.

Because lost passwords are so common in these settings, the password reset process is usually a MASSIVE weakspot. I've seen it just be a phone call to a third party, you give them your username, they give you a new temp password - that's literally it. And the passwords end up everywhere. In lots of documents that float around, emailed around etc etc. And lots of password sharing when you get locked out of a tool and it will take a long time to get a new account setup (months). Pretty soon the procedures manual also gets you root access to everything.

all_blue_chucks · 5 years ago
Neither of these hacks involved "back doors" as they are normally defined. One was an authentication bypass; the other was a supply chain attack. Neither involved any sort of deliberate covert access mechanism.
all_blue_chucks commented on How Much Vitamin D Is Too Much? A Case Report and Review of the Literature   pubmed.ncbi.nlm.nih.gov/3... · Posted by u/voisin
fareesh · 5 years ago
On this page it says the recommended dosage is 600 IU

https://ods.od.nih.gov/factsheets/VitaminD-HealthProfessiona...

Are there any other opinions?

all_blue_chucks · 5 years ago
Yes. 2000 IU and 5000 IU daily are common recommendations from medical groups in the USA.
all_blue_chucks commented on AMD Zen 3/Ryzen 5000 announcement [video]   youtube.com/embed/iuiO6rq... · Posted by u/thg
all_blue_chucks · 5 years ago
Glad they skipped the 4000-series branding. Now we can look forward to next year's release of the 5700XT CPU to pair with the current 5700XT GPU.
all_blue_chucks commented on IBM is splitting itself into two public companies   reuters.com/article/us-ib... · Posted by u/dredmorbius
rkagerer · 5 years ago
We divested networking back in the ‘90s, we divested PCs back in the 2000s, we divested semiconductors about five years ago

Is it just me or does anyone else feel over the decades they've been divesting some of the best (long term) building blocks? A company with vertically integrated silicon, compute, networking, cloud, AI, Enterprise etc. seems like it could have such an edge if only they had focused those engineering capabilities on consolidated, high-margin end products.

I see the other big players going the opposite direction. e.g. Google and Amazon are building their own silicon for an edge in Cloud and AI.

So-called SexyIBM is just another cloud company without a distinguishing barrier to entry. Sure, their growth will look good on paper for a few years, but when Cloud becomes commoditized (which I think is already happening), the capabilities which could have created the kind of real innovation that opens up whole new industries will have all been cleaved away.

all_blue_chucks · 5 years ago
IBM is just a conglomerate of neglected acquisitions that share branding ("watson" etc.). It hasn't been a single coherent company in decades.
all_blue_chucks commented on Eli Lilly says its monoclonal antibody cocktail is effective against Covid-19   statnews.com/2020/10/07/e... · Posted by u/jseliger
all_blue_chucks · 5 years ago
This is promising technology, but the words "just barely statistically significant" should probably be in the first paragraph of articles covering this - not halfway down the article.
all_blue_chucks commented on Killed by Google   killedbygoogle.com/... · Posted by u/tr1ll10nb1ll
all_blue_chucks · 5 years ago
That's an impressively long list but some of those entries are a bit of a stretch. Google Nexus, for example, was rebranded as Google Pixel. Most people wouldn't describe rebranding as "killing" a product.
all_blue_chucks commented on EU considers phasing out 1 and 2 cent coins   brusselstimes.com/news/eu... · Posted by u/jpkoning
all_blue_chucks · 5 years ago
Currencies that are worth $1 more or less should round cash transactions to the nearest 10¢. Then we could simplify coinage considerably and we would all save time waiting in line for people to count out pennies and nickels over amounts that are immaterial.
all_blue_chucks commented on Missing Covid-19 test data was caused by the ill-thought-out use of Excel   bbc.com/news/technology-5... · Posted by u/cjlm
threatripper · 5 years ago
People keep putting the blame on Excel but it supports more columns than most implementations of SQL databases. MySQL for example supports only 4096 columns. SQLite defaults to 2000. That's way less than Excel's 16384.
all_blue_chucks · 5 years ago
True, but they don't need to relate 16384 types of data. It sounds like they were using one column per record, rather than one row per record. So if they had a sensible data model 2000 columns should be more than sufficient.

u/all_blue_chucks

KarmaCake day1092November 11, 2016View Original