ejcx

12 ms·

91.
by ejcx 8y ago
My bet on Apple is they miss their phone production projection and blow away the services and accessories projections.
92.
by ejcx 8y ago
Thanks. Candidate experience is super important so having a bad interview experience sucks. We try to run a pretty tight ship on the security side of things, and I know most of the other hiring managers are the same way. Personally, I make
93.
by ejcx 8y ago
Im a Hiring Manager at Cloudflare on our Security Team. We are hiring in San Francisco, San Jose, Austin, and London. Our Security Team is looking for folks with a variety of skillsets. https://www.cloudflare.com/careers&#x2
94.
by ejcx 8y ago
Im a Hiring Manager at Cloudflare on our Security Team. We are hiring in San Francisco, San Jose, Austin, and London. Our Security Team is looking for folks with a variety of skillsets. https://www.cloudflare.com/careers&#x2
95.
by ejcx 8y ago
It has nothing to do with law. That's just the easiest way to send them data, especially when some apps might not have back ends
96.
by ejcx 8y ago
I met quite a few folks on the Plaid engineering team and was really impressed with the people I met and how they were approaching building their product. Congrats to them, and a lot more work to do!
97.
by ejcx 8y ago
Im a Hiring Manager at Cloudflare on our Security Team. We are hiring in San Francisco, San Jose, Austin, and London. Our Security Team is looking for folks with a variety of skillsets. https://www.cloudflare.com/careers&#x2
98.
by ejcx 8y ago
I think it's the author's name for perimeter based security
99.
by ejcx 8y ago
I'm sure Marriot had an IDS that created 10000+ alerts per day. I'm sure they also had a credential rotation policy, hired 3rd party pentesters, had a vulnerability management program, etc Securing systems is really hard. A lot of
100.
by ejcx 8y ago
I ALWAYS run 3rd party JavaScript on my payments page. That's what Stripe is, after all. In this blog post the author identifies probably 1 questionable third party resource. As scary as it sounds it's not exactly easy to just com
101.
Malware targeting consul(hashicorp.com)
1 points by ejcx 8y ago|0 comments
102.
by ejcx 8y ago
There are actually quite a few aspects of your blog that I think we will emulate in the near future, with a twist, to solve more similar problems. This problem set was super different though. Adding a public facing SSH interface to our prod
103.
by ejcx 8y ago
So much cloud encryption is a total checkbox. As a security professional I sometimes don't have a clear threat model that the magic crypto is meant for.
104.
by ejcx 8y ago
I work at Cloudflare, but regardless think this is awesome for security. Being more resilient to coffee shop type attacks and other DNS issues is great. It's a really user friendly and simple step in the right direction.
105.
by ejcx 8y ago
I live near your new place on Polk. Love it. Keep it up!
106.
by ejcx 8y ago
It's amazing to me how volatile tech stocks are even today. I remember buying Amazon and Netflix 5 years ago when each of them fell 33% on an earnings miss and it has worked out really well buying on "miss".
107.
by ejcx 8y ago
Hacking a company is against the law. Full stop.
108.
by ejcx 8y ago
Seems like a knee-jerk reaction. In reality it will probably be more than a year before anyone even notices any change to GitHub associated with the acquisition.
109.
Startup Engineering: From 1 AWS Account to 100(hackernoon.com)
1 points by ejcx 8y ago|0 comments
110.
by ejcx 8y ago
Chrome.
111.
by ejcx 8y ago
This is not the feedback you're looking for, but I honestly could not stand how something has hijacked the scroll wheel up and down.
112.
by ejcx 8y ago
I think the hardest part is the planning process and communicating rapid change. Startups and fast growing companies grow quickly and changes happen rapidly. If priorities are constantly changing and communication/the planning process
113.
by ejcx 8y ago
What we REALLY need is these Micronesian money stones to be logged on the immutable blockchain.
114.
by ejcx 8y ago
I love this! If you're a part of a security team and you are not automating your processes and procedures then your team is going to drown. You must automate. It seems like some simple checklist app but having a non Jira process that t
115.
by ejcx 8y ago
I've worked with quite a few people at Coalition and know a lot about them. This is a pretty neat company and team in a really boring space, which I think means there's a ton of opportunity.
116.
by ejcx 9y ago
No our DNS is fine. Some folks have issues accessing our site if their ad-blockers are on.
117.
by ejcx 9y ago
Segment | Engineering | SF, Vancouver | Full-time | https://segment.com Segment is growing quickly and hiring great engineers to help us scale our engineering org. If you would like to see all of our job postings, https:/&
118.
by ejcx 9y ago
Those are CSP violations not CORS violations. There are different levels of maturity with your security headers, and Sqreen's cookies are scoped to a completely different subdomain my.sqreen.io versus www.sqreen.io. It looks to me like
119.
by ejcx 9y ago
But, if you're using vault for only Secrets Management on AWS you are using a nuclear warhead to destroy an ant-hill. It's quite frankly not a good experience and really challenging to automate running Vault in a modern environmen
120.
by ejcx 9y ago
If Okta is down our infrastructure should continue to function and scale up and down as needed. If there was an emergency we have our root accounts to recover access, but it's a good point that we should probably have a second IDP as a

More ›