Readit News logoReadit News
d4mi3n commented on Oxide raises $200M Series C   oxide.computer/blog/our-2... · Posted by u/igrunert
skrtskrt · 2 days ago
Yeah I had a manager grill me like crazy about short stints on my resume while I was interviewing for DigitalOcean. He told me it looked like I wasn't dedicated or trustworthy.

He wasn't my manager so I brushed over it and 6 months into working at DO they started 3 rounds of enormous layoffs that were handled so poorly even the executives doing the layoffs got removed by the board.

So I left and got to add another short stint at a company run by craven morons to my resume :)

d4mi3n · a day ago
I was laid off at my last 3 positions and can really relate to this. If it’s any consolation: how a company handles this is a good indication of the maturity of their management and recruiting function. I also strongly disagree with any assertion that would state “short stints = unreliable employee”. Nobody can make that assertion without confirmation of what caused those stints and the tech market from 2020 - today has been notoriously volatile.

There are plenty of great orgs out there that will soak with you before making assumptions, but as a rule most startups have fairly inexperienced management unless they are founded by a team that’s been through the rodeo a few times.

d4mi3n commented on Company as Code   blog.42futures.com/p/comp... · Posted by u/ahamez
chrisjj · 7 days ago
> 3 different sources of truth about ownership

I see only 1.

Admin, access <> ownership.

d4mi3n · 7 days ago
I always thought of this as authority, accountability, and responsibility of a thing. Ideally one group or person has all three. In practice you’ll have many entities with some combination of the three.
d4mi3n commented on U.S. government has lost more than 10k STEM PhDs since Trump took office   science.org/content/artic... · Posted by u/j_maffe
d4mi3n · 16 days ago
What problem are you hoping to fix by doing this?

I think for any proposal to change policy that has serious impacts on the economics of the country, we should really be very clear on what problem we see, how we plan to solve it, and what specific trade-offs we're making with our solutions.

d4mi3n commented on The Concise TypeScript Book   github.com/gibbok/typescr... · Posted by u/javatuts
d4mi3n · a month ago
What you describe sounds a lot like Diátaxis[1], which is a strategy for writing and organizing technical documentation. It categorizes docs into one of four categories: tutorials, explanations, how-tos, and references.

Category is derived from a fairly simple heuristic: whether the content informs action or cognition, and whether the content serves the reader’s application or acquisition of a skill[2]. I’m a fan and it’s simple enough that most anyone can learn it in an afternoon.

1. https://diataxis.fr/

2. https://diataxis.fr/compass/

d4mi3n commented on IPv6 just turned 30 and still hasn't taken over the world   theregister.com/2025/12/3... · Posted by u/Brajeshwar
d4mi3n · a month ago
Unless my understanding of how IPv6 is flawed, I don’t think your assertion is true in practice. One of the big benefits to IPv6 is that addresses are plentiful and fairly disposable. Getting a /48 block and configuring a router to assign from the block is pretty straightforward.

I’m aka unsure if IPv4 really gets you the privacy advantages you think it does. Your IP address is a data point, but the contents of your TCP/HTTP traffic, your browser JS runtime, and your ISP are typically the more reliable ways to identify you individually.

d4mi3n commented on Show HN: OpenWorkers – Self-hosted Cloudflare workers in Rust   openworkers.com/introduci... · Posted by u/max_lt
imcritic · a month ago
I don't think what you want us even possible. How would such guarantees even look like? "Hello, we are a serious cybersec firm and we have evaluated the code and it's pretty sound, trust us!"?

"Hello, we are a serious cybersec firm and we have evaluated the code and here are our test with results that proof that we didn't find anything, the code is sound; Have we been through? We have, trust us!"

d4mi3n · a month ago
Other response address how you could go about this, but I'd just like to note that you touch on the core problem of security as a domain: At the end of the day, it's a problem of figuring out who to trust, how much to trust them, and when those assessments need to change.

To use your example: Any cybersecurity firm or practitioner worth their salt should be *very* explicit about the scope of their assessment.

- That scope should exhaustively detail what was and wasn't tested.

- There should be proof of the work product, and an intelligible summary of why, how, and when an assessment was done.

- They should give you what you need to have confidence in *your understanding of* you security posture as well as evidence that you *have* a security posture you can prove with facts and data.

Anybody who tells you not to worry and take their word for something should be viewed with extreme skepticism. It is a completely unacceptable frame of mind when you're legally and ethically responsible for things you're stewarding for other people.

d4mi3n commented on Show HN: Jmail – Google Suite for Epstein files   jmail.world... · Posted by u/lukeigel
an0malous · 2 months ago
What do these million dollar salary employees at Gmail do?
d4mi3n · 2 months ago
Make Google multiple millions by improving ad delivery and conversion within Gmail. Probably by also helping Google land big corporate or public contracts, but last I checked most of the money was made via ads in the free tier of GMail.
d4mi3n commented on I got hacked: My Hetzner server started mining Monero   blog.jakesaunders.dev/my-... · Posted by u/jakelsaunders94
codegeek · 2 months ago
tl:dr: He got hacked but the damage was only restricted to one docker container runn ing Umami (that is built on top of NextJS). Thankfully, he was running the docker container as a non privileged non-root user which saved him big time considering the fact that the attack surface was limited only within the container and could not access the entire host/filesystem.

