Generally yes - a compromised CA can be used to issue certificates for any domain, which is why when a CA is compromised the first step is usually for browser vendors, OS vendors, etc to immediately remove the…
The real problem the CAs try to solve is, basically, being a trusted middleman who vouches for other certificates. The first time you connect to google.com in your browser and get the google.com certificate, your web…
The catch is that audio spectrum isn't "too" wide - you don't need to do this initial sampling in real time, you can do it once offline to capture the behavior of the original system which you then model in the realtime…
The key difference is that while an encyclopedia holds facts themselves, LLMs trained on that source material encode something more like a highly probable facsimile of those facts - the original fact was lost, LLMs are…
People tend to mix the terms around a lot, but generally you'll see the manufacturers use "ducted split system" or "mini split", where mini splits are the self-contained wall or ceiling mounted units. I live in an NYC…
I think there's an element of this which really breaks down to the type system being the part of formal verification that we've figured out how to do during the course of implementation. Software engineers (myself…
The details people gloss over when throwing SOC 2 or whatever other audit costs around are the complexity of the system being audited, the chosen criteria to audit (AICPA defines 5 families of criteria... Security is…
The real takeaway for projects and companies should be that someone having historically behaved in a logical and responsible way doesn’t guarantee that they’ll continue to do that for forever. Good security architecture…
I’m one of those people. Wore watches regularly through my mid 20s, completely fell out of the habit as I spent more years working from home and my routine around “getting ready for the day” loosened, and the Apple…
The concept of "tool building" is one of the areas my team has spent the most time coaching our less-technical employees on since widespread LLM rollout in our company. Developers and developer-adjacent, technical…
Honestly whipping up a lexer/parser and a REPL is one of my favorite ways to learn a new language. You can cover a lot of ground in a "real" language by just doing the frontend implementation of your own made-up…
Whats implied there is that the "human touch" will become a luxury. I have a hard time seeing a future where retail doesn't bifurcate even further into ultra low margin, happy-path optimized megastores and…
Even in a relatively open organization where conversations and work are public/discoverable by default, there's still a huuuge difference between the level of curiosity required to join a convo happening in the office…
Corporate software in general is often chosen based on the value returned simply being "good enough" most of the time, because the actual product being purchased is good controls for security, compliance, etc. A…
Manufacturers themselves generally don't want to sell directly to consumers: consumers are fickle and need support and have questions and sometimes want refunds or returns and if you sell directly to them, you need to…
I think its at least as much of a working environment preference. Once I became experienced enough to have opinions about things like my editor and terminal emulator... suddenly the Visual Studio environment wasn't…
High-protein everything is riding the wave of GLP-1 popularity right now. Doctors are begging people on that class of drugs to chase protein targets more similar to what might have previously been reserved for heavy…
I don't have many regrets about having spent my career in (relatively) tiny companies by comparison, but it sure does sound fun to be on the other side for this kind of thing - the scale where micro-optimizations have…
My debit card is a direct line to my primary bank account. If something goes wrong there and an attacker gains access, my cash is simply gone. Yes, the bank will perform an investigation and yes they may issue some…
I've personally had a decent amount of luck with trying to reframe this sort of sentiment from "being useful" to "having purpose". Right now, yes, its true that a lot of my day to day purpose is driven by participating…
Its less about torrents being the delivery mechanism and more about bringing data from a potentially unknown source, under potentially unknown licensing, and distributed for a potentially unknown reason into the…
The thing about trademarks is that, if you want to prevent other people from using them, you generally have to still be using it yourself and be able/willing to justify to a court that you're still using it. (At least…
I have no insider knowledge here but it doesn't seem outlandish to think that the negotiations would go a little differently for an established product vs a brand new one. Goldman may have simply been the only bank…
Game mode being latency-optimized really is the saving grace in a market segment where the big brands try to keep hardware cost as cheap as possible. Sure, you _could_ have a game mode that does all of the fancy…
I think there's some real sample bias in that definition of "the community" though, because people who are passionate Ruby programmers giving conference talks, running meetups, etc are often a distinctly different group…
