ws66's comments

ws66 | 1 year ago | on: Ask HN: How to store and share passwords in a company?

Shared passwords should always be an exception. Prefer SSO. However the exception will always exist, in which case:

Some suggest using KeePass or equivalent, but I advise against it - too easy to copy and leave with the vault and very difficult to audit.

Find a solution that audits who had access to such password. And do your audits!

Consider rotating your shared passwords frequently, especially any high privileged ones.

If your risks warrant it, check for a PAM (privileged access manager) that acts as a middlemen and fully hides the password.

I realize I am not really answering your questions, so I'll stop here. But... SSO and proper directory management!

ws66 | 2 years ago | on: Is there anywhere in the world someone can just live for free?

My POV - no, and I would not recommend trying this. Some questions to consider: Your security: How would you ensure your (and your family's) security if you are really, really, on a allotment of land, let's say free from any form of government (no taxes)? You would take care of your own security with your own guns and such? Well, now you have to spend money to buy those - where do you get it? And maybe you are able to protect yourself from some individuals, but what of organized gangs - if your land is not governed, then there are no law - good luck!

Your security again, but this time from the point of view of insurance? Your home is on fire, how do you deal with this? Are there any firefighters available? How do you pay for this service? Your house is completely burnt, were you insured?

In the end maybe it can work if you plan on living in a cave with almost nothing (nothing to lose!) - but watch out for other people that may be interested by in having your cave! Strongest person (or organized group) wins...

ws66 | 2 years ago | on: Ask HN: How to be a manager? Any good sources for learning how to delegate?

It may be counter intuitive, but from my point of view, when you start managing individual contributors, YOU start working for them. Even though you are able to delegate work, a good part of your job is to clarify what needs to be done, how, etc... Especially that you are moving from solo to team based, you are also managing and clarifying requirements (stories or whatever) for your team. It's something you were possibly doing in your head previously, now you need to formalize it, because... communications! You help them do what they are good at, remove roadblocks, organize work between team members, plan work ahead of time, etc...

ws66 | 2 years ago | on: ”Be Useful”

I am not excusing him groping people. But I see someone coming to terms and acknowledging the mistakes and harm he did.

Sharing his experience and talking about the mistakes he made and how bad it was is just a net positive for all - I mean he is still a role model and can influence young people - so I see no value in cancelling him. I would agree with you if he was still groping or promoting such behaviour, which doesn't seem to be the case.

I know all this doesn’t fix anything for the victims, and it is terrible for them.

ws66 | 2 years ago | on: ”Be Useful”

Are you professing that we should pass on everone that doesn't have a perfect record?

I mean, is there someone with a perfect record?

I think you learn and grow to be good, to take care of others, and this process goes with mistakes that impact yourself and others... You cannot expect someone to be always 100% perfect all the time.

As for myself, I did tons of shit that I am not proud of, so you should pass on this comment as well...

ws66 | 5 years ago | on: You don’t need SMS-2FA

This completely ignores the defence in depth principle. Yes it is good that users use strong, unique passwords, but we know the password store can get compromised. A second factor provides additional protection, but it is not foolproof. The network analogy of this post: why use a network firewall, we just need to keep our devices patched and up to date!!

ws66 | 5 years ago | on: Mapping Police Violence

Criminals should fear justice. The police is NOT the judge and jury. The police responsibility is to bring someone, alive, in front of a judge, with proof of wrongdoing. It is called separation of duties.

ws66 | 6 years ago | on: Alone in a Crowded Milky Way

One thing I fail to see mentioned here and in such articles is the complexity of colonization. We are falling in the trap of "idea == profit". A lot needs to be done, and can go wrong, between both.

Some examples I am thinking of, and I am certain people will have more... All are compounded by the LY distances between colonies and whatever home is:

- Terraforming - It would be the exception that new planets are 100% hospitable to a specific species. How long to properly terraform, and then how long before the can get to a point where they can launch a new sub-colony? Need proper population, technology and resources.

- Culture drift - how long can the colony and home share the same culture, with same values and objectives?

- Political drift - Imagine you are part of a colony, with "home" some 4 LY away. How long before you will want to have full autonomy, specially given the distance?

- Cultural and political factions - Is it possible that individuals in the colony have different objectives, resulting with political infighting or open war? What would then be the impact on the colony?

- Protection - Depending on technological advancement, how can a colony protect itself from external rogue elements (big warship gone rogue, pirating the colonies for resources?)

For sure, many of these things depend on the type of species colonizing its region, how much sentience and free will they have. I also assume they haven't solved FTL travel!

ws66 | 6 years ago | on: Canada's Decision To Make Public More Clinical Trial Data Puts Pressure On FDA

> Anything measured improves. The more data and metrics, the better safety of drugs can be observed

I agree in theory. However in practice, when the data is relatively complex, there will be some people that will take the data and do their own (lacking) interpretation and sometimes create more harm. Like what we are seeing with global temperatures from public records and how this is interpreted by the different parties...

But I have no solution to this issue...

ws66 | 6 years ago | on: EU brings in 'right to repair' rules for appliances

> you’re already free to buy a Miele

I want to buy Miele, or any other quality brand, but if anything breaks (which we know will happen), the service technician has a two hours drive to get to my place, which I have to pay. IOW, the top quality brands mostly offer service in densely populated areas (and it makes businesses sense for them)...

page 1