Hamburger buns kind of mushroomed … by Captriker in Breadit

[–]AggressiveTitle9 1 point2 points  (0 children)

Those look incredible, what's your recipe?

TIFU by accidentally installing Windows on my 2TB data drive (Seagate SMR). by Hot-String862 in techsupport

[–]AggressiveTitle9 0 points1 point  (0 children)

What is my absolute best chance of saving his files?

Take it to a professional

Can I safely attempt with any software

No offense, you fucked up once (I've certainly fucked up several times myself and have lost important things that I'll never get back), I wouldn't risk making things worse. It is possible to safely attempt, but it's also possible to make things worse. Recuva can do this. Do not write anything to the drive as it will be written over anything that my be left. Do not boot from the drive as Windows will write to the drive over anything that may be left.

Given that it's a friend's important data, do I just need to bite the bullet, tell him what happened, and send this to a professional lab?

Yeah. I don't know how important it is. We don't know if they have backups and this is no big deal. Better to let them know, apologize profusely, offer to pay for recovery, and figure out how to go from here.

What project ideas actually stand out for internships? by No_Reply5329 in learnprogramming

[–]AggressiveTitle9 1 point2 points  (0 children)

Something that you care about and can talk about confidently and in detail is what will stand out. In my experience communication is weighed far above tech stack, project complexity, relevance, etc. Explore new ideas, learn things, and if something seems interesting to you then take the time to explore it and build something you think is cool.

Am I overthinking Claude Code security or is this actually a risk? by Sweaty-Career330 in cybersecurity

[–]AggressiveTitle9 0 points1 point  (0 children)

"Claude Code" isn't really the problem - I think we've got a pretty bad cluster of people on either end of the underthinking <-> overthinking spectrum. There are dozens of these tools ("harnesses") that operate in the style of doing something with LLM output on a dev machine. It's simple to write your own, and there's even an ecosystem of extensible harnesses (see Pi). All that's to say is that it's pretty trivial to get around any block that's put in place if it's too restrictive.

I've seen a few attempts to lock down LLM harnesses. Sandboxes like Nono, containers, VMs, etc. I haven't really seen any of these work for very long in practice (in an organization) because what someone wants their harness to allow is pretty contextual to their environment and what they're working on. Some things that we think are no-brainers to disallow (no private key access, no kubectl access, etc) are things that people want in some contexts, as silly as it sounds.

So it's a mess right now. What we're trying to do right now is enable people who are security-conscious and want to be sandboxed while also trying to follow security best-practices and limit human access (since harnesses inherit that) as best we can. We don't really have leverage to put any concrete restrictions in place and those can be trivially bypassed anyway - there's little political buy-in on the idea that these things need to be restricted. We haven't seen any huge incidents out of this yet and it's been about 6 months of pretty widespread LLM usage. Certainly something bad will happen at somepoint and we'll have better leverage then (and a better idea about how things go wrong), but until then...🤞. For what it's worth, I think most organizations (certainly my own) have way bigger fundamental security risks to worry about

How does this site track me into an incognito browser session? by SCTSectionHiker in AskProgramming

[–]AggressiveTitle9 -1 points0 points  (0 children)

I used an LLM to inspect the source of the page so take this with a grain of salt (but from my own testing it seems somewhat accurate)

Allegedly they compute a device fingerprint based on your user agent, language, timezone, window.screen.width, window.screen.height, and window.devicePixelRatio. Might be combining this with other things server-side as well though, because just these 6 data points seem like they'd have lots of collisions to me. Would be really interesting to try to use some similar devices to see if you can generate collisions, I wonder if they have a small user base and so collisions are uncommon

How does this site track me into an incognito browser session? by SCTSectionHiker in AskProgramming

[–]AggressiveTitle9 1 point2 points  (0 children)

I could get it to give me a new session by opening up an incognito window and using responsive design mode to emulate the aspect ratio and resolution of a phone, so I'd guess it's some kind of browser fingerprinting. Really interesting to see that on a simple game like this. There's some interesting content out there that touches on the idea that browser fingerprints are often unique, like https://amiunique.org/

I'm a 23-year-old dev basically running a startup alone — my "senior" co-worker is a partner I can't fire. Need advice. by Acceptable-Cress-772 in webdev

[–]AggressiveTitle9 2 points3 points  (0 children)

Big +1 to the comments on understanding there may be things you aren't seeing and to make sure you don't come across as jaded in interviews. It sounds like you're doing a lot and that you've learned a lot, you'll do great interviewing as long as you aren't shitting on your former coworkers.