Generally yes - a compromised CA can be used to issue certificates for any domain, which is why when a CA is compromised the first step is usually for browser vendors, OS vendors, etc to immediately remove the…
The real problem the CAs try to solve is, basically, being a trusted middleman who vouches for other certificates. The first time you connect to google.com in your browser and get the google.com certificate, your web…
The catch is that audio spectrum isn't "too" wide - you don't need to do this initial sampling in real time, you can do it once offline to capture the behavior of the original system which you then model in the realtime…
The key difference is that while an encyclopedia holds facts themselves, LLMs trained on that source material encode something more like a highly probable facsimile of those facts - the original fact was lost, LLMs are…
People tend to mix the terms around a lot, but generally you'll see the manufacturers use "ducted split system" or "mini split", where mini splits are the self-contained wall or ceiling mounted units. I live in an NYC…
I think there's an element of this which really breaks down to the type system being the part of formal verification that we've figured out how to do during the course of implementation. Software engineers (myself…
The details people gloss over when throwing SOC 2 or whatever other audit costs around are the complexity of the system being audited, the chosen criteria to audit (AICPA defines 5 families of criteria... Security is…
The real takeaway for projects and companies should be that someone having historically behaved in a logical and responsible way doesn’t guarantee that they’ll continue to do that for forever. Good security architecture…
I’m one of those people. Wore watches regularly through my mid 20s, completely fell out of the habit as I spent more years working from home and my routine around “getting ready for the day” loosened, and the Apple…
The concept of "tool building" is one of the areas my team has spent the most time coaching our less-technical employees on since widespread LLM rollout in our company. Developers and developer-adjacent, technical…
Honestly whipping up a lexer/parser and a REPL is one of my favorite ways to learn a new language. You can cover a lot of ground in a "real" language by just doing the frontend implementation of your own made-up…
Whats implied there is that the "human touch" will become a luxury. I have a hard time seeing a future where retail doesn't bifurcate even further into ultra low margin, happy-path optimized megastores and…
Even in a relatively open organization where conversations and work are public/discoverable by default, there's still a huuuge difference between the level of curiosity required to join a convo happening in the office…
Corporate software in general is often chosen based on the value returned simply being "good enough" most of the time, because the actual product being purchased is good controls for security, compliance, etc. A…
Manufacturers themselves generally don't want to sell directly to consumers: consumers are fickle and need support and have questions and sometimes want refunds or returns and if you sell directly to them, you need to…
I think its at least as much of a working environment preference. Once I became experienced enough to have opinions about things like my editor and terminal emulator... suddenly the Visual Studio environment wasn't…
High-protein everything is riding the wave of GLP-1 popularity right now. Doctors are begging people on that class of drugs to chase protein targets more similar to what might have previously been reserved for heavy…
I don't have many regrets about having spent my career in (relatively) tiny companies by comparison, but it sure does sound fun to be on the other side for this kind of thing - the scale where micro-optimizations have…
My debit card is a direct line to my primary bank account. If something goes wrong there and an attacker gains access, my cash is simply gone. Yes, the bank will perform an investigation and yes they may issue some…
I've personally had a decent amount of luck with trying to reframe this sort of sentiment from "being useful" to "having purpose". Right now, yes, its true that a lot of my day to day purpose is driven by participating…
Its less about torrents being the delivery mechanism and more about bringing data from a potentially unknown source, under potentially unknown licensing, and distributed for a potentially unknown reason into the…
The thing about trademarks is that, if you want to prevent other people from using them, you generally have to still be using it yourself and be able/willing to justify to a court that you're still using it. (At least…
I have no insider knowledge here but it doesn't seem outlandish to think that the negotiations would go a little differently for an established product vs a brand new one. Goldman may have simply been the only bank…
Game mode being latency-optimized really is the saving grace in a market segment where the big brands try to keep hardware cost as cheap as possible. Sure, you _could_ have a game mode that does all of the fancy…
I think there's some real sample bias in that definition of "the community" though, because people who are passionate Ruby programmers giving conference talks, running meetups, etc are often a distinctly different group…