And you never, ever, ever install software as part of the interview. Decline and hang up if they're asking you to install stuff. Visiting websites - maybe but even that unless it's a well known website I wouldn't go there but download and install stuff, hells no
If you ever meet with Alibaba for any reason they'll ask you to download their conference software. Unfortunately most people in the China ecosystem don't have the guts to say no and will just gleefully install any .exe thrown at them.
Hmm like building an node project, actually any project can have a dependency on a made up libraries that does the exploitation or even the project itself as made infamous by chrome extensions
Such toolchains are dumpster fires whose use invites supply chain attacks. They should never have gained mainstream acceptance and should never be run outside of a sandbox.
That said I wouldn't trust a compiler to be hardened against malicious input and anyway you presumably need to run the output so all of that should be happening in a hardened sandbox regardless.
It's so crazy. As a user, you need to triple authenticate with all sorts of gates to withdraw money but here's a dev guy who can just magically, without any secondary authorizations (as far as I can tell), transfer billions. No devops/sys admin should have access to live wallets with real funds
Its more possible devops guys had access to something like AWS secrets or API tokens or some tool that generates API tokens or access to CI/CD which could grab access to one of the above
These are not my words but someone mentioned these (probably hard) use cases that I think make sense for these agents but they're not there yet:
- Regularly get insurance (car/home) quotes
- Negotiate medical bills / help understand bills in general
- Analyze credit card spending / sort of like mint.com experience
- Advice on financial products (e.g. use money market for X sum vs having all your money in 0% checking) - sort of like a financial advisor
- Taxes and rebates, deal with IRS
- Reach out to Utility or whatever companies and file complains (saw this on Reddit where some guy's personal bot reached out to Verizon to complain about loose pole wires)
So it's practical time saving use cases...not a restaurant reservation or remind me about X or help me clean my mailbox BS cases. That stuff if for techies like us is useless but you have to start somewhere
Yes, but there's a lot of old media available on torrents that is not available elsewhere such as on on streaming services. I'm a bit of a datahoarder and will often download obscure films/tv just because they are obscure and difficult to find. It's surprising how media from the 1980/90s is only available on a couple of torrents. A more recent example (early 2000s) would be the BBC series Monkey Dust that only had the first series released on DVD due to issues with the music licensing and possibly the content which was contentious.
reply