debatem1

55 ms·

571.
by debatem1 10y ago
Maybe on windows. Do you know of any Android security products which do this? Why does Chrome for Android not implement this?
572.
by debatem1 10y ago
The arguments around this-- and the people who make them-- have always disappointed me. The expectation that we've drilled into users' heads is that when they see the lock icon their traffic is private. That is not the case, and w
573.
by debatem1 10y ago
Can you disclose who those people are? I imagine that a credible promise of continued access to imagery would be a considerable factor here. Could your sources make such a promise?
574.
by debatem1 10y ago
Who uses SMC for conjunction avoidance? I'm very curious to hear more about this.
575.
by debatem1 10y ago
Can you go a bit more into the what changes in drug licensing would be required?
576.
by debatem1 10y ago
Regarding end-to-end encryption on phone calls, it's pretty much illegal for telcos to deploy in the US or Europe due to lawful intercept requirements. That, not NSA meddling in standards committees, is what keeps carriers from deployi
577.
by debatem1 10y ago
So much virtue signalling. If you've ever wondered why pride made it to the list of 7 deadly sins, this is it.
578.
by debatem1 10y ago
I'm a hiring security manager. I will point out that even for people with very broad security experience the norm is still one page. Also, if I like a resume when I read it the second step isn't "read it more". It&#x27
579.
by debatem1 10y ago
I don't seem to be able to reply to your other comment, so doing it here. I don't know what you mean by "your student's resume". Do you mean you are a student? If so, we may be conflating a CV with a resume.
580.
by debatem1 10y ago
A CV is supposed to be exhaustive, so "as many pages as it takes" is right there AFAIU. But then again, I seldom ask for them.
581.
by debatem1 10y ago
> Your entire career jammed into a single page - what a load of garbage. Good luck with that. As I said to the other commenter with the same view, I'm happy to see a resume with two pages of irreducible complexity if you have exampl
582.
by debatem1 10y ago
I'll be frank: I've never seen a three page resume that I thought conveyed more than a page of useful information. And more often than not, it sends me signals like "cannot communicate effectively" and "does not und
583.
by debatem1 10y ago
Oh, and one other thing: don't put useless information on there just because it's true. You are not required to list all your jobs just because you have an employment section. Same goes for education. Putting down that summer job
584.
by debatem1 10y ago
One page. One page. One page. Only one page. No more pages. Don't do it. Only. One. Remember that when I'm reading your resume I'm reading . Write it to tell the story of who you are and who you want to be as well as you are
585.
by debatem1 10y ago
On legal and IP issues-- Some industries are under various requirements not to be user-modifiable. Some of those requirements are uncommonly applied or are uncertain (wifi routers), but some have serious teeth (export controlled munitions).
586.
by debatem1 10y ago
It isn't always the case that there's a 'protected' fuse. Manufacturers seem to have settled on a few different approaches to JTAG: 1/ Leave it open, hope nobody notices. 2/ Leave it to ARM, since modern ARM CP
587.
by debatem1 10y ago
No, at least not on stock Android devices. ADB is pretty constrained (SELinux policy, the DAC, etc). It shouldn't be possible to go from there to something like root+unconfined on a normal user device, though of course with additional
588.
by debatem1 10y ago
I guess stirring up drama wasn't the surest path to a good technical or social outcome after all.
589.
by debatem1 10y ago
So, is there any truth to the accusations of discrimination and harassment over at FSF? Either way this kind of drama would seem par for the course for people who view software development through political and philosophical lenses, but fro
590.
by debatem1 10y ago
Yeah, don't actually use this. It's vulnerable to stuff that's been out of style for 20 years. Strong suggestion: try https://nacl.cr.yp.to/ instead.
591.
by debatem1 10y ago
There are not two possibilities here, but four: 1/ Your company could act legally and you think it is acting legally. 2/ Your company could act illegally and you think it is acting legally. 3/ Your company could act legally a
592.
by debatem1 10y ago
Engineers love to talk about legal issues as though they were lawyers. It turns out that with very few exceptions engineers are not lawyers. Now, saying things that aren't true in a discoverable medium is basically never a good idea; b
593.
by debatem1 10y ago
CTFs and bug bounties are good. Better is when people have broken something for themselves, and best is when they've made money doing it. I trust that those people know how to think like the attackers I should be really worried about.
594.
by debatem1 10y ago
Reading code well is table stakes for me. Writing code well isn't always, but if I hire someone who doesn't write code well it's because I'm betting they can learn to and already have a really solid dev who can pick up t
595.
by debatem1 10y ago
As a hiring security manager: go break shit. I don't care if you have a CEH, I care if you can bring me good vulns. Show me you can break things I care about and that you're not a horrible person and you'll go straight to the
596.
by debatem1 10y ago
Not trying to nitpick, but it wouldn't necessarily be the case that you would have to enter a password. You could encrypt against an HOTP on the device and perform secure key erasure for the N-1th photo and previous. You'd then ha
597.
by debatem1 10y ago
Well known space firm, hiring security folk with some teeth. I look for exploit/pen testing experience either in the digital or physical world, development chops, and passion for the job.
598.
by debatem1 10y ago
Not trying to be dense, but possibly succeeding: why does this indicate that Seattle's price growth is sustainable? If Seattle builds too many apartments with those cranes surely the growth in prices will collapse (homes seem to be sup
599.
by debatem1 10y ago
Python has an excellent C extension api. I'd suggest taking a C library that does something you want and writing Python bindings for it.
600.
by debatem1 10y ago
I'm sorry, I won't read this until I can do so on a formally verified pdf renderer or an attacker might hack me further upstream. Oh no, I'm commenting using an unverified browser! runs screaming into the middle distance

More ›