gauravphoenix

Joined 12 years ago

Karma
591
Submissions
209
Member since
Jun 5
Security dude. www.linkedin.com/in/gauravphoenix
View on Hacker News

Recent submissions

Comment · 1 year ago
awakened by replit/cursor
Comment · 1 year ago
Comment · 1 year ago
Comment · 1 year ago
>The US probably hasn't been this economically dominant since after WWII.

now look at the deficits.

Comment · 1 year ago
I don't understand why didn't Yahoo fail due to SPF check failure.
Comment · 1 year ago
one of my greatest learnings in life is to differentiate between facts and opinions- sometimes opinions are presented as facts and vice-versa. if you think about it- the statement "this is false" is a response to an opinion (presented as a fact) but not a fact. there is no way one can objectively define and defend what does "real technical understanding" means. the cloud space is vast with millions of people having varied understanding and thus opinions.

so let's not fight the battle that will never be won. there is no point in convincing pro-cloud people that cloud isn't the right choice and vice-versa. let people share stories where it made sense and where it didn't.

as someone who has lived in cloud security space since 2009 (and was founder of redlock - one of the first CSPMs), in my opinion, there is no doubt that AWS is indeed superiorly designed than most corp. networks- but is that you really need? if you run entire corp and LOB apps on aws but have poor security practices, will it be right decision? what if you have the best security engineers in the world but they are best at Cisco type of security - configuring VLANS and managing endpoints but are not good at detecting someone using IMDSv1 in ec2 exposed to the internet and running a vulnerable (to csrf) app?

when the scope of discussion is as vast as cloud vs on-prem, imo, it is a bad idea to make absolute statements.

Comment · 1 year ago
just in case; I don't want to make it worse.
Comment · 1 year ago
done!
Comment · 1 year ago
valid point, removed.
Comment · 1 year ago
Whenever time permits, I have a (bad) habit of viewing source code of new website. In this case, I found this on this website: (haven't read the js yet to see what's the true intent but surely a sign of horrible engineering)

edit- seems like remix customizations.

              "remove-watch-video-requirement": {
                            "defaultValue": false,
                            "rules": [{
                                "condition": {
                                    "env": "prod",
                                    "email": {
                                        "$in": ["<redacted>@gmail.com", "redacted"]
                                    }
                                },
                                "force": true
                            }]
                        },
                        "score-only-lesson-phoneme": {
                            "defaultValue": true
                        },
                        "auto-stop-recording-for-all-practice": {
                            "defaultValue": true,
                            "rules": [{
                                "condition": {
                                    "env": "prod",
                                    "email": {
                                        "$in": ["redacted", "redacted", "[email protected]"]
                                    }
                                },
                                "force": false
                            }]
                        },
                        "use-speechace-v9": {
                            "defaultValue": true
                        },
                        "april-2022-price-increase-experiment": {
                            "defaultValue": false,
                            "rules": [{
                                "condition": {
                                    "env": "prod",
                                    "email": {
                                        "$in": ["[email protected]", "[email protected]", "[email protected]", "[email protected]", "[email protected]"]
                                    }
                                },
                                "force": false
Comment · 2 years ago
Comment · 2 years ago
Comment · 2 years ago
Comment · 2 years ago
not surprising, we didn't evolve living the sedentary life we are living today

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton