kingkilr

10 ms·

31.
by kingkilr 11y ago
Super happy that the OpenSSL team decided to be proactive and just enable `SSL_OP_SINGLE_DH_USE` for all users, as well as bump the minimum DH key size. Better defaults for everyone!
32.
by kingkilr 11y ago
It launched yesterday :-) https://alexgaynor.net/2016/jan/20/announcing-letsencrypt-aw... is some tooling I wrote for use on AWS.
33.
by kingkilr 11y ago
Please be careful using urllib2, unless you are on Python 2.7.10+ or 3.5+ it does not do HTTPS certificate validation.
34.
by kingkilr 11y ago
Can you articulate a _specific_ threat model under which this extension fails to protect against mass data collection by Google? Or is this idle speculation.
35.
by kingkilr 11y ago
https://github.com/department-of-veterans-affairs/vets-websi... :-)
36.
by kingkilr 11y ago
(I work at USDS@VA) I wouldn't say it's a philosophical difference. We're definitely tackling the problem in two different ways, but that's not because either group thinks the other is wrong, it's because this is a
37.
by kingkilr 11y ago
Wearing my python core dev hat: a litany of security fixes, python3 compatibility stuff, useful stdlib modules, dict and set comprehensions, probably more stuff I can't remember.
38.
by kingkilr 11y ago
I'm not an expert (by any stretch of the imagination) on federal hiring policy, but my appointment is 2 years, with the opportunity to extend another 2 years. No clue what happens after that.
39.
by kingkilr 11y ago
Salary range is $116,021 to $158,700. (From va.gov/ds/, where I work, I believe this is the same for all the other Digital Service teams though)
40.
by kingkilr 11y ago
Small note: the $200 million dollar figure wasn't for all of healthcare.gov, it was for the _authentication system_.
41.
Inside Obama's Stealth Startup(fastcompany.com)
1 points by kingkilr 11y ago|0 comments
42.
by kingkilr 12y ago
(I work for the Digital Service @ the VA) This is correct. The HQ team is a part of OMB, the White House's Office of Management and Budgest. The agency teams can be thought of as a franchise model, we work closely with the HQ team and
43.
HTTPS Watch(httpswatch.com)
136 points by kingkilr 12y ago|56 comments
44.
by kingkilr 12y ago
Django's trademark is held by the Django Software Foundation.
45.
by kingkilr 12y ago
They're working on the HTTP server.
46.
by kingkilr 12y ago
Several of us who work on PyCA Cryptography ( https://cryptography.io ) will be doing code reviews (our docs outline the code review process we use).
47.
PyPy 2.3: Terrestrial Arthropod Trap released(morepypy.blogspot.com)
3 points by kingkilr 12y ago|0 comments
48.
by kingkilr 13y ago
Warehouse is the re-reimplementation, also done by the same guy, which will eventually become the new pypi.python.org
49.
by kingkilr 13y ago
Just to be perfectly clear: it's 100% possible to write an efficient Ruby implementation, and if you have the right technical infrastructure, it's no more difficult than Python, or Javascript for that matter.
50.
by kingkilr 13y ago
https://research.microsoft.com/en-us/people/mickens/thisworl...
51.
by kingkilr 13y ago
Python already comes with the logical conclusion of goto-fail out of the box. There's no need to add a new special feature for it. (There is absolutely no certificate store checking for certs by default, nor is there any hostname check
52.
by kingkilr 13y ago
Midnight is not the addittive identity of points in time. There is no additive identity because there is no addition operation. You're confusing the ``time`` type, with the ``timedelta`` type, which represents a duration, and does have
53.
by kingkilr 13y ago
Sure, any consumer of this API really should fix it themselves to have a secure configuration. But I submit that basically none of them are. An API where almost everyone who uses it wrong is not a good API. When the consequence of using it
54.
by kingkilr 13y ago
Let us present a third possibility: Maybe they shouldn't have shipped a TLS client if they weren't prepared to take responsibility for how it was configured.
55.
by kingkilr 13y ago
Have you considered contributing to Twisted's porting process?
56.
by kingkilr 13y ago
I highly reccomend "The Machine in America: A Social History of Technology" and "Technology in Postwar America: A History", both by Carroll Pursell.
57.
by kingkilr 13y ago
It's a joke. A clever satire. I simply refuse to believe it's real.
58.
by kingkilr 13y ago
Thank you Heroku for your commitment to making our community a better place.
59.
by kingkilr 13y ago
I really had no idea that everyone writes "a FAQ". I read it as "eff-aye-cue", so I naturally used "an".
60.
To my friends in the Node community(jacobian.org)
72 points by kingkilr 13y ago|77 comments

More ›