mauvezero
7.5K posts
@KamenarVladimir @IceSolst Isn't this pretty reasonable though? Most orgs might configure this, but they certainly never tested it :)
Or they don't have canaries to test it which is the only reliable way to test that the policy is effective over time.
English
@IceSolst Earlier this year an auditor requested evidence that our engineers don't have root access to the server. A screenshot showing an error when running su and sudo was accepted.
English
Large clients like banks can bully you into pleading insanity
One recently asked us for evidence that we delete old logs. How? Screenshot of an empty folder titled “your old logs”?
I can show you the “log_deleter” job, how does that instil any confidence? Peak security theater
English
@davidfowl Oooh cool, will play with it immediately.
You mentioned elsewhere that you found existing tools lacking, what do are missing?
English
I’ve gone pretty deep investigating ci/cd pipelines recently. Ideas are simmering…
English
@AzureCosmosDB When will we be able to see data plane rbac role assignments in the portal?
English
🛡️ Enhanced Security with RBAC in #AzureCosmosDB for #MongoDB (vCore)
Assign granular Read or Read Write privileges to secondary users for better data governance and protection.
Details here:
🔗 devblogs.microsoft.com/cosmosdb/new-r…
English
mauvezero retweetledi
Over 60,000 Signups in Just Twelve Weeks!
It's been nearly three months since we launched @NekoHealth in London, and the response has been nothing short of incredible. Over 60,000 people have signed up for a scan, which reflects a growing shift toward preventive healthcare and early detection - exactly what the system needs!
We're already working on our next set of London locations, and the next one is going to be massive.
English
This is pretty common with Java as well.
But anyway, I am pretty proud that even after we have grown the backend team from 1 happy guy to many more, we have managed to keep away the "Best Practice"-people, so our codebase has few projects and only interfaces where useful.
Kelly Sommers@kellabyte
I’ve been away from the .NET space for almost a decade but I’m back and I’m already fighting against folks who want to implement Event Sourcing architecture to solve something that 25kb of ints will solve the problem. .NET architects are obsessed with styles of architectures.
English
Maybe the dotnet team can release a mobile browser which doesn't crash when opening these blogposts.
Ben {chmark} Adams ⟠@ben_a_adams
It's that time again! Performance Improvements in .NET 9 by @stephentoub devblogs.microsoft.com/dotnet/perform…
English
mauvezero retweetledi
It's that time again!
Performance Improvements in .NET 9 by @stephentoub
devblogs.microsoft.com/dotnet/perform…
English
@lucas_dubois @ananayarora It was put there by the corporate IT departments (it is part of CrowdStrike).
English
@ananayarora What I don't understand is how was this "file" installed on the devices? Was it before being turned off? If the computer turns on whilst being offline, what does it happen?
English
@dotMorten @WindowsDocs This is really stupid, I really liked the current system.
English
Sad to see @WindowsDocs ruining the best part of Microsoft docs 🤦♂️ #issuecomment-2226355487" target="_blank" rel="nofollow noopener">github.com/MicrosoftDocs/…
English
mauvezero retweetledi
"Is getting a Neko Body Scan worth it?" I am often asked this question. Let's look at the data from one year of Neko scans and I'll let you decide!
English
@Ride_fixer Facebook-gruppen "Svenskar i Berlin" är säkert 10% av de 100000 😂
Svenska
Eftersom vissa tydligen läser ovan som en etnicitetsfråga ska jag förtydliga att det avser alla olika individer och samhällsgrupper, när man inte ändrar sin folkbokföring och exv får lägre skattesats än vad man ska ha, undviker försäkringsfrågor, får andra ekonomiska fördelar m.m
Svenska
Twilio sales quoted us $2500/month for two users using SSO a while ago.
Of course I said no. A while later Twilio got super-duper-hacked, IIRC because they used passwords for shit internally.
Every now and then when I am sad about something I dig up that sales email and laugh.
Falcon8x@flacon8x
The SSO Wall of Shame A list of vendors that treat single sign-on as a luxury feature, not a core security requirement. sso.tax
English
@mauvezero Does it build the entire solution or does it build the test project and its dependencies?
English
What features do you want in C# Dev Kit and why? Don’t say because Visual Studio or Rider has it 😅 or because you’re “used to it”, tell me why you can’t work without it.
#dotnet #csharp
David Fowler@davidfowl
As someone who has built up muscle memory for Visual Studio over the last 15+ years, I've been trying to get accustomed to VS code. Some of the paradigms are beginning to click. I've been using it daily to work on some bigger projects.
English
@DanielMiessler Basically every ecosystem is better than py.
Spotify switched to Java after many years of python (and at least 3-4 python http stacks, which are all useless btw). We use dotnet at my new place and Python was actively discouraged at AWS.
English
Anyone else grappled with pip, pipx, poetry and everything else for months and finally realized Python is a shitshow?
Thinking about moving to go for a big project.
Thoughts? Experience?
I don't want to chase green grass and find out it's just as treacherous.
English
TIL: kusto has an externaldata operator
Matt Zorich@reprise_99
I think anyone that has used KQL for a while knows the power of externaldata. You can look up data hosted on GitHub, in a storage account etc and query on it like regular data. What are some of your most creative uses of externaldata? My favourites below learn.microsoft.com/en-us/azure/da…
Español