njbooher

As someone who does security testing for video game service backends, I benefit significantly from all the reverse engineering and tools the hobbyists and cheaters build, and always enjoy reading more stuff.

I found this comment funny. Have an upvote.

But finding a critical security issue on Cloudflare in 2020 while doing testing for one of your customers, and then learning what the bounty for breaking that large of a chunk of the internet was, was still disappointing.

It's nice to see that it's gone up since then. But your company isn't the literary Robin Hood.

I don't think there'd be consumer confusion if they sold it as an 80 year lease for $60. Maybe backlash.

Why would we as a society make the most effective class of painkillers illegal as a response to the bad actions of one company?

(Pre-edit: Why would we make a highly effective class of severe painkillers illegal because of one bad actor?)

It'd be nice if they could give me a compelling reason to upgrade my computer more than once or twice a decade, other than 'Our new AI computers have keyboards that go to 11'.

BSides, BlackHat, and DEFCON happen yearly on the same week in August in Las Vegas, and many people attend more than one.

I would be happy if the location or date of all 3 changed. The peak temperature outside was around 110° all week this year.

This whole thing read like a sociopath selecting for people they can exploit.

Most people don't live in California.

I started using one most of the time this year, but I couldn't remember if bottle refill stations are prevalent on the strip.

I'm waiting for my plane to takeoff for Vegas now (weather delay). There's a 32 pack of water in my free checked bag for this reason.

Employees typically depend on their salaries to pay for necessary living expenses. If they lose their job, they need to get another one, or they'll eventually go broke.

Any CEO making $10M/yr would only need to work for a year before they could retire and live comfortably the rest of their life without ever touching the principal.

Layoffs affect these groups differently.

Software security has already been turned into gig work.

https://en.wikipedia.org/wiki/Bug_bounty_program

Some people make a living off it. Most don't.

I agree. I was envisioning that after we shipped the people who don't like teaching off to national labs that the universities would just focus on teaching and could pay those people better.

Those are term faculty. They typically aren't paid well.

But are being paid by tuition revenue, from people who expect them to teach.

The US needs more national labs for people who want to do research but don't want to teach.

Plenty of new faculty are more interested in research than teaching too.

I don't work in this space anymore, but just want to say kseq (and the rest of klib) is such an awesome time saver. Thank you.

The way people communicate verbally often reflects the way they think, which differs between people. Writing forces people to structure their thoughts more.

Also, efficient communication requires knowing what your audience already knows.

Incidence of audits per 1000 returns filed by poor people is (13.0/2.6)=5x the incidence of audits per 1000 returns filed by non-poor people.

Reading the comments to decide if you want to read the article is also a valid workflow. Although anyone doing that (me included) isn't entitled to complain about quotes not having enough context.

They pay, eventually. They're particularly slow for game client exploits. Much quicker for server-side issues.

Yeah, I don't envy you. Finding loopholes is more fun than trying to account for everything upfront.

Once upon a time: [link redacted]

GitHub will pay you to write new rules for this.

https://securitylab.github.com/bounties

There's enough stuff in it already.

The makers of Drush, the cli for Drupal, subscribed to your line of thinking in the early versions and inventory items were defined in PHP files. Migrating from that will be interesting.

I left the game in 2015, but even then third generation sequencing could close bacterial genomes for < $1k. Long reads make it trivial to detect all sorts of stuff (sample mixup, contamination, phage activity, in vitro evolution) that goes unnoticed with short reads. Since the conclusion of large scale draft genome sequencing papers always seems to be 'we need a bigger sample size' anyway, I feel the money would be better spent on studying individual strains of bacteria.

Any paper that generates or analyzes draft genomes is a waste of money.