justinludwig

6 ms·

1.
by justinludwig 2mo ago
It sounds pretty fair to me. I would look at it more like I'm getting a stipend to spend a few months learning if I really want to devote the next 5 years of my life building stuff with this guy. But if you're looking at it more l
2.
by justinludwig 7mo ago
"Get shit done" is by far the most important attribute of your first few employees. You need people who can work independently without a lot of direction, and focus on the right things while the rest of the world burns around them
3.
Security Model: Wayland vs. Xorg in Linux(openlib.io)
4 points by justinludwig 1y ago|4 comments
4.
Ghost Calls: Abusing Web Conferencing for Covert Command and Control(praetorian.com)
9 points by justinludwig 1y ago|0 comments
5.
by justinludwig 1y ago
> - System design at ~whiteboard still feels reasonable / CS basics. Bingo. Timeless classic for good reason. Code review also can be good, not in a "can you spot the 17 bugs" way, but rather as a tool for discussing what
6.
by justinludwig 1y ago
More about what you actually do -- I'd suggest something like "Secure, Sustainable Open Source: We partner with open source projects to monitor their upstream dependencies for security fixes, and automatically rebuild and distribu
7.
by justinludwig 2y ago
Simply being first isn't the moat -- _switching cost_ is the moat. You've got to get people using your app in order for being first to matter. And the easier it is for those users to switch, the smaller the moat is. IE6's moa
8.
Elixir/Erlang Hot Swapping Code (2016)(kennyballou.com)
225 points by justinludwig 2y ago|112 comments
9.
Linux connection tracking and (Slow) DNS(kb.isc.org)
48 points by justinludwig 2y ago|16 comments
10.
Wayland Apps in WireGuard Docker Containers(procustodibus.com)
49 points by justinludwig 2y ago|10 comments
11.
What Is a BOI Report?(legalzoom.com)
1 points by justinludwig 2y ago|0 comments
12.
Cybersecurity Code of Honor(montreat.edu)
1 points by justinludwig 2y ago|0 comments
13.
by justinludwig 2y ago
You realistically only have time for one of the following: 1. be a serious student 2. be a serious athlete 3. be a serious maker 4. be a serious business-person My advice would be not to take any of them too seriously -- enjoy college, enjo
14.
by justinludwig 2y ago
This tactic is usually used as a diversion, either to bury an important email message (like a notification that your credentials to an important account have changed) in a flood of garbage messages, or to keep you focused on your email inst
15.
by justinludwig 2y ago
If this is her personal phone number, then it's likely available from any number of "legitimate" data brokers; plus likely would be part of various database dumps you can buy on the dark web. It's pretty easy for someone
16.
by justinludwig 3y ago
I loved Lemmings (the game) as a kid! But as an adult, I found out everything I thought I knew about lemmings (the animal) was a lie: https://www.snopes.com/fact-check/white-wilderness-lemming-s...
17.
Flowtables: A Netfilter/Nftables Fastpath(thermalcircle.de)
9 points by justinludwig 3y ago|0 comments
18.
by justinludwig 3y ago
This was part of the original Netscape 6 pre-releases in the late 90s. Looks like the search button was added to the URL bar for milestone 11: http://www.andrewturnbull.net/mozilla/history.html
19.
by justinludwig 3y ago
Buy a cheap Android phone on eBay, use it on Wi-Fi for work accounts instead of your personal phone.
20.
Connection Tracking (Conntrack): Design and Implementation Inside Linux Kernel(arthurchiao.art)
15 points by justinludwig 3y ago|0 comments
21.
by justinludwig 3y ago
OWASP Cheat Sheet Series [1] is a great place to start (for websites or HTTP services generally). Also see their Web Security Testing Guide [2] for a comprehensive list of security issues to watch out for: [1] https://cheatsheets
22.
by justinludwig 3y ago
Set up an Asterisk box and connect it to a SIP trunking service (like Twilio or a bunch of other similar providers) to make and receive regular phone calls. Use the same provider to separately send and receive text messages (via the provide
23.
Containers: Rootful, Rootless, Privileged and Super Privileged(infosecadalid.com)
2 points by justinludwig 3y ago|0 comments
24.
by justinludwig 3y ago
Yes. You can use a combination of the built-in passkey support on some of your devices (like the platform authenticators built into iOS, macOS, Windows, and Android), external hardware security keys (like YubiKey, Nitrokey, OnlyKey, etc), a
25.
by justinludwig 3y ago
Or you can use an external hardware security key; the latest versions of most security keys (like YubiKey 5, Nitrokey 3, etc) support Passkeys. Passkeys are basically just U2F 2.0, allowing you to use an asymmetric key pair as the first fac
26.
Goodbye, Jenkins Hello, Sourcehut(welkup.com)
3 points by justinludwig 3y ago|0 comments
27.
by justinludwig 3y ago
Yes, that's the CVE referenced by the Phoronix article and the oss-security post. The researchers coordinated their disclosure with the security teams from the major Linux distros, so packages with the fix should be available for most
28.
by justinludwig 3y ago
"Makes money" in the sense that someone will pay some money for it, absolutely. "Makes money" in the sense that it will adequately compensate you (and your collaborators), almost certainly not. Most successful businesses
29.
An Opinionated Yubikey Set-Up Guide(procustodibus.com)
143 points by justinludwig 3y ago|72 comments
30.
Interviews in the Age of AI: Ditch Leetcode – Try Code Reviews Instead(chrlschn.dev)
1 points by justinludwig 3y ago|0 comments

More ›