So apparently if someone knows / guesses the name of your S3 bucket - even if it's private (!) - they can just bankrupt you by sending infinite PUT requests and there is nothing you can do about it.
> requests get rejected
> but AWS still counts it as a write operation against…

If a contractor says 'If it were my own mother's house, I'd...' you're about to hear a straight up bonkers hack that god himself would not permit, none the less the city

auth bypass confirmed!

> INFO:paramiko.transport:Authentication (password) successful!

mm_keyallowed_backdoor cmd 1 allows to override the response for mm_answer_authpassword with a custom one. if you set it to { u32(9), u8(13), u32(1), u32(0) } you can login with any pass 🤓

Meta casually acquiring a VPN app for $120m to do man-in-the-middle attacks on external apps back in 2013.

I wonder why they're still using a custom In-App-Browser to show third party content. Totally legit.

Companies who don't understand the basics of distributed systems don't seem to get the fact that more features = more failure modes (often cascading).

Actual useful LinkedIn thought-leadership

Kelsey is right but there is a twist - not all companies support you moving out of support.

They'll say they do, but it'll never be the right time.

Advocate for yourself and your own opportunities at the right times and don't trust that they'll do it for you!

Digging the #BlackTechSaturdays events supporting underrepresented folks of color in tech.

extremely clever way to implement concurrent remapping of virtual memory pages in user space. uses mmap + memfds and mprotect + sigsegv handler. 👏

My story, 'Kiss in the Ring,' is out in Isele Magazine today.

It's about unexpected violence, addiction beginning with pain, and the shadows of hopelessness in resilience.

iselemagazine.com/2024/01/15/kis…

bruh u cant even wash a Tesla ☠️

Imagine a tech conference having no CFP, as they reach out to speakers directly. They successfully attract some of the most heavy hitter men speakers in tech, and 3 women speakers.

Now imagine my surprise that 2 of those women are FAKE profiles.

They do not exist.

Nada.

i made a website and i'm launching it tomorrow 🍿

ready or not.
what even is ready?
everything is a draft.

Okta got hacked. Leading to impact for CloudFlare, 1Password, and BeyondTrust.

Here's everything we know about it:

I'm a senior engineer and a fast food job is WAY more difficult than mine. No one working a desk job at a big tech company is being timed down to the second

With databases reliability is the #1 non negotiable feature.

I am incredibly proud of the PlanetScale engineering team. This is decades of experience operating some of the largest sites on earth coming into play.

the whole “do i buy a saas thing or deploy open source myself?” question is literally the same as “do i buy a service from a business or hire and manage an employee to do this function?” 🫡

Recommendations for an android phone that works well for a trip to China?

also for your consideration: dhh is a professional attention whore, not a professional programmer. all of the things he does is about popularity and attention. he has no incentive to increase your productivity.

new field but in the same sector that you came from. For example, if you’ve worked in hospitals most of your professional life but want to break into software engineering, maybe look at internships and open roles in the telehealth sector. Your previous experience still applies.