aberoham

Engineers often over-think compliance. SOC2 is regulatory capture, and an audit that tests your controls. You define the appropriate controls. As long as you do what you say you're going to do, you should pass the audit. It's not rocket science. It's a feature of a correct system that it is auditable. How easy it is to audit is really a function of your maturity. SOC2 and its ilk such as ISO27001 are just maturity signalling mechanisms. Stop overthinking it or applying black and white rules -- in actual practice its always shades of grey and most auditors are just happy to have an engaged and switched on team to be auditing, vs someone who treats it as adversarial. You're paying them!

What would it mean if someone were to successfully exploit these? Most or all L2 ecosystems or the magic components that let them speak to each other would need a hard reset?

He’s busy with MathAcademy earning XP-SEC

export CLAUDE_CODE_DISABLE_1M_CONTEXT=1

UpCloud

I'm really hoping this means GCP Security Command Center quickly gets subsumed by Wiz

"the remaining 2% were large batch requests", [which made up 50% of the work] .. who really watches that many shows on Netflix? What was in those batches, if someone is watching that much, why bother with serendipity at all? Most serendipitous thing you could do is shut off their subscription.

Claude Cowork grabs local DNS resolution on macOS which conflicts with secure web gateway aka ZTNA aka SASE products such as Cloudflare Warp which do similar. The work-around is to close Cowork, let Warp grab mDNSResponder's attention first, then restart Claude Desktop, or some similar special ordering sequence. It's annoying, but you could say that about everything having to do with MITM middleboxes.

Wow, you have to try claude code with Opus-4.6..

Can relate. The UK electronic eVisa app was pure garbage. The major redeeming feature of the UK civil service and the various regulatory quagmires is that they're effectively open source. You (or Claude) can read through their practice manuals or policies and find a work-around. But my goodness is it annoying until you figure that out. Another fascinating bit is you may think the various departments are connected but they are not. The nice looking UK Government Digital Service (GDS) Design System gives everything a veneer of connected competence, but under the bonnet, that slick UI signal is as reliable as a posh accent. Don't become a migrant if you don't have to.