jvehent

6 ms·

1.
by jvehent 2y ago
Ping me on signal when you get a chance!
2.
by jvehent 2y ago
that was very much one of the lesson learned
3.
by jvehent 2y ago
Yeah. Sorry about that... We didn't think that the intermediate CA expiring would break the signatures, because code signing generally doesn't care about expiration, but we never tested the code path until the intermediate expired
4.
by jvehent 2y ago
Hey Ben! (I made and used to maintain Autograph at Mozilla)
5.
by jvehent 3y ago
Don't called your project *Zilla. The copyright owners of Godzilla are known to go after everyone who tries to use the "Zilla" suffix. Mozilla learned its lesson long ago and had to negotiate a special agreement.
6.
by jvehent 3y ago
The most compelling reason to use Firefox Sync is that it is client-side encrypted. Mozilla stores opaque encrypted blobs that it is entirely unable to decrypt. Law enforcement agencies request that data from time to time, hoping to obtain
7.
by jvehent 3y ago
Mastodon's infosec.exchange is doing genuinely well. It's not the infosec Twitter of the olden days, but it's the most promising replacement we've got.
8.
Data Driven Detection Engineering(jvehent.org)
2 points by jvehent 3y ago|0 comments
9.
by jvehent 4y ago
Sops original author here. I haven't contributed to the project in a few years, but it's really cool to see that it continued to grow and gain traction outside of Mozilla. Thanks folks!
10.
by jvehent 6y ago
Wait until this happens to your car...
11.
by jvehent 6y ago
that's why archive.org exists
12.
Gitlab under credential stuffing attack(twitter.com)
2 points by jvehent 6y ago|0 comments
13.
by jvehent 6y ago
Which any programming language can handle easily. The architecture here is more interesting than the language choice.
14.
by jvehent 6y ago
So governments already have all the potassium nitrate, Palantir is just helping them make bullets?
15.
by jvehent 6y ago
Sops creator and co-maintainer here. We love Sops. We love Vault. We use both of them at Mozilla in various places. Beyond the "tool war", which is silly, what really matters is using tools that integrate well with your workflow,
16.
Sean Martell: My Mozilla Design Journey(twitter.com)
2 points by jvehent 7y ago|0 comments
17.
by jvehent 7y ago
Mozilla did this a couple years ago. https://medium.com/firefox-test-pilot/test-pilot-no-more-404...
18.
by jvehent 7y ago
I hate gigantic URLs, but not as much as I hate extensions that want to access my data for all websites.
19.
by jvehent 7y ago
> 76-97 minutes read indeed...
20.
by jvehent 7y ago
IANAL, and I wouldn't try explaining that to a prosecutor or a federal judge...
21.
by jvehent 7y ago
"Math Basics" It's 2000 pages long....
22.
by jvehent 7y ago
Firefox Reality is a version of Firefox targeted at VR headsets. You can install it from the store of the Oculus Quest (the headset I own, I imagine others are supported). It's not meant to run on a regular workstation. The interesting
23.
by jvehent 7y ago
This is accurate. I would add that, in my experience, the value-add of working with a technical editor to shape the book and stay on track is definitely worth the cost of an editor. And then there are typesetters, copywriters, graphists, re
24.
Ivanka Trump Receives Internet Freedom Award from Tech Industry(twitter.com)
6 points by jvehent 7y ago|2 comments
25.
DNS-over-HTTPS Policy Requirements for Resolvers(blog.mozilla.org)
140 points by jvehent 7y ago|294 comments
26.
Analysis of the Alexa TopM Sites (April 2019)(pokeinthe.io)
2 points by jvehent 8y ago|0 comments
27.
by jvehent 8y ago
They have Visual Studio Code.
28.
by jvehent 8y ago
Advertise yourself as an infrastructure architect and aim for jobs that value your many years of experience. Learning kubernetes is good, but it doesn't replace understand the many ways a database migration is going to fail.
29.
by jvehent 8y ago
They are just tools. People will come up with better ones every other year, and we'll abandon the old stuff. That's ok, components should be replaceable without having to reinvent the whole thing.
30.
by jvehent 8y ago
> I always try to explain to my clients that web security is a complex field and they should hire a pro for that area... No. Just no. Every other field of engineering includes security and safety as a core requirement of anything they do

More ›