← Feed

Posts

• View post

  Historical question — why did we as an industry decide that penetration tests needed to be outsourced, but that we didn't need outsourced application security tests or code reviews in the same way?

• View post

  I just finished Rodrigo Nunes's book Neither Vertical Nor Horizontal. It's the most useful piece of political writing I've read this year. It's theory-heavy, excavating the history of left organizing, its failures, and the theory that drove them beforehand and tried to explain them after. The theory is necessary and well-used. The book tries to answer the question of how we organize and navigate between the failures of old left parties and vertical organizations and als...

• View post

  Ouch, apparently Ryde just lost their entire customer database, and they were keeping first six and last four of CCs. Technically not banned under PCI, but zero chance they're passing their next audit. I'm guessing there's going to be some fallout when/if all the ride histories get dropped too.

• View post

  Signal can finally run on both Android and iOS as a linked device, including Android tablets! I've only been waiting for this for a decade

• View post

  Availability and office hours! I've currently got room for an additional client. If you're a startup looking to build a security program or an for outside review or course correction for your existing efforts, this is your chance to get the help you need to do it right. I'm also re-opening my office hours for folks who'd like to pick my brain on security strategy for SMEs, or on specific technical problems. If you're a CTO/VP Eng/etc. of an existing org, you can grab an h...

• View post

  Mozilla apparently shipped tab groups for Android in version 152, but as far as I can tell I still don't have them. Are they doing an A/B rollout or something? If so, how do I opt in?

• View post

  @galacticstone@mastodon.social Is this a Mike check?

• View post

  @yetiinabox @quixoticgeek Technically, yes, but I lent it to a friend on the Apple QA team when they were trying to get tests running for this new OS they were building on top of the NeXT OS core and didn't yet have enough native next-gen Apple hardware, and I never got around to asking for it back.

• View post

  RE: https://mastodon.social/@benpate/116403046724832335 Gonna be hilarious if they add e2e and don't fix "private mentioned".

• View post

  @rafi0t Oh good, I'm glad you've got enough of a copy to track changes. I'm assuming various folks have versioned mirrors with all the initial "oops we forgot that bit" stuff in them, but it's tough finding complete mirrors that do with unrestricted search heads on them.

• View post

  Tech speakers, it's 2023. Stop using moms as your example of a non-technical audience. It's wrong, its not funny, and whatever you were saying, now most of your audience is not thinking about it. Just use the exec team as an example instead and get on with your life.

• View post

  If I were a CEO, I'd simply ensure my business didn't kill so many people it inspired assassins.

• View post

  So a bunch of anti-trans hate groups sent a citizen's petition to the FDA demanding regulatory action around "cross-sex" use of estrogen. Although the language is somewhere heated and while we have no indications as to the FDA's intent with respect to this petition, I have no reason not to believe the authors of this article when they describe its potential impact if adopted: https://theneedlenews.com/anti-trans-hate-groups-petitioning-fda-for-registry-of-trans...

• View post

  The documentation for this image processing library by @vruba is one of the most interesting things I've read in weeks: https://github.com/celoyd/potato/blob/main/docs/personal.md https://github.com/celoyd/potato/blob/main/README.md https://github.com/celoyd/potato/blob/main/docs/concepts.md Philosophical discussion of the nature of seeing and what am image is vs a map, fascinating technical details about how satellite imaging works and why it looks as bad as it often does, a lot of...

• View post

  Probably mostly not my audience here, but I'm currently looking for a business-side/CEO cofounder for an encrypted radio startup. There are solid funding options, but while I can build the team to make the product happen, I'm not the person to navigate the money side of things. I'm looking for a cofounder with previous startup CEO experience and executive-level experience (although not necessarily CEO) in a hardware startup specifically. EU citizen and resident, although...

• View post

  Today I've been told that C is memory safe if you're just very neat, that code is documentation, and that expecting protocol specs is a form of bias? I didn't realize it was 90s week; I'll go get a flannel.

• View post

  Many, many years ago, at school for CS and before that interning at NASA Ames, I learned to take programming seriously as engineering work, and also the level of rigor that engineering work requires. In the intervening thirty years, I have had to come to terms with the degree to which this attitude is rare in theory and vanishingly rare in practice again and again. Tooling has gotten better, but the rigor applied to the average line of code has gotten worse. I would hope that safety-critical sy...