wallst07
Joined 13 years ago
Joined 13 years ago
For example at most good crypto companies that hold wallets it's not possible to ssh at all, even if someone asked and go permission. It just simply isn't possible short of having a AWS root key or physical access to a computer in a DC.
There is no login, no accounts, no ssh keys or similar, they are immutable containers running from images with a signed SHA. The SHA can only be built by a build system that has it's own set of strict security controls.
Without details, I don't know why a comproised laptop would make any difference unless it submitted code through a PR and had it approved by multiple people.
I use it only with tailscale.
Ironically this is why I flag these articles, any slightly nuanced discussion is not allowed, its all the reddit/X style commenters adding 0 value.
Speed doesn't always mean accuracy either.
It is insanely difficult vs any other new sass startup with a profile->api key.
I won't even bother typing out all the steps.
Usually it's one outspoken engineer with lots of experience and anecdotes but not a link between cause/effect.. just a lot of war stories and slowing others down.
The larger it gets, the more fringe/outlier groups start to take over.
All spaces turn into echo chambers with enough people. I could be wrong.
It's mostly around navigating these nuances at work. Even what words to use "I built this" vs "LLM built this"
I know how to design large multi PR projects with multiple agents, but the ORG/LLM navigation , you can't learn by talking to AI.
/rant
Binance/Coinbase use hot wallets, they are not stolen from actual user accounts.