My org is in a position where we'll need to get SOC II or ISO 27001 certified in the next year. I've been doing some research on the easiest way to go about this, and discovered secureframe (https://secureframe.com/). It looks like it is a platform that helps you automate/track some of the compliance tasks, but doesn't actually do the audit (they have partners that work through the platform). I'm wondering if... Source: over 1 year ago

Hi, founder of Secureframe (https://secureframe.com) here. Secureframe helps streamline compliance across SOC 2, ISO 27001, HIPAA, PCI DSS, and more. There are so many accurate responses in this thread. Like many have mentioned, SOC 2 is indeed not a prescriptive framework. Much of the confusion behind SOC 2 stems from that fact. It allows you to customize your InfoSec program to your company's needs. As we know,... - Source: Hacker News / over 2 years ago

It's a pity Go didn't have structured concurrency: https://vorpus.org/blog/notes-on-structured-concurrency-or-go-statement-considered-harmful/ There's a library for it: https://github.com/sourcegraph/conc But this goes to one of the things I've been kind of banging on about languages, which is that if it's not in the language, or at least the standard... - Source: Hacker News / 3 months ago

What are possible use cases for this tool? Why would I want to find out the total runtime of all videos in a directory? Also, you might wanna limit concurrency[0] instead of spawning many ffprobe instances at the ~same time. [0]: https://github.com/sourcegraph/conc In another note, ChatGPT suggests this shell command to do the same thing. It doesn't process files... - Source: Hacker News / 9 months ago

While virtual threads will be stable in Java 21, Structured Concurrency is still a preview feature. You probably won't see it in production anytime soon. Preview features require a special flag when compiling and running them, and they won't run on newer versions of the JVM. I don't expect to see StructuredTaskScope in common production use before the next LTS version is out. But it doesn't mean you cannot have... - Source: Hacker News / about 1 year ago

I'm also a fan of Conc for managing various different concurrency patterns -- don't create manual worker pools for locally distributed tasks if you can use Conc, etc. Source: about 1 year ago

I will probably be using more conc too now. Lots of great primitives for dealing with multiple functions returning the same types or errors etc. Source: about 1 year ago