johnduhart
Joined 14 years ago
Karma
440
Submissions
51
Member since
Dec 21
Recent submissions
Comment · 29 days ago
Comment · 3 months ago
https://www.404media.co/footage-shows-cop-stalking-woman-he-...
So do we need to wait for abuse with this specific piece of technology in order to be concerned?
Comment · 6 months ago
Pricing page reflects this: https://claude.com/pricing#individual-features
Comment · 1 year ago
Absolutely, I do this at $dayjob to update feature flags and refresh config. Your code just needs to understand that such execution is not guaranteed to happened, and in-flight requests may get interrupted and should be retried.
Comment · 1 year ago
Oh wow, a 23-page write up about how the author misunderstood AWS Lambda's execution model [1].
> It emits an event, then immediately returns a response — meaning it always reports success (201), regardless of whether the downstream email handler succeeds or fails.
It should be understood that after Lambda returns a response the MicroVM is suspending, interrupting your background HTTP request. There is zero guarantee that the request would succeed.
1: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtime-...
Comment · 1 year ago
> I won’t get sucked into the session ID vs. JWT argument, but honestly, using JWTs in cookies is a win because you don’t have to fuss with storing session data on the server.
Okay, but then you implement storage of the refresh token and build this bespoke JWT re-issuance logic. So where's the win here? Just use sessions.
Comment · 1 year ago
Linking to a collection of context-less clips from a streamer with an active sexual harassment suit[1], whose community is engaging on a harassment campaign against the subject in question[2] isn't the unbiased source you think it is.
1: https://www.polygon.com/news/527186/destiny-steven-bonnell-s... 2: https://en.wikipedia.org/wiki/Destiny_(streamer)#Post-Twitch...
Comment · 1 year ago
> Yes it is. But the the 1st amendment does not say that any speech can have zero consequences for you.
The Government taking action against a citizen for voicing opinions it does not agree with falls pretty clearly into what the 1st amendment covers. This is not a "yelling fire in a crowded theater" type scenario where speech is being restricted for the benefit of many.
Comment · 1 year ago
> Their profit margin is 5.5%.
5.5% of what, dmm?
https://www.healthcaredive.com/news/unitedhealth-unh-2024-re...
> the Minnesota healthcare behemoth reported adjusted profit of $25.7 billion — an all-time record.
Comment · 2 years ago
Does AWS need to build anything on the site as part of this deal, or are they simply leveraging the power added to the grid in their existing us-east-1 footprint? The distance from Ashburn is too far for this to be an extension of a region.
Comment · 2 years ago
> Transamerica is getting worse service because the contractor that they prefer wanted to look at documentation for a system they payed for. This is why enterprise IT is a legally mandated mess.
No, I don't believe that's at all what was happening. I really recommend reading the original compliant[1]. TCS was leveraging their employees with access to CSC's documentation and source code to glean information about how a particular feature was implemented, _not_ for supporting Transamerica, but for reimplementing the feature in their own product.
From paragraph 29 of the compliant:
> A TCS employee, who upon information and belief is part of the U.S. BaNCS development team, wrote in an email: “Quite honestly, I’m not sure how VTG [Vantage] does this today, so maybe we should engage [TCS employees with access to the Vantage source code] if we want to emulate that?”
The complaint goes on to describe the engineers sending the actual source code to the team. This is pretty clear cut theft IMO.
Comment · 4 years ago
> I mean, you didn't even consider implementing a simple fetch of an already cloned repository in your mirroring server code. So yeah, I'd argue that the bad faith part is actually justified.
https://github.com/golang/go/issues/44577#issuecomment-11378...
> We did consider caching clones, but it has security implications and adds complexity, so we decided not to. It is certainly not trivial to do and not something we are likely to do based on this issue.
Drew continues to act as though he is always correct, and any viewpoint that isn't his is just moronic. I've repeatedly seen this behavior from him in multiple venues over the years, and I'm happy to see the wider community start calling this out as childish.
Comment · 4 years ago
There's a _lot_ of assuming happening on this post so far. My understanding was the Twitter account previously had different handles, including her real name. I don't think that level of sleuthing requires internal access, using old/archived tweets can unmask the account.
That's simply not true. I'm able to log onto GitHub on my corporate device using a passkey that's kept in 1Password on my iPhone.
https://bughunters.google.com/blog/passkeys