marichards

14 ms·

61.
by marichards 8y ago
Love? They're a security nightmare. I wonder if they refunded the costs for slurping user passwords or charged clients to hack them. http://web04.theregister.co.uk/2018/02/07/mixpanel_slurped_p...
62.
by marichards 8y ago
Not sure what "it will ensure that the public will not be able to use the GDPR to harass businesses" as GDPR explicitly empowers individuals to seek compensation. https://gdpr-info.eu/art-82-gdpr/
63.
by marichards 8y ago
Requirements analysis done properly it involves more than just checking boxes, there are exploratory exercises like https://www.agilealliance.org/glossary/storymap/ which allow stakeholders, customers and the deve
64.
by marichards 8y ago
Functionally that ticks boxes, but it won't tick non-functional boxes of security, resilience, performance, ..., ..., ... It's very immature to suggest that this is Agile and persists the myths that Agile as a hackathon exercise i
65.
by marichards 8y ago
How is this agile? Where is the requirements analysis? Where is the design? Where is the process? Where is the documentation?
66.
by marichards 9y ago
This reminds me of abstract classes
67.
by marichards 9y ago
Can we suggest this is renamed to something like: point of sale API? It appears to do a lot more than just the financial amount for payment as a request.
68.
by marichards 9y ago
Using Debian since Wheezy on my laptops and desktop. I had to learn which packages to install, that Ubuntu might typically have... Volume control for pulseaudio, firmware (plus enable non free repos). I also had to ensure my network card is
69.
by marichards 9y ago
1. For services the general public depend on and likely end up paying for (even with ads), it seems appropriate to respect the diversity of the public and represent them, especially if the company involved is at risk or actually is a monopo
70.
by marichards 9y ago
Modular monoliths can be a simpler medium. Writing modules of functionality that work on their own (in memory integration test) can easily be tested, separated into microservices or assimilated into a monolith. Be wary of runtime function
71.
by marichards 9y ago
Getting security fixes automatically is not a good thing. Too many open source projects fail to ensure non-breaking changes or long term support of multiple release versions. So either you rely on greatest(>) that has no guarantees to no
72.
by marichards 9y ago
On mobile I get an alert to move me on. On desktop I get an online banking page.
73.
Google Translate proxies others, why can't we all do it?(accessify.com)
2 points by marichards 9y ago|1 comments
74.
by marichards 9y ago
We seem to be an industry with a severe lack of professionalism. We fail to manage risk, we neglect security, we rarely know we are regulated and we hold an air of contempt about the idea of being asked to pay for our failings like any othe
75.
by marichards 9y ago
And what metadata was included?
76.
by marichards 9y ago
I'm pretty sure Google has the same list from their records of sent emails.
77.
by marichards 9y ago
Missing anti pattern: consider URLs insecure, especially if for a web browser. Don't include customer details (name, email, account number, etc) or search queries (free text) unless you have determined the security settings on your log
78.
by marichards 10y ago
create table twitter(tweet varchar(? ... that's it, I give up, time to become an Uber driver
79.
by marichards 10y ago
Hmm, if you can control the plaintext network isn't there an NTP attack to reverse time and use old compromisable certificates or move it forward past hsts max age?
80.
by marichards 10y ago
This kind of argument applies to anything, even paper. Encryption is just a tool. A pipe can be used to hide and carry water, it can also be tampered with to poison someone or conceal explosives.
81.
Everyone, please stop sending session or login tokens to analytics companies(youtube.com)
2 points by marichards 10y ago|0 comments
82.
Account Takeover Links Given to Trackers(youtube.com)
2 points by marichards 10y ago|0 comments
83.
by marichards 10y ago
It was annoying, a few years ago, trying to find a non-Apple laptop with better specifications. Now it's too easy, as a developer, I rarely find CPU limits my speed (typing is a limitation) but ram does limit how much I can do at once
84.
by marichards 10y ago
British regulators have highlighted this problem too. https://iconewsblog.wordpress.com/2015/09/16/does-your-websi... I wish someone would sue Mozilla, Google, Microsoft and Apple for data protection violati
85.
by marichards 11y ago
So does this mean a "Party" cannot refuse closed source software used for common features in a business, like email or Desktop OS?