joshchaney

This blog is wrong. Other Sean Conners are to blame for not knowing their own email address. I know this because every other first initial j, last name chaney on this planet is a moron. I get Jennifer's receipts, Justin's bills, John's rent-2-own upcoming bill notifications, and hundreds more. Please. Make. It. Stop.

I've learned that if the project describes itself as "Production-ready", it was definitely vibe-coded.

Intel's Ocotillo campus in Chandler, AZ is right off Queen Creek Rd. Pretty sure that's all it is.

Is there some documentation about this somewhere? I actually own both level1techs DP 1.4 KVM 4-computer/1 monitor switch and that new USB KM switch, so I'm familiar with their products.. but I'm not aware that their KVM does anything special other than support high response rates (where most KVM's only do 60hz) and passthrough USB properly.

I think WAF is really a bigger set of tools now (bot protection, IP reputation, L7 DDoS/rate limiting, API restrictions) than just signatures. Virtual patching is also incredibly important and there's really no other security tool that gives you the granularity to restrict something like the values of some param on a specific path of your app, but only when some cookie exists.

I don't think the performance concerns here are accurate. I think these days most people are using vendors own cloud infra (Akamai, Cloudflare, F5, Imperva, etc), but even if you are using WAF on-prem, F5 and Imperva sell purpose built hardware that have no problem handling tons of requests. Most WAF's also have weighted signatures these days and won't just fire on ${jndi. "${jndi" might give 5pts, while "org.apache.*" gives another 5, and maybe their threshold is set for 10 for blocking.

I have plenty of issues with WAF's and I would invest a lot more in developer training, but I think they still have their place.

This is exactly what happened to me. I worked from home for Wells Fargo for years prior to the pandemic. This year suddenly my status got changed and I was required to go into the office. First come first serve cubicles and none of my co-workers were even in the same state, let alone office. Years prior to the pandemic when I was in the office I had my own cubicle and could at least expect my chair would be the same and nobody had messed with the monitors on my desk. It's like working from an Internet cafe every day now.

The one I referred to is a TCL 55S405. It seems the only solution is to never connect it to the internet, or factory reset it and never connect. Once connected if you remove the network details, it will blink indefinitely (at least for many TCL models).

Amazing that their budget recommendation is the Roku TV. I can tell you from experience if you don't connect them to Wi-Fi there is an LED that will constantly blink on the bottom front of the TV, with no way to disable in software. So unless you like your TV with an electrical tape aesthetic, I would avoid Roku TV's.

That's a laptop CPU. The top-end Mac Mini he's using is a 65W TDP i7-8700. Pretty large difference in performance.

He said his email account has 2FA (convincing us his email was not hacked), I don't think he meant his account on Dell.

The title should really be changed, there is no confirmation they were hacked. I have an equally plausible theory -- You used the same username and password somewhere else that got hacked, or your credentials were stolen through some infostealing malware. Account takeover is a huge problem these days, it wouldn't surprise me if there is a tool out there written specifically to validate combo lists against Dell's website.