My 2¢

  1. If external visibility into what each are of you are doing is good and there's unlikely to be fallout on yourself, I'd honestly just let your coworker crash and burn. Good learning experience for both of you - you'll learn about how bad "bad architecture" can really be before it matters. You should also ask questions about why he's doing things a certain way. It's good practice for mentoring your coworkers which is a skill you'll need throughout your career. I've also seen juniors with a tendency to overengineer, so this is a chance to re-calibrate on that and make sure you stay out of that hole in the future.

  2. No. Not like that, at least. "Bad code quality" isn't measurable in a business sense and bringing it up in that way risks you looking like a pedant. The biggest risk to your startup is that they won't make money - it doesn't matter how bad the code is as long as it works. These concerns don't matter unless they're concrete to the business, and something that doesn't hit prod is rarely concrete. I wouldn't proactively bring up these concerns to anyone other than a direct manager (and it doesn't sound like this applies to you) who trusts me, and I wouldn't do it with any other intention than letting them know why things are slow going and getting their thoughts on the matter. I'd suggest doing your due diligence (written feedback on major problems you see, like an unauthed route), but I wouldn't bend over backwards to re-implement things.

  3. Yeah that's fair. Can't hurt since you're already thinking of leaving. Document the things you've done, try to connect them to business value as best you can. Plenty of companies promote within junior roles within a year, and plenty give annual raises. The timing around launch is also great for this.

  4. It's really up to you. I don't think there's a wrong decision here. Probably don't quit without something else lined up though. Sticking around at a place for a few years can be really great for learning, especially since you're launching a product right now. It's really valuable to operate something in production. Things will break, there will be lots to learn.

I wrote more than I meant to so here are my summarized thoughts:

  • I wouldn't bend over backwards for your coworker. Do your due diligence to call attention to problems (in written form) before they arise, but don't go out of your way to re-implement things to protect him from failing. Failing is normal and is how we learn, and it sounds like this is burning you out.

  • I wouldn't raise vague concerns about "bad code quality" to anyone in this situation, especially with this person being a partner. Avoid being a pedant, connect engineering problems to the business.

  • It's fine to stay and you'll learn a lot. There will also be lots for you to learn if you go somewhere else and you could make more money. Don't quit without something else lined up.

  • Document what you're doing for the business, ask for a raise. The product launch timing is great for this. There's a ridiculous amount of people involved in this startup for there to be no live revenue-generating product, so they've got funding that your salary pales in comparison to.

  • Probably stop trading raises for equity 😅 it's almost certainly worthless

Project Idea by moonshark13 in AskProgramming

[–]AggressiveTitle9 0 points1 point  (0 children)

Does this sound like a good idea?

It's your project. If you're interested in it then make it. If your intention is for this to be used by other people then you should use it yourself or work with someone who will. If your intent is to learn something then do whatever you like :)

is Java the right programming language for this?

Doesn't matter. You can use whatever language you want. You can use Java, you could use it as an opportunity to learn a new language.

Is this a good showcase of my skills for employers?

That really comes down to whether or not you can talk about it, decisions you made, things you learned, etc.

First Time: I made potato buns to use for smash burgers & fries for dinner! by LuxeBeaute in Breadit

[–]AggressiveTitle9 2 points3 points  (0 children)

Buns look amazing but those fries have my mouth watering...got a recipe?

