Viewing profile — bgidley

Agile peaked with Extreme Programming and paper story cards, since then all that seems to have happened is the adoption of more tools/process that missed the whole point of it. The…

The most bizarre App Store rejection I’ve seen was for a TV app which was rejected by Play for ‘Policy Violation’ without much explanation… After several rounds of resubmissions an…

Try using Cloudflare R2 with zero egress and you'll rapidly discover there are lots of 'gotchas'... - Want to use a cloudflare managed domain - pay for egress if you have enterpris…

Page is struggling - https://archive.is/yn6rk

It may not be legal depending on how it’s done - this was Asus UK and the rules are on https://www.gov.uk/government/publications/online-reviews-an... The UK Government are also in…

The question is how did you do training. If in the process you 'copied' the image (e.g. from network to memory) you did require copyright. Reading with a human is not copying, but …

It's been pretty clear from all the guidence (e.g https://ico.org.uk/for-organisations/guide-to-data-protectio... ) issued around GDPR 'forced consent' would not work - Facebook de…

The law has passed - but it also has exemptions for security.... So we can expect a lot of negotiating between the EU & Apple/Google on what they actually have to do.

If you want to keep the google accounts working for things that free (photos, YouTube etc) you can switch first to the business essentials plan and then to the cloud identity plan.…

My favourite oracle issue was an older version would not install on Linux if you had number lock key on!

It can prevent MITM IF it's loaded in client page (defining MITM as network interception). It can't stop keyloggers, people looking over your shoulder, malware in the browser (MITB…

We did think of that :) - we can detect your tampering with the forms we protect. But that said it doesn't stop everything if you can install a keylogger, or get the user to enter …

You can prevent MITM from the browser - you 'simply' use Whitebox Crypto to create a secured channel - (shameless plug Irdeto who I work for sell this as solution https://irdeto.co…

I agree - but as you say OAuth also suffers from MITM weaknesses. I'm just not convinced 'plain' client certs solve that as it's very hard to distribute those securely and manage t…

Even dev's can't cope. Most apps leak credentials severely. You need integratity verification, obfuscation and whitebox crypto to do this sort of thing securely. All of that is ava…

This is unlikely to work - developers in general can't cope with managing SSL certificates. They won't know what to do with them or handle them securely. You need full integrity ve…