justinludwig

14 ms·

31.
Elixir/Erlang Secure Coding and Deployment Hardening Guidelines(erlef.github.io)
195 points by justinludwig 3y ago|3 comments
32.
by justinludwig 3y ago
Comments from a similar article posted yesterday: https://news.ycombinator.com/item?id=37023806
33.
by justinludwig 3y ago
The tech industry as a whole is really diverse -- what you see in the news or promoted on Twitter, Facebook, etc is just a small part of it. Some parts of the industry are male-dominated, but there are lots of sectors and companies that are
34.
by justinludwig 3y ago
Comments aren't outdated. Obvious code doesn't need to be commented, and code should be written to be obvious where possible. But where it's not possible to write obvious code, it should have comments explaining _why_ the cod
35.
by justinludwig 3y ago
Normal people can use Apple- or Google-provided cross-device Passkeys synchronization. You don't have to manage your own Passkeys if you don't have the wherewithal to do so. Passkeys are a win for the tech-savvy because of phishin
36.
by justinludwig 3y ago
Passkeys are better than really strong passwords: Passkeys' killer feature is that they are phishing-resistant. Phishing isn't just for "stupid people" -- even people who are quite careful with their security hygiene are
37.
by justinludwig 3y ago
Sure, but in America, anybody can sue anybody for anything. Your lawyers are of course right that having a clause in a software license disclaiming all liability for its use could be helpful in your defense -- but it's not an ironclad
38.
by justinludwig 3y ago
The _tune_ we now commonly use for "Hark the Herald Angels Sing" was composed by Felix Mendelssohn in the 1840s (for the Gutenberg Cantata that this blog post talks about) -- but the _lyrics_ were originally written in the 1730s b
39.
by justinludwig 3y ago
Ouch, that's a painful mistake! But good on them for coming clean about it, and explaining fully without a lot of corporate doublespeak.
40.
by justinludwig 3y ago
I think you're overthinking it. Nftables may look more complicated at first, but once you start using it, you'll find it's much easier to maintain firewall rulesets with nftables than iptables. If you want to learn it, go thr
41.
by justinludwig 3y ago
Is this what you're looking for?: https://www.procustodibus.com/blog/2022/06/multi-hop-wiregua...
42.
by justinludwig 3y ago
I do (with the NoScript browser extension: https://noscript.net/ ). The main reason is to reduce my attack surface. A secondary benefit is it eliminates most ads and other annoying distractions.
43.
by justinludwig 3y ago
I think it's mostly wishful thinking -- the supposed mother, L25 Ocean Sun [1], is the oldest by far of the Southern Residents, and the only one living who could be Toki's mother. Most females don't make it past their 50s, an
44.
by justinludwig 3y ago
Maybe it's just bad luck, bad interviewers, etc -- but are you applying for jobs that would make best use of your skill set? Given your past experience, you sound like you'd be a good fit at a smaller company (or perhaps a small,
45.
by justinludwig 3y ago
It's the smoke from the annual forest fires of late summer and early fall throughout the West Coast. That smoke makes for really high individual 24-hour readings, plus ends up skewing the annual averages as well.
46.
How to FIDO(fido-alliance.github.io)
3 points by justinludwig 4y ago|0 comments
47.
by justinludwig 4y ago
Rosenpass is WireGuard plus a custom addition. This addition continually rotates the optional, per-connection preshared keys used by WireGuard. This is probably overkill for most use-cases (particular for a consumer-level VPN), but it'
48.
by justinludwig 4y ago
> The platform will include an Android container allowing third parties to build Android applications that will be available in an independent app store. Now that's pretty interesting -- being able to mod your car via APKs!
49.
by justinludwig 4y ago
Yes, an LLC is the simplest way to protect yourself from personal liability, and a good idea if you plan on providing any sort of goods or services to others. You should form an LLC in the state where you live. Here's a nice guide for
50.
What is Keyoxide? The thing Keybase once was(docs.keyoxide.org)
3 points by justinludwig 4y ago|0 comments
51.
by justinludwig 4y ago
If you live in the US and you're setting up an LLC just for yourself, it's cheaper & simpler to form the LLC in the same state in which you live, since a) you can act as your own registered agent, b) you'll still have to
52.
by justinludwig 4y ago
Nice writeup. Allowing customer data and secrets to be exfiltrated is a pretty big fail, and will probably make a number of customers re-think their patronage at a time when supply-chain security is top-of-mind to many. But three things men
53.
by justinludwig 4y ago
These sound like pretty standard interview questions to me. Would be a little weird if you're being asked to answer these in written form, though (instead of as part of an interactive conversation). Perhaps there's a bit of a disc
54.
by justinludwig 4y ago
Ah, in that case I think `-aes-256-gcm` is probably your best option (which isn't available with regular old OpenSSL).
55.
by justinludwig 4y ago
I like the fact that your script is simple, and uses a ubiquitous library! But I do have a few suggestions: 1. You may be using an older version of openssl, but with modern versions, add the `-pbkdf2` option for much saner key derivation. 2
56.
by justinludwig 4y ago
If you're using Wayland, foot is fast, lightweight, and has good color and font support: https://codeberg.org/dnkl/foot
57.
by justinludwig 4y ago
WireGuard makes this really easy. A simple WireGuard jumphost works basically anywhere, for practically any kind of application: https://www.procustodibus.com/blog/2022/11/wireguard-jumphos...
58.
by justinludwig 4y ago
Money quote: > "This is a cartoon super-villain of an app," said Gennie Gebhart, the Electronic Frontier Foundation’s advocacy director. "The biggest red flag is the number of permissions required, which is unnecessary for
59.
Fears mount that Cop27 app could be used by Egypt to surveil regime’s critics(theguardian.com)
1 points by justinludwig 4y ago|1 comments
60.
by justinludwig 4y ago
Big picture, Mastodon isn't just Twitter minus the moderation -- it's Twitter minus the algorithm for promoting the most "engaging" content. That's a big win, because it's the competition for the most engaging

More ›