Viewing profile — iloveponies

As a degreeless, high school drop out who works for a very large corporation that's not the case. In a time where many are screaming about shortages in skilled IT people, mandating…

What for? Apple discourages the use of OpenSSL[1] and instead use their own open source library[2] which also has an API present inside of Cocoa and iOS. 1: https://developer.apple…

I suspect mirror delay is less of an issue than you might perceive it to be. Many CPAN mirrors manage to stay within tens of seconds/no more than a minute from the main CPAN mirror…

Of course not. It's open source, nobody would do anything malicious right?

Also, I imagine the various regulation ISPs and hosting providers are obligated to inside the country - if customers can siphon off data that local officials disapprove of to anoth…

https://twitter.com/homakov/status/387805705669206016 https://twitter.com/homakov/status/345544666483130368 https://twitter.com/homakov/status/218630370231451648

On the flip side, Homakov personally has incredibly bad OPSEC practices which would make me think twice for using him. There's a correlation between what you pay and what you might…

Yes, npm itself is the only reason why.

No, actual whistleblowers should be covering their own asses as much as possible with informed decisions and good opsec/infosec practices and not trusting anyone or anything else w…

Mandatory SSH keys mitigates the brute forcing risk, and turns it into a nuisance. My employer presently has this arrangement and has done so for a while. Bastions only get you in …

It's far simpler to remove the need for passwords alltogether or at least minimise them than to offset the liability against your employees using security software correctly.

2FA and VPNs are not exclusively the only way to secure things. X.509, bastion servers, airgaps that require physical access to a secure facility etc are also valid options, depend…

Bike shops already do this in some places. In the UK and Japan at time of purchase you can register your bike with the police and it's handled by the store themselves. Both countri…

The idea that code be "self-documenting" is naive at best. Action does not necessarily infer intention, and without explanation can lead to assumption. To reach the code we end up …

So... where are all the Syrian programmers? This website says none are available.

The fact you have to have your screen on and unlocked is intentional and by design, otherwise there is plenty of potential attacks where NFC is used to exploit phones whilst it's i…

They've had standalone systems like Edy and other systems tied into retailers on their phones for years. Given that Japan is hugely a cash based society, I wonder if this will real…

Personal opinions of said founder aside, all three were bringing arguably trivial products to market where there already was a large presence of two or more players dominating (Twi…

More or less. The more evidence of all communication of theirs and yours, the more useful it is as either plaintiff or defendant in court.

The acceptance of this seems to vary towards the reliability and availability of transport (both personal and public) amongst other factors. Here in London where train frequency ca…

As someone who goes in and out of the UK on a regular basis, this is news to me as I've yet to be subjected to full body scanners.

So I've experienced something similar minus the overcrowded room with British immigration. I watched the immigration official turn from apathy the moment I handed my passport over …