• 0 Posts
  • 26 Comments
Joined 1 year ago
cake
Cake day: June 14th, 2023

help-circle










  • al177@lemmy.sdf.orgtolinuxmemes@lemmy.worldmeme
    link
    fedilink
    arrow-up
    14
    ·
    9 months ago

    IME is even worse than that. It runs on a supervisor processor in the chipset that has privileged access to the memory, peripherals, and CPU, and can run when the rest of the system is powered off. IME is how Intel AMT can serve as a KVM-over-IP, and just because you don’t have a CPU with Vpro doesn’t mean all the components aren’t there for an exploited or backdoored ME firmware to remotely log your console or inject keystrokes.







  • Oh man. Huge company I used to work for had:

    • two separate Okta instances. It was a coin toss as to which one you’d need for any given service

    • oh, and a third internally developed federated login service for other stuff

    • 90 day expiry for all of the above passwords

    • two different corporate IM systems, again coin toss depending on what team you’re working with

    • nannyware everywhere. Open Performance Monitor and watch network activity spike anytime you move your mouse or hit a key

    • an internally developed secure document system used by an international division that we were instructed to never ever use. We were told by IT that it “does something to the PC at a hardware level if you install the reader and open a document” which would cause a PC to be banned from the network until we get it replaced. Sounds hyperbolic, but plausible given the rest of the mess.

    • required a mobile authenticator app for some of the above services, yet the company expected that us grunts use our personal devices for this purpose.

    • all of the above and more, yet we were encouraged to use any cloud hosted password manager of our choosing.



  • How did your contributions impact the world? I’m not talking about Wikipedia worthy projects or products. If you didn’t do what you did, how would the world be different? Let’s say you worked on data validation tools in tax software for the IRS. Maybe you prevented thousands of people from the stress and struggle of bogus audits. Or maybe you worked on compilers for a defunct architecture, and your optimizer saved billions of watt-hours of energy in wasted cycles over the years

    I can look back at my career and point to moments where I’ve made a small dent in the history of the technologies I worked with, yet my name isn’t attached to any. I’ve also worked on personal projects that are mostly defunct but had thousands of users in their heyday, but because I used a handle for many of them (for reasons) the people who might remember what I did will never know my name when I’m gone.

    I’m good with knowing I made some sort of difference without being personally remembered. But that’s just me, and I think it’s important to recognize the ways you want to be recognized.

    With that said, name recognition on for-pay work is rare. You’re probably out of luck getting that recognition for your previous work, but there are things you can do now. If you have personal projects, post them on GitHub and advertise them on relevant forums. If you don’t, consider contributing to an OSS project. With Github’s Arctic vault program, your PRs to a major project may outlive humanity. If you don’t want to work on personal projects at all, consider finding a job where you can be paid to contribute to OSS, or ask your employer if you can spend 20% time giving back to libraries your company depends on.