danielweber

10 ms·

61.
by danielweber 10y ago
I typically think of "encryption inside of encryption" as a boondoggle more likely to somehow break things than make things stronger. My confidence in that has dropped slightly in the past day.
62.
by danielweber 10y ago
https://github.com/GDSSecurity/EvilAbigail#scenario
63.
by danielweber 10y ago
Many many years ago, I was at a software company, and a competitor popped up making very similar software. They made a presentation of their software at a conference, and had a slide showing a screenshot. Our typos were clearly visible. Fun
64.
by danielweber 10y ago
Their model was "trust the employee, and use the courts to enforce punishment if that trust was misplaced." We are in phase two of that right now.
65.
by danielweber 10y ago
Really. You don't need to dump all your ammo on the very first day. She said what needed to be said. If Uber challenges her account, she can post more information, assuming she is telling the truth (which I am for now).
66.
by danielweber 10y ago
She made accusations that specific incidents happened. In general, someone who makes a specific accusation that can be disproven if not true probably isn't making it up. I know we can all recall specific times when this hasn't bee
67.
by danielweber 10y ago
Fowler's claims are statements of fact that can be easily proven if true or easily disproven if false.
68.
by danielweber 10y ago
Fowler made accusations of fact. They can be proven or disproven. She didn't say opinions like "they were meanies to me" or "they gave a promotion to a man when I was the better performer." In that case, people woul
69.
by danielweber 10y ago
Fowler had specific accusations of fact. Either the "got told six times it was a first offense" thing happened or it didn't. Either the leather jacket incident happened or it didn't. Uber can easily claim these things ar
70.
by danielweber 10y ago
A lawsuit would not really pay out that much. She got another job, so her damages are, what, a few tens of thousands of dollars? And it would mark her, for life, as someone who sues. A friend has worked on sexual harassment suits and says i
71.
by danielweber 10y ago
Your hard work is appreciated.
72.
by danielweber 10y ago
Good. They're trying to clean up all the private data leaked everywhere. I tempted to say "why couldn't they figure out this google dork themselves" but they've probably been slammed for the past 7 days cleaning up
73.
by danielweber 10y ago
I get this argument. I have made it in the past. But CF doesn't want to play Internet cop. Everyone who manages a service gets a constant barrage of "someone using your site did something offensive , I want you to kick them off y
74.
by danielweber 10y ago
"Don't worry, the keys weren't compromised." I know how to replace my TLS keys. I have no idea how to replace everything else. It's like people who think losing my credit card number is the worst thing. No, it can b
75.
by danielweber 10y ago
Yeah. "We leaked information from Customer A to Customer B by accident" is the first order problem. But the existence of web caches means that all that private information of customer A is potentially fucking everywhere now. How
76.
by danielweber 10y ago
There are many areas of security where you can genuinely get by with obfuscation, hoping the attacker looks elsewhere, or general security-through-obscurity. You can't in crypto. When the entire system relies on an axiom being true, yo
77.
by danielweber 10y ago
No, that's irrelevant. You don't hold off showing the first SHA-1 collision to have it have MD5 collisions as well. I don't think anyone in the field is surprised that the MD5 signatures are different for this file.
78.
by danielweber 10y ago
Continued employment counts as consideration in many states.
79.
by danielweber 10y ago
> I've gone through this before and the law is very clear that continued employment is not a valid compensation for changing the terms of your employment. Please do not say things like this. A worker in Massachusetts, Illinois, or N
80.
by danielweber 10y ago
Employers need to be able to make sure they own the code you write for them. Otherwise nothing works.
81.
by danielweber 10y ago
> We've received very similar feedback recently So why was the line "We have yet to have a disagreement (much less a legal battle) over the terms here" issued to the developer?
82.
by danielweber 10y ago
> mentions that I received no valuable consideration for signing it Them hiring you counts as consideration.
83.
by danielweber 10y ago
As bad as I think Gigster's agreement is, this clause is a good place to start from. It means that they don't have someone shoving GPL code into a project that must remain closed source.
84.
by danielweber 10y ago
This is why everyone should demand to see the IP agreement during negotiation.
85.
by danielweber 10y ago
Maybe they are bluffing, maybe they are not. If you are willing to lose your job, I applaud anyone who does this fight. But lots of people are not able to do the same fight. What does work is demanding to see the employment contract before
86.
by danielweber 10y ago
Follow him how?
87.
by danielweber 10y ago
You have control characters for the characters from 64 to 95. Control-@ is 0. Control-A is 1, through control-Z is 26. Control-[ is 27, escape. Control-\ is 28. Control-] is 29. Control-^ is 30. Control-_ is
88.
by danielweber 10y ago
> Why isn't "&" (ligature of "et") not in the same row as "e"? "$" ("dollar") is in the same row as "d". It matches old mechanical typewriters. I have one with the shif
89.
by danielweber 10y ago
I've experienced #2 once and seen it happen to a colleague once.
90.
by danielweber 10y ago
In my experience, it's very unusual for a company to simply state that it won't talk about it at all. I get one of these two patterns: 1. "Oh, okay, we see your point. We'll cross out clauses X and Y." 2. "Oh,

More ›