51–60 of 203 posts
https://github.com/USEPA/E-Enterprise-Portal/search?utf8=%E2...
Looks like the US Government is oblivious to the risk of PHP Object Injection.
https://paragonie.com/blog/2016/04/securely-implementing-de-...
It looks like they're publishing code that, in particular, is vulnerable to CVE-2015-2171.
https://github.com/samilliken/openDCIM/blob/d3e137294179e392...
I admire the work that 18F is doing, and live in the DC area, even contracted for the government early in my career -- but I can never go back. I just fundamentally disagree with the security clearance apparatus is in place and never want to subject myself to that again. Especially when purely private companies pay more and don't care what you do in your personal time. Working for the government felt like being a chi…
What was so bad about the security clearance aspect?
In other words, you are not your productivity, you are required to live their moral code in your off hours.
A lot of countries have broken infrastructure for law enforcement. Just like USAID, it would probably be more efficient to give software that can be adopted.
The sentinel project captures millions of man hours of wasted... and ultimately successful product development - all focused towards law enforcement collaboration. It would be good to have that.
Took a look at some of the code. I see one for Gov of Commerce: The Commerce.gov API is under active, but not public, development. As such, API code is not currently made available publically. This Github repository will be used to collect and respond to feedback regarding the API and engage with developers interested in using the API. --- I don't believe that's the correct usage of GitHub. What's the point if you're…
Otherwise yeah, I'd say they should host their own damn issue tracker.
I admire the work that 18F is doing, and live in the DC area, even contracted for the government early in my career -- but I can never go back. I just fundamentally disagree with the security clearance apparatus is in place and never want to subject myself to that again. Especially when purely private companies pay more and don't care what you do in your personal time. Working for the government felt like being a chi…
What was so bad about the security clearance aspect?
The blackmail and sabotage argument, as near as I can tell, is a farce because our enemies and "friends" are engaged in massive corporate espionage. If it were a real concern to them than they would use thier powers to require the same level of scrutiny on the private sector.
In addition to that they say be truthful so you don't have anything to hide to prevent possible blackmail by foreign powers, but in reality it's the truthful ones who don't make it through the process.
I've come to the conclusion that it's really just about having an excuse deny employment to "people not like us."
https://github.com/samilliken/openDCIM/search?utf8=%E2%9C%93... https://github.com/USEPA/E-Enterprise-Portal/search?utf8=%E2... Looks like the US Government is oblivious to the risk of PHP Object Injection. https://paragonie.com/blog/2016/04/securely-implementing-de-... It looks like they're publishing code that, in particular, is vulnerable to CVE-2015-2171. https://github.com/samilliken/openDCIM/blob/d3e137294179e3…
Earlier quoted context omitted.
What was so bad about the security clearance aspect?
The explicit and everpresent awareness that you are owned by your employer in your off hours, for a limited sub-selection of possible activities. In other words, you are not your productivity, you are required to live their moral code in your off hours.
https://github.com/samilliken/openDCIM/search?utf8=%E2%9C%93... https://github.com/USEPA/E-Enterprise-Portal/search?utf8=%E2... Looks like the US Government is oblivious to the risk of PHP Object Injection. https://paragonie.com/blog/2016/04/securely-implementing-de-... It looks like they're publishing code that, in particular, is vulnerable to CVE-2015-2171. https://github.com/samilliken/openDCIM/blob/d3e137294179e3…
You should send in a pull request, or file a bug report in the repo.
Earlier quoted context omitted.
What was so bad about the security clearance aspect?
They want to know deeply personal details about your life, show up at your neighbour's and friends doors to question them, have explicit control over where you can travel on your vacation, deeply care about what you do in your free time, and mishandled all of it -- all in the vague guise of preventing blackmail and sabotage. The blackmail and sabotage argument, as near as I can tell, is a farce because our enemies an…
Also, the little department logo images shouldn't have alt-text. That alt text of the department name overlays the actual text of the department name and just makes it even less accessible when the image isn't there.
(I suppose the lesson for web development in general is to test on a slow connection.)