• 0 Posts
  • 73 Comments
Joined 2 years ago
cake
Cake day: December 25th, 2023

help-circle


  • Because a security engineer focused on cloud would rightfully say “pod security is not my issue, I’m focused on protecting the rest of our world from each pod itself.”. With AWS as example: If they then analyze the IAM role structures and to deep into where the pod runs (e.g. shared ec2 vs eks) etc. then it would just be a matter of different focus.

    Cloud security is focused on the infrastructure - looks like you’re looking for a security engineer focused on the dev side.

    If they bring neither to the table then I’m with you - but I don’t see how “the cloud” is at fault here… especially for security the world as full of “following the script” people long before cloud was a thing.


  • I see two ways forward: either you’re risk averse and assume internal damages that will highly influence heat transfer or you trust in the automatic protection mechanisms or your CPU.

    Personally I’d toss it but I’m old and I’ve burned more than one CPU back in the days with faulty or wrongly installed coolers.

    I don’t think that the risk is high nowadays but I’m (literally) burned in that regard.

    I’m not even sure it would survive bending back so perhaps try that first and if it breaks completely you don’t even have a decision on your hand :)


  • Scipitie@lemmy.dbzer0.comtoPrivacy@lemmy.world"Your downvote was reported."
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    10 days ago

    Oh I think I see the misunderstanding, thanks for your answer!

    I had no specific technology or even "social media in my mind at all when writing my first post. Instead I tried to convey my personal preference on the scale “absolute transparency” to “absolute privacy” for the specific case of “seeing who votes in which direction from user about users”.

    I completely agree with your statement “don’t treat it differently because of underlying tech decisions”.

    For me the answer to the privacy question depends on the specific use case (and who provides/ controls it).

    And to answer your question: I only try to describe “my” wishes, not how I think fedi developers see the situation.


  • Scipitie@lemmy.dbzer0.comtoPrivacy@lemmy.world"Your downvote was reported."
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    1
    ·
    10 days ago

    I have to be very clear: That’s simply wrong and I have no idea how you come to the conclusion that my statement was Lemmy /Fedi specific in any way…

    All other social media do have this information and just don’t provide it to their end users.

    My take for how I read this specific case (public communication/information platform) is: Either full anonymity or pseudonymous transparency.

    For other cases I’d even argue for personal linked transparency. For others I’d be against having behavioral transparency and would prioritize privacy even higher.

    “Social media” as umbrella term is btw too broad for me personally to say “they should do X”


  • Scipitie@lemmy.dbzer0.comtoPrivacy@lemmy.world"Your downvote was reported."
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    2
    ·
    10 days ago

    That’s the balance though: privacy is the antagonist of transparency in its nature.

    And that’s w good thing in my opinion because this discussion is depending on the subject and not an ultimate right or wrong.

    For the specific topic I actually value the transparency more than my personal privacy because it makes manipulation of opinion more transparent.


  • It’s a question of effort. Sony has a shitload of public presence. For social engineering I can learn many mid level manager names from LinkedIn for example and their infrastructure is necessarily public facing to allow people to work there.

    And that’s not talking about their public web presence and services.

    And now we’ll switch to … You! If I’d try to target you I would have to first find anything from you to actually target.

    Once I have your phone number, public IP or anything that gives me a lead I have to find my way in. And that way in will be because you’ve made a mistake, are lax with your passwords or use an out of date service.

    But that’s like 2/3 of the work I had for Sony as well. And now I see that you’re a student with a net fortune of 50$ and a car from 1989.

    To out it another way: for companies I aim with s rifle as they are a worthy prey. For individual people I use a shotgun and hope something hits something.





  • You got a lot of relevant answers so I want to point out something else:

    You’re hosting your own services. By yourself. Fuck everyone with a broom who tries to gatekeep that. And I don’t mean wooden side first.

    Seriously, your question is on point here from my perspective and as long as it has a connection to running services by your own I personally would love more diversity in hosting solutions.

    Personally, I’d love to see people share more about their provider agnostic opentofu deployment or someone who went all in on AWS lambdas for weird stuff.






  • One thing that was only mentioned briefly by someone else is the physical button turning on the computer.

    Similar to the paperclip test figure out where the power button goes into the mainboardw and bridge that with a short cable. Is possible that by moving the case the old button lost a cable.

    This is just one more thing to test though, it’s really trial and error as you know :)