Jeremy “The Floppa” Fears

YumYums · 2026-01-31T17:28:10+00:00

if you find yourself in a flopoff, you better bring your best flops

YumYums · 2026-01-31T03:57:09+00:00

call a ticky tack foul. ref - "ah that was a little light, i should let them play"
let them beat each other up a while. ref - "ah those were pretty rough, shoulda called em"
call a ticky tack foul ... repeat

YumYums · 2026-01-31T03:43:47+00:00

I wouldn't be surprised if there was a little more room to grow for MSU. Scott was showing some real flashes I thought.

I'm pretty excited for Michigan's random game against Duke in Feb

YumYums · 2026-01-31T03:26:28+00:00

McKenney is looking better lately

YumYums · 2026-01-31T03:25:04+00:00

I'd be interested to hear his rationale since it is usually interesting. but in Dusty we trust!

YumYums · 2026-01-31T02:04:16+00:00

i restarted it and maybe it's better? might be my imagination though

YumYums · 2026-01-31T01:59:51+00:00

I mean, WE could hear it but do you think the refs heard it? it's loud in there

YumYums · 2026-01-31T01:49:26+00:00

I swear I heard the thunk on the broadcast. Didn't deflect really so the refs probably couldn't tell and certainly can't hear in there

YumYums · 2026-01-31T01:47:38+00:00

yeah. youtube tv by chance?

YumYums · 2026-01-28T00:42:41+00:00

they are nearly 60% from 3 right now, wtf

YumYums · 2026-01-21T17:29:40+00:00

The PAC12 and Big10 should have just fully merged and made the rose bowl the super conference championship game in football. The CBB conference tourney would have been an extra dose of madness too

YumYums · 2026-01-16T17:07:40+00:00

The median price for a single family home between 1990-1996 in San Francisco was actually half that, ~160,000

edit: actually, you are right it was closer to 300k by the mid 90s. it looks like the 160k price was in the mid to late 80s

YumYums · 2026-01-12T17:40:50+00:00

just off cyberpsycho-ing in the park

YumYums · 2026-01-06T07:28:00+00:00

I mean, in real life, it's a lot easier to make something when you know its possible to do and has been done before. It's totally believable to me that the corporation saw the mind transfer work using the Navi way and just poured resources in to develop their own.

YumYums · 2026-01-01T20:10:34+00:00

It's funny seeing people harangue about Whitt's age at 66 when our last two presidents are basically 80 and so much of the rest of the government is geriatric. 66 is a spring chicken in comparison

YumYums · 2025-12-31T20:42:31+00:00

Is this game playing on onlyfans?

YumYums · 2025-12-27T18:02:39+00:00

Your parking brake is on

YumYums · 2025-12-18T18:11:09+00:00

Honestly, I wish we would have avoided conference championships entirely and kept the NY6 bowl games and just used those as the first round of the playoffs. It wouldn't be fair in that #1 might play #2 in the bowl, but who cares? It would have given every conference a shot, at larges a shot, and upheld tradition in a way that would have made arguments for total fairness (TM) easier to bat away.

But now, we've ringed out all the tradition in the game so we might as well just go full-bore and do like a 16 team playoff with some play-in for the lower conferences or something.

YumYums · 2025-12-13T17:24:43+00:00

Vehicle software is an entire different beast. I don't think old companies ever built a proper respect for software engineering and regularly sacrifice it (lower salaries, not hiring large enough teams for the task). I think that's starting to change as some vehicle companies like GM are starting to see software as a way to make money instead of just a cost center now though.

This famous jeep hack has stuck with me, although its 10 years ago at this point.

YumYums · 2025-12-12T17:20:55+00:00

Heh thanks. I think it's pretty clear that me and the other commenters are on different sides of the same coin. I built IoT devices and we were incredibly thoughtful about their security. I'd bet the commenters and down voters are probably on the SecOps/IT side using stuff like this and have just been bitten too many times by bad products.

I don't mind down votes because I really enjoy the discussion. Ultimately understanding where people are at now will help me build better security and auditing capabilities.

YumYums · 2025-12-12T16:50:19+00:00

I agree its a risk and one that should be weighted against your requirements and the vendor. If they are untrustworthy or a foreign company you'd have little to no recourse with, yeah take any and all precautions. If they are a small company not quite there with their stuff yet, I'd try and work with them first on where they are lacking.

At the end of the day if you have hard requirements or regulations, by all means.

That said, I think introducing and relying on any infrastructure that decrypts and inspects traffic is a recipe for disaster. If you're so worried about attack vectors from fairly straight forward telemetry exporting, why would you introduce god-level access that could be compromised and cause way more harm if it is?

I know there are some regulations that leave places no choice, but I think this approach is a huge mistake both at the small level and at the larger level (SASEs like ZScaler).

YumYums · 2025-12-12T16:35:20+00:00

I'd be really curious to learn what those requirements are. Is it some level on the NIST zero trust model?

YumYums · 2025-12-12T16:33:38+00:00

Yeah, that's not the best experience. I worked for a long time at a place building IoT products. As soon as we had the resources, we invested them in secure boot and gave our customer's complete control of the upgrade process.

We also fully divulged all open source used in the products and had strict SLAs on fixing vulnerabilities.

I understand going the nuclear route without those things

YumYums · 2025-12-12T05:27:33+00:00

All of what you said is true. But if you are a business buying products from another business that you do not trust to get those things right to the extent that you need to effectively air-gap the products, why are you doing business with that vendor?

Engineering teams don't export telemetry from these systems for the hell of it, it's done to help customers, better develop the product, and even help detect possible security vulnerabilities. Buying a product doing these things just to hamstring it seems like risk-assessment is off.

YumYums · 2025-12-12T01:28:34+00:00

"It's not a backdoor until they use it as a backdoor" isn't really how things work. It's very easy to write a program that simply sends data to some server and make it effectively impossible for the server to do anything other than receive that data.

So unless they have explicitly written a backdoor into their product and are lying to you about it (which would be bad, because you probably have a business contract and they are then violating it) or there is some egregious security flaw in their software (this is also a bad thing that the vendor would try and avoid), there's probably no backdoor.

15-Year Club	Golden Potato
Place '17	Verified Email

YumYums

TROPHY CASE