102 karma · joined September 15, 2020
As somebody else pointed out in this thread, The trick is to refine your training in real situations as quickly as possible. The SRE Padawan isn't there to watch, they are there to grill me as to why certain things aren't in my documentation.
they are there to help me eventually raise up the operational excellence of our team.
With the jr-sre by my side, Refuse to perform a task in a vacuum, or jump into meeting alone....their success is our victory (and probably my vacation.)
I think that this is a great starting point, but there is some fun nuances to teaching how to survive a shitstorm that are so rarely brought up. Communication protocols, database warming, orders of operations.
you can teach these things but until you get them wrong you risk not learning them.
TLDR: good but missing a Kobayashi Maru.
In our assessment we found that these APPKEYs are also included in the backup file - which makes the SnipeIT backup ZIP files a vector for exposing all users and passwords (as well as all encrypted fields data) because of a default setting by the framework's backup provider.
That said - if you are concerned about security, you will be on-prem or within your own cloud provider to begin with. The SnipeApp company offers an "enterprise" level support at a somewhat reasonable rate for big companies, and they were a great help assisting with our installation and integrating the SnipeIT API to import new devices and licenses automatically in a way that we can control from say a PO.
This password issue may not be a problem for you as I understand they now have connectors for SSO or another OAUTH provider. That and the fact that they asked us to share our backup via email during onboarding and they did not specify to keep the secrets out of the backup made our decision to go in-house. Still a good, scrappy product, and when we asked them if they had access to our company's passwords that was not disclosed, we didn't get a response. That's OK - and it was a good lesson for my team in evaluating an open source framework behind the product vis-a-vis "trust but verify."
Its always going to be a vector of our own partial design (and/or someone we are paying), a rogue backup source of truth that is ejected into the ether like atoms forming salts in an acid-base reaction.
----
something so beautiful
Deserves more than a poem
but this cage in My house
I won't never be home
I love you, being right
why do i make it so wrong
cut into my songbird
in search of the song
This is so cool I dare say I am feeling inspired!
The bank executed on their promises of no disruption to his transfers; they told him he did not have to worry and the customer service was so terrific, he said he was going to stay with the bank.
"Did you ask if there were other accounts at the bank that had been accessed in this way?"
"A wire transfer to an international location went through with no red flags and 0 notifications?"
"Can you ask your security department to produce a report of their investigation into the matter?"
Nobody asks those questions.
https://github.com/microsoft/PowerToys/blob/main/README.md
For the fastest searching possible on Windows, I use the Journal-indexing "Everything" search.
and the talented, who are focused on their craft - will feel that the company will take care of them _as a matter of course_.
If the talent feels a Quality of Life upgrading process is met - then they will stop wondering how green the grass is somewhere else. Then and only then will the business be ready to foster a culture of mentorship, collaboration, and documentation from Senior to Junior.
It makes me very sad to see a junior developer I had taken onto my team at my last company 3 years ago - a budding talent in systems who didn't know how to ask for help - is still considered a "junior developer." if you don't know how to give people hope don't be surprised if they're hopeless.
I had very good atheist friends; friends that I loved who were intelligent and kind but had no religious backgrounds and when they would ask to engage in religious discourse and the platform they preach doesn't make sense....it's just disheartening because this behavior is one of petulance and anger. Are you spreading a religion or a personality disorder
don't understand that when they are hating on God-based religions, they are actually practicing a form of deep adoration and commitment to God in their lives.
You have to find a positive to rally around and you have to be authentic about understanding that it's ok to see someone praying for something in their life and hope that they will be ok in your own secular way.
How many atheists do you know who would make fun of that person as soon as they were around the corner?
Spirituality is bigger than God; Religious practice in the past of an atheist who is dismayed by their own existence within an atheistic framework needs to take a leap of faith I think.
Spirituality/Shamanism, org Religion, Monastic/ZEN Buddhism are paths to spiritual awakening, but I would argue heavily that absurdism i.e. understanding that there is so much to think about wrt the universe and me being here - but that's the universes fault.
All of you reading this because a protein bumped nasties with another protein, fast forward to your parents and now here we all are together...at the pinnacle of existence from the protien's point of view.
Does this business model not make it easier for the little guys to squat themselves for a small price?
I have gone on a weird rollercoaster of liking the article, but initially disliking the tinybusiness.
My own non-involvement in social media as a person is one thing; but I can't help but really like the idea of creating a little service that could be a tinythorn in a domain squatters operation.
Terrific work!
Hospices dropping off cookies with their contact information is kosher. Incentivizing a medical office to hit 100 nebulizer-orders, or cpap referrals -> federal prison.
This is a great question; being thrust into hippa compliance from 2000 - 2012 was the easy part, and can perhaps be summed up as
“ fax machines behind a door, paper charts and/or laptops/tablets locked in trunks*, all-in Blackberry enterprise services, Exhange over ssl xml-rpc endpoints, and ensuring EMR portal uptime was so much of the fun parts.
The hard part: training home health medical groups how to VPN - and how to never mix work tech and personal tech.”
I am unaware of hippa changes since the blackberry-era, and while I can’t imagine specific apps being named in amendments to the law, I can say without a doubt that hippa at the time meant having total control over all technical Devices used by your clinicians, prepping all laptops and equipment to use encrypted storage, ssl-encrypted email, VPNs, etc was always made easier by focusing on training, troubleshooting, and being able to mitigate the raw chaos monkey power of a doctor with a gadget.
With the passage of the HITECH act, being able to facilitate the automated logging of a doctor’s conversation with a patient’s family or caregiver towards the CPO (care plan oversight) and making the fulfillment of PQRI initiatives automatic... “so easy a doctor could do it”... meant (at the time) a very hefty pay raise for part-B collections.
TLDR: hippa was easy, training doctors to change their ways is hard. producing the tech that makes their lives easier means assuaging them of their worries that they are maximizing Medicare collections.
It is fun to imagine these days that transcription, location, and barcode technology has “made it” to the point we dreamed about ~10 years ago.
This sounds like fluff: appreciating the art, style, aesthetic of the work/entity we are talking to should be #1 goal.
Engaging in the appreciation of art is to jettison our judgement of the subject to focus on the choices “why” and “how.”
I don’t know if this groks with anyone else....that’s kinda part of it too.
The prospect of work being judged by peers negatively is the pain amplifier on all our hands.
There are some of us out there - good people that are just broken.
Their path has made them feel it as if it’s on all the time, and they are as unstable and judgemental as they arw talented.
I have no idea how to fix the broken - I am just trying to paint myself whole again, one human interaction at a time.
“Art should comfort the disturbed and disturb the comforted.” How can I work on comforting and disturbing the person in front of me in a way that elevates the both of us?
If one is engaged in appreciating, They probably aren’t judging? Sounds nice - maybe