Is there ever a reason someone should run a docker container as root ?

d4mi3n · 2 months ago
If you're using the container to manage stuff on the host, it'll likely need to be a process running as root. I think the most common form of this is Docker-in-Docker style setups where a container is orchestrating other containers directly through the Docker socket.
d4mi3n commented on I got hacked: My Hetzner server started mining Monero   blog.jakesaunders.dev/my-... · Posted by u/jakelsaunders94
V__ · 2 months ago
> The Reddit post I’d seen earlier? That guy got completely owned because his container was running as root. The malware could: [...]

Is that the case, though? My understanding was, that even if I run a docker container as root and the container is 100% compromised, there still would need to be a vulnerability in docker for it to “attack” the host, or am I missing something?

d4mi3n · 2 months ago
While this is true, the general security stance on this is: Docker is not a security boundary. You should not treat it like one. It will only give you _process level_ isolation. If you want something with better security guarantees, you can use a full VM (KVM/QEMU), something like gVisor[1] to limit the attack surface of a containerized process, or something like Firecracker[2] which is designed for multi-tenancy.

The core of the problem here is that process isolation doesn't save you from whole classes of attack vectors or misconfigurations that open you up to nasty surprises. Docker is great, just don't think of it as a sandbox to run untrusted code.

1. https://gvisor.dev/

2. https://firecracker-microvm.github.io/

d4mi3n commented on Aldous Huxley predicts Adderall and champions alternative therapies   angadh.com/inkhaven-7... · Posted by u/surprisetalk
alterom · 3 months ago
This article (and the title alone) is harmful. Adderall is not about increasing mental efficiency.

What Adderall is about is:

- helping with executive dysfunction for people who suffer from it.

- allowing people with ADHD like me to function. To do the things that everyone else does, things that we want to do and need to do, but can't do because of the way our brains are wired.

- increasing the lifespan of ADHD people who don't get help. Women with ADHD die about 9 years younger than those without ADHD [1].

- making our lives less painful, since every small task incurs pain, resulting in 3x depression rates [2] and alarmingly high suicidal ideation rates (50% of ADHD adults [3]).

Please, please, educate yourself about ADHD and medication for it before writing something like this title.

No, Aldous Huxley didn't. "predict" Adderall.

To understand more, I've put together a resource which, I hope, will be easy enough to digest. Here's my experience of getting prescribed Adderall for my ADHD:

https://romankogan.net/adhd/#Medication

If I have attention deficit and I could write it, I hope you (and the author of the text we're discussing) could spare some attention to it before talking about Adderall, amphetamines, and other stimulants prescribed for ADHD.

Thank you in advance.

[1] https://www.npr.org/sections/shots-health-news/2025/01/23/nx...

[2] https://add.org/adhd-and-depression/

[3] https://crownviewpsych.com/blog/adhd-increased-risk-suicide-...

d4mi3n · 3 months ago
Here here. I also have ADHD though I couldn’t use stimulant medications due to bad reactions to it, but I’ve had success with non-stimulant medications (Straterra aka atomoxetine [1]).

A big thing I struggled with prior to medical treatment that I don’t often hear discussed about ADHd was rejection sensitivity.

For those unfamiliar: imagine a time someone said something that hurt your feelings or caused a strong emotional reaction.

Now imagine that as a routine emotional response to day to day interactions. Feeling intensely sad, irritated, insulted, etc. to extents completely o it of proportion to whatever was said or even implied.

It’s brutal. It contributes to a lot of depression and social anxiety for folks with ADHD. It doesn’t matter if you’re aware of the response being disproportionate—you get to go on that emotional roller coaster whenever somebody says they don’t care for your favorite food, accidentally cut you off in a conversation, or the day just turns out differently than you were expecting.

Medical treatment makes a huge difference—in my particular case the difference between feeling like I had the emotional regulation of a toddler and not needing to constantly question every emotion I felt prior to responding to things I was reacting to.

Stimulant medications didn’t work for me, but they do this for most people with ADHD (more effectively, too!) and like alterom it saddens me whenever FUD like this crops up.

u/d4mi3n

KarmaCake day2285October 10, 2009
About
Security engineer in the San Francisco Bay Area.

Ask me about technical security. I occasionally have good ideas and often find better ones through people I speak with.

damien@absurd.engineering

https://www.linkedin.com/in/dlwilson

View Original