Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re:Are you starting your supply chain audits now? (Score 1) 17

Relying on a firewall is not sufficient to secure internal services. There is a long list of security breaches that were caused by an employee getting their laptop breached, for whatever reason, and then the bad actors roamed around the private network and exploiting known, patchable, vulnerabilities.

Of course the urgency to update is not the same for publicly accessible services as it is for services on the internal network, but running a 5y old server without updates when there is a long list of critical CVE is very much negligence.

Comment Re:Are you starting your supply chain audits now? (Score 1) 17

I'm amazed at how many companies tolerate working with years old versions of services and libraries which are putting them at risk. This is especially true of any stack that will be reachable on the public internet like many of these self hosted GitLab instances here.

In my own org I try to keep our software development stack as fresh as possible because it is the best way to ensure you have least amount of vulnerabilities, the best long term compatibility, especially when working with SaaS, and have access to the most comprehensive tools such as linters and static analyzers for your own code. There is an upkeep price for sure, but it is small incremental upkeep vs being forced to apply 3y+ of changes all at once because you have to address a critical CVE which is only patched in newer releases or the SDK you used went from deprecated to fully broken and you have to refactor a significant amount of code overnight.

Comment "over the next six decades"? (Score 1) 106

Like many folks here I did start coding in basic in the 80s as a kid but I can't remember a single time I used basic after the mid 90s. Did anyone really start coding with a variant of basic in the past 10 years?

I do think the language family had its time but I would guess the run ended at least over 10 years ago.

Comment Re:Use actual quality leather (Score 3, Informative) 39

"Genuine" lather is nothing like Full grain leather. It is more like "contains leather". It is processed a lot more than proper leather and often time just split leather with a coating of man made materials.

https://en.wikipedia.org/wiki/...

To me this is very close to false advertising since 'genuine leather' is not much better than artificial leather.

For belts I only buy full grain, since all the "genuine" ones get destroyed rather quickly.

Comment Re:Welcome to the machine (Score 4, Interesting) 260

When I worked at Google for a few years over 15y ago, they were advertising pretty hard internally and externally that they are not just an other corporation (don't be evil, 20% time, etc...). Sure a few vest and resters played volley ball, swam in the infinity pools, while others actually worked. Overall this was pretty much just marketing for recruiting which lead some employees to feel bait and switched. I learned from my mistakes and moved on to better pastures.

Comment Re:History Repeating (Score 0) 24

See the cisa link below for the why.

The answer is a bit similar to why Boeing design aircrafts that fly towards the ground and fall apart mid flight: safety and security are not the things that get the projects out of the door on time, especially when the original planning did not explicitly account for them because they add cost.

At some point cyber insurance companies will refuse to insure companies relying on Microsoft stack due to the abysmal security culture. For those that refuse to give money to AWS that means GCP or Oracle... We need a proper alternative to AWS, I would like to like GCP but they constantly changing APIs are too much upkeep, and they increasingly have trust issues.

Comment Re: I'm not sure I want a Ive designed device anym (Score 1) 52

I was talking about the hardware designs, the software design is an other can of worms for sure, but I still much prefer it over Windows, or the inconsistencies of the various Linux distributions (cgroup v1 vs v2 for containers, systemd in some vendors but not others, etc...).

For example there are some apps and services that love to steal focus, and there is zero solution to tame them in macOS, while I do believe it is possible on Windows. The one that nags me the most is the AWS VPN client which I'm forced to use for work. It keeps on stealing focus which is a big nag. I cannot use TunnelBlick, I would if I could.

Comment I'm not sure I want a Ive designed device anymore (Score 4, Interesting) 52

We discuss this today at work that post Ive MacBook Pros are designed by Engineers and that Apple no longer puts form before function. The Mx series are bulkier than the previous Intel based machines but it is worth it because the thermal management and battery life as much better. It looks like the hardware engineers said they needed sufficient room for proper airflow to ensure cooling and I never ever hear the fans kick in. This in turns reduce energy consumption (turning the fans to dissipate the heat) and increase the batteries lifetime by not overcooking them all the time.

Comment Re:Hertz jumped the gun (Score 2) 214

That same argument can be said: if EV rentals were cheaper than ICE rentals, nobody would grab an ICE car.

I often hear that EVs are cheaper to own than ICE cars due to lower maintenance cost, among other things. It looks like this theory was tested at scale with unexpected results, at least to the Hertz CEO.

Personally my car is from 2009, with less than 89k miles on it. It gets me from home to the office and on the occasional long trip with no issues, and keeping the old car is better for the environment than upgrading for an EV.

Comment Re:Agree or we brick your device (Score 2) 147

About 20y ago I joined a famous (at the time) company that made handheld devices. A few days in the company I attended a presentation on an upcoming portable device with a physical spinning hard drive that could play music and videos. The problem is that the drives were meant for laptops and a very high percentage (something like 50%) of the drives would fail within 12 month. The solution: have the drive manufacturers share some of the costs of replacing the drives under warranty, but beyond the 12 months, the customer would be out of luck.

Way to antagonize your customer base. That company tried to re-invent itself but failed. It is not new but a lot of companies forget that a loyal customer base is very important in the long term. I had considered getting a Roku device, now I'm pretty sure I will never consider them ever again.

Slashdot Top Deals

For large values of one, one equals two, for small values of two.

Working...