Viewing profile — ab

> if you thought it was safe The problem is that companies introducing chemicals into a clothing product aren't required to show that they're safe, at least in the US. So consideri…

It's more about what happens when you toss your phone into the landfill after two years, and the mountain of dead electronics starts leeching toxins into the groundwater. https://w…

Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure …

Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure …

Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure …

Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure …

If there's not an obvious security contact at the agency, you can always report vulnerabilities to US-CERT, which has overall responsibility for connecting reporters to the right r…

Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure …

Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure …

This is a poor way to handle library upgrades that are guaranteed to break any existing compiled binaries. Frustrating that my PR to create readline@7 was rejected. https://github.…

The white "Access Denied" page is to help you empathize with Jony Ive, still trapped in a white room after all these years. https://www.change.org/p/apple-free-jony-ive-from-his-wh…

It's interesting how your eye naturally groups the pentagons into the larger primitive unit, like the pinwheels of type 5. Wolfram Alpha also has some things about tiling: http://w…

Enforcement of nameConstraints is inconsistent at best. I experimented with name constraints a couple years ago for a private CA project, with the idea that I could restrict the pr…

It's interesting how Comcast's track record in complying with regulatory requirements from past deals may be a major factor here. I wonder if they would have been able to muscle th…

Pretty interesting stuff. I do wonder how much internal collaboration there is on topics like HTML5 video & WebM. The benefits of owning end-to-end both browser and server for driv…

Stripe checkout does use an iframe from checkout.stripe.com for the payment form.

I'd love to hear theories for what might have installed it. If anyone still has that certificate, it would be helpful to export it and email it to support@stripe.com. We've worked …

If this is anything like the issues we've seen at Stripe, the problem is probably an obsolete cross-signed root in your login keychain. It's caused by a certificate with CN="DigiCe…

+1 I'd love to see your notes. I found that when I was learning git there were two concepts that were crucial: understanding the staging area, and understanding the very basics of …

Honestly I can't imagine how we ever used HipChat. The Linux client is abysmal, and the IRC/Jabber integration is also terrible. Slack is really the best I've seen.

Not sure what the schedule looks like in general, but last night I waited ~10 minutes after the advisory watching the packages show up one by one. Still faster than any other sourc…

We're working on it! :-)

There's an enormous difference between serializers that make any effort at all to be safe, and those like Ruby's YAML library, which make no effort. Python's YAML, for example, exp…

While they're not great, chroots are much more powerful than most people give them credit for. The trouble comes when people think you can keep a root user contained in a chroot.

We're working on it. :-)