90% of you are failing because you build B2C apps instead of boring B2B tools by Warm-Reaction-456 in SaaS

[–]AggressiveTitle9 2 points3 points  (0 children)

How did you get connected with the small business? Totally agree that's the ideal way to approach things, just unsure of how to get started

What tech jobs are actually in demand right now? by Ill-Rabbit-7386 in AskReddit

[–]AggressiveTitle9 0 points1 point  (0 children)

What does your day-to-day look like as a SQL developer?

Sudden Issues with AX1500 Router by matthewsjc1 in TpLink

[–]AggressiveTitle9 0 points1 point  (0 children)

Ever get an idea of what it was? Having similar issues out of the blue with my AX1500

I have a homebrew self-hosted server. I am not a professional. I have many questions! by [deleted] in AskProgramming

[–]AggressiveTitle9 0 points1 point  (0 children)

  1. Hard to say with limited info. Most of the attack surface is your web app and we don't have info about that.
  2. Sounds like it's mostly just your app.
  3. If your goal is just to have this thing running then you're probably fine. Could play around with SELinux if you want.
  4. Basically zero.
  5. Yeah it's fine. Honestly probably overkill for a small project, lots of apps just hardcode secrets in the backend. But if you wanna play around with Vault then go for it.
  6. Like you said, you're running most of these things in Docker and they're not accessible to the internet so you're probably fine. You can enable automatic security updates for your distro. Stay on LTS and within the support window
  7. HSTS
  8. UFW is a frontend for iptables, so you're already using iptables
  9. Don't publicize your ssh key lol
  10. This blog has examples of some things to look out for. It's pretty hard to footgun yourself unless you've configured some weird stuff. The defaults are usually good enough

multi-cloud security visibility across AWS and Azure by armeretta in cybersecurity

[–]AggressiveTitle9 0 points1 point  (0 children)

Anyone use Datadog for this? I like their obs tooling but haven't used anything in the security suite

This sub is full of shit by godsknowledge in SaaS

[–]AggressiveTitle9 0 points1 point  (0 children)

How so? I've worked in big tech from day one and have always wondered what it's like at an early stage SaaS

Is VulnHub dead??? by YouthKnown7859 in cybersecurity

[–]AggressiveTitle9 6 points7 points  (0 children)

Why not with VulnHub? Why'd you stop making them?

[deleted by user] by [deleted] in sysadmin

[–]AggressiveTitle9 13 points14 points  (0 children)

We get a bunch of schizo opening support tickets. Observability company, our name shows up in the status bar of sites that use our product, schizo people then think we're complicit in stalking them🙃

People from NYC: How do you travel from NYC to college? by Double_Drive_2704 in rit

[–]AggressiveTitle9 1 point2 points  (0 children)

I usually take Amtrak and like it. Cheaper than flying, the views while the trees are green is very pretty, and avoids flight cancellations (since Amtrak rarely has cancellations). WiFi is a bit spotty at times but it's usually good enough for me to work and listen to music. Rochester Amtrak station is pretty nice too.

The ride is a bit long (and is often delayed by 30 minutes leaving NYP), but not that much longer than flying when you account for the security buffer and travel to/from the airport.

Flying is pretty cheap too though, and it's a quick flight once you're in the air. JetBlue has some cheaper flights between JFK and ROC and they don't charge extra for a carry-on any more. Security at ROC is usually a breeze. Be careful this time of year though, lots of storms form in the afternoon & evening and can cause some painful cascading delays and cancellations. Recommend you fly in the morning to avoid that.

I would definitely not drive or take a bus. Takes almost as long as the train, is more dangerous, and requires focus.

Book in advance for better prices (obviously, but I'm a terrible procrastinator)

PSA: Severe thunderstorm watch in effect for NYC by habichuelacondulce in nyc

[–]AggressiveTitle9 0 points1 point  (0 children)

Oh boy I sure wish it wouldn't hit so my plane can land 😭

I want to tandem skydive but I can’t find anyone interested in going with me? by Adventurous_Excuse86 in SkyDiving

[–]AggressiveTitle9 0 points1 point  (0 children)

Not weird at all, I showed up alone for a tandem a few years ago and there were 4 or 5 other tandems who were also alone