kevinr

12 ms·

61.
by kevinr 10y ago
If, as joeyh says, the FSF are talking with them about it, maybe I'm going to wait until they're finished before doing anything drastic with my repos.
62.
by kevinr 10y ago
Somebody needs to inform Linus. :)
63.
by kevinr 10y ago
I cannot upvote this enough.
64.
by kevinr 10y ago
At least until someone finds a collision in the hashing algorithm used for the content addresses...
65.
by kevinr 10y ago
Here's a question: what's the trade-off in terms of return on investment between hiring salaried security engineers to administer a bug bounty and hiring salaried security engineers to find bugs directly? Parent's claim, as I
66.
by kevinr 10y ago
Bounty researchers aren't the only quasi-rational economic actors in this sytem. Cloudflare, we might surmise, get enough benefit from their bounty program that they're willing to pay for its administration costs and the occasion
67.
by kevinr 10y ago
Facebook and Google are not, at base, enterprise services.
68.
by kevinr 10y ago
Your password is, in a weird US Constitutional sense, speech, and your 5th Amendment right not to be forced to self-incriminate protects you. Your fingerprint is not speech, and not protected in the same fashion. (Once more for the folks i
69.
by kevinr 10y ago
Given Google's standing policy of requiring a search warrant for access to user confidential data, as detailed in their Transparency Report[0], my reading is that law enforcement needs to go to the same legal effort to access your data
70.
by kevinr 10y ago
https://www.google.com/patents/US2292387
71.
by kevinr 10y ago
One person's "thing that is broken for weak, historical reasons" is another's "pebble on the inevitable mountain of technical debt." Complexity scales super-linearly on number of features. Solutions aren'
72.
by kevinr 10y ago
AIUI, under the proposed system, Agilebits would have to do permissions prompting every time the user created a vault in Dropbox, which adds friction to the process (makes it less available). They would also need to provide a reasonable mi
73.
by kevinr 10y ago
Every security product needs to make trade-offs between confidentiality and availability. Addressing all "legitimate security (meaning confidentiality) concerns" results in the proverbial turned-off computer under a mountain with
74.
by kevinr 10y ago
You can share 1Password vaults with any kind of shared storage: Dropbox, Perforce, NFS, whatever. AFAICT the only thing 1Password.com provides is a nice, in-band UI for doing so.
75.
by kevinr 10y ago
Banks are in the business of managing financial risk for their customers, and they have enough money to eat a lot of risk before it becomes a problem for them. Other business models with less money in them do not have the same kind of resou
76.
by kevinr 10y ago
It depends a LOT on how many machines and services on the machines you're dealing with. There's a remarkable amount of stuff at the small end which is good, cheap, and fast to deploy. I've been using Loggly for my personal m
77.
by kevinr 10y ago
Respectfully, I'm interviewing for jobs right now. I did NOT just sign that pledge as a gesture.
78.
by kevinr 10y ago
Has anybody managed to move your company up the Joel Test[0] by threatening to leave, or management learning they missed a hire? Serious question. [0]: https://www.joelonsoftware.com/2000/08/09/the-joel-test-
79.
by kevinr 10y ago
And not all organization is union organization. 5-10% of employees speaking up can have an effect.
80.
by kevinr 10y ago
> This combined with a overly-enthusiastic do-gooders gaining more and more prominence in the Tor organization has led to the dangerous situation of promoting inherently insecure software as a security solution to vulnerable people. What
81.
by kevinr 10y ago
Okay, all plausible, until the last paragraph. > Instead, here in Seattle, I work with amazing people -- who came from Amazon, Boeing, Microsoft and other area startups. Hold the phone, did the author just call Microsoft , Amazon, and f
82.
by kevinr 10y ago
I feel like maybe the Big Idea of microservices is that web APIs provide better isolation guarantees than library calls, and now with the move to SaaS either the scale of our applications is large enough or (more likely) with virtualization
83.
by kevinr 10y ago
I was just reading the other day this article about the Backend for Frontend pattern (BFF) which suggests the best way to avoid tight coupling is for services you don't want tightly coupled to be owned by different teams, and to allow
84.
by kevinr 10y ago
The grants page says that they offer between $500 to $7000 to cover housing, food, childcare, transportation, etc, so that's a reasonable ballpark range on what someone not on a grant might need to spend as well. https://www
85.
by kevinr 10y ago
From the Recurse Center Manual[0]: > Traits of an awesome Recurser > Here are three principles we believe in. If you're living up to these principles, you're doing well at the Recurse Center. > Be rigorous. Understand how
86.
by kevinr 11y ago
Most of those issues I mention are exactly the kinds of issues which pull the reader out of the text, even though he may not be able to pinpoint exactly why. Certainly often when I use Instapaper to read a web page or Calibre to convert eb
87.
by kevinr 11y ago
Folks are experimenting with models like this around Kickstarter, Patreon, Serial Box, etc. The jury's still out on how successful it will be, for what kinds of projects, but I think it's clear that the world in which $15 retail p
88.
by kevinr 11y ago
> Thing is with ebooks the author should make more money, there's a wider accessible market, lower production cost. The market is... different. Wider in some ways, narrower in others. Young adult fiction is largely nonexistent in
89.
by kevinr 11y ago
As with many things, there's a widespread and not entirely erroneous perception that working below market for a while is a necessary precondition to later doing well. Also what's considered "market rate" and what'
90.
by kevinr 11y ago
I'm glad someone got something out of that section of the course besides a bad grade and the lingering suspicion that if it had been taught out of the engineering school it would have made more sense.

More ›