the rm -rf's will continue until morale improves
-
@neurovagrant In 2005, we had a rookie security consultant doing a penetration test for our client. To demonstrate that the client's app was vulnerable to SQL injection, he ran
drop table users;via injection.Twenty years of progress means we can make the rookie mistakes faster and with fewer employees.
@paco oh no
-
@neurovagrant i'm pretty stoked rn with all this self-inflicted destruction tbh
@hrbrmstr @neurovagrant coulda used airlock.
oops -
the rm -rf's will continue until morale improves
I wanna see that muppets CLAUDE.md
... he did have a CLAUDE.md?
Didn't he?
DIDN'T HE?Edit: Uh... I looked him up.
He was one of the #Cardano promoters
Not just an investor, an active promoter.
Not the brightest crayon in the pack, though kudos to him for owning up to a boo boo. -
the rm -rf's will continue until morale improves
@neurovagrant people still haven't learned after all that ransomware. Back it up and/or employ snapshots. I'm a big fan of ZFS snapshots.
-
the rm -rf's will continue until morale improves
@neurovagrant This would not have happened if he had used somebody else's computer which is what I always do.
-
@neurovagrant In 2005, we had a rookie security consultant doing a penetration test for our client. To demonstrate that the client's app was vulnerable to SQL injection, he ran
drop table users;via injection.Twenty years of progress means we can make the rookie mistakes faster and with fewer employees.
I've always liked how the default demonstration of vulnerability on Windows was is opening calc.exe. isn't there a similar sensible SQL default?
-
the rm -rf's will continue until morale improves
-
I wanna see that muppets CLAUDE.md
... he did have a CLAUDE.md?
Didn't he?
DIDN'T HE?Edit: Uh... I looked him up.
He was one of the #Cardano promoters
Not just an investor, an active promoter.
Not the brightest crayon in the pack, though kudos to him for owning up to a boo boo. -
I've always liked how the default demonstration of vulnerability on Windows was is opening calc.exe. isn't there a similar sensible SQL default?
A simple
select * from userswould've been fine just to prove the point. -
the rm -rf's will continue until morale improves
@neurovagrant well *someone* learned the value of offline back ups.
-
@neurovagrant well *someone* learned the value of offline back ups.
-
@neurovagrant uhhhh better late than never I guess?
-
@neurovagrant In 2005, we had a rookie security consultant doing a penetration test for our client. To demonstrate that the client's app was vulnerable to SQL injection, he ran
drop table users;via injection.Twenty years of progress means we can make the rookie mistakes faster and with fewer employees.
-
@neurovagrant uhhhh better late than never I guess?
-
A simple
select * from userswould've been fine just to prove the point.@jrdepriest @jztusk @paco @neurovagrant no, drop tables *also* let's you demonstrate the presence or absence of effective backups. It's a two for one test!
-
A simple
select * from userswould've been fine just to prove the point.@jrdepriest @jztusk @paco @neurovagrant "oh, it's only data exfil, that's not so bad" Some people have very limited imaginations, and need an unequivocal demonstration.
-
Nobody writes a CLAUDE.md to raise their pass rate on code issues. They write it so the agent follows the project's conventions. The study scored the first and got quoted as debunking the second.
There is a token overhead on compliance (about 20%?), it works for me, though I never run a project without it.
Edit: Though its the weakest counterpoint, AGENTS.md =\= CLAUDE.md and the fact the author doesn't seem to know that, irks me more than it should.
-
@neurovagrant @quinn cool now we get to see how well he handles disaster recovery and business continuity
-
@neurovagrant @quinn cool now we get to see how well he handles disaster recovery and business continuity
@Viss @neurovagrant Letsss goooooo
-
@jrdepriest @jztusk @paco @neurovagrant "oh, it's only data exfil, that's not so bad" Some people have very limited imaginations, and need an unequivocal demonstration.
@womble @jrdepriest @paco @neurovagrant
Exactly. "Well that's only showing they can read", whereas having an unrequested calculator sitting there on your desktop is very undeniable.
