rietta

52 ms·

631.
by rietta 11y ago
Yeah, that's not going to work. Just like Mr. Levison giving the FBI the key printed in tiny font did not fly from the court's point of view. Lavabit found in contempt for trolling the FBI with 4-point font http://www.d
632.
by rietta 11y ago
I'm not so sure about that as the language of the bill states: "(d) (1) ...that is not capable of being decrypted and unlocked by its manufacturer or its operating system provider shall not result in liability to the seller or les
633.
by rietta 11y ago
While fiatmoney may have been able to state the correlation better, there are parallels between the regulation of encryption and the regulation of firearms. And this goes beyond just that encryption is considered a munition within the regul
634.
by rietta 11y ago
No kidding. Even something as simple as keeping track of what one can do as you drive across country requires an app, or at least http://www.handgunlaw.us/ . This is with a state issued carry license that has a patchwork of
635.
by rietta 11y ago
Oh! I loved that game as a teenager. Actually, the first one even more so.
636.
by rietta 11y ago
Nice! Maybe I am missing something, but I am not seeing a way to dig into a given database's structure without cumbersomely querying the pg_catalog. Noticeably absent are \dt and such vs running stuff like SELECT n.nspname as "Sc
637.
by rietta 11y ago
They probably brute forced his password given a copy of the private key file and didn't want to disclose that method.
638.
by rietta 11y ago
While Jason Scott raises interesting points six years ago, the principles of data management remain the same as the days of dedicated servers with on premises systems. If you have only one copy of data and that machine goes down, then the d
639.
by rietta 11y ago
It would seem that more projects would benefit from running their own free software on their own virtual server infrastructure. A decade ago, there was GNU Mailman and it's still around - http://www.list.org . Yes, this mean
640.
by rietta 11y ago
That is a valid objection. It's best to use the right tool to communicate about the problem and solution.
641.
by rietta 11y ago
I would say, yes. Some programmers have trouble reasoning abstractly or think it somehow beneath themselves because it does not produce something real at the end. There are also "programmers" who's entire method of work seems
642.
by rietta 11y ago
Reminds me of competing in the ACM Intercollegiate Programming Competitions. With 3 students and one computer, you had to solve the problems offline and only spend keyboard time for entering and running your program. It really teaches a ski
643.
by rietta 11y ago
"We're still on for dinner on Thursday, right?" Some things are better said in person...
644.
by rietta 11y ago
On a happier note, I still wear my Danger Developer Day t-shirt from 2007. That was my first visit to the Bay Area.
645.
by rietta 11y ago
Wow, so asking for a PGP key or asking if they have TextSecure on their phone must be REALLY bad!
646.
by rietta 11y ago
That transition was a real mess. We had some games in the T-Mobile Sidekick store and getting paid the royalties by Microsoft was way more difficult than it should have been after the transition. It took months to get added as a vendor and
647.
by rietta 11y ago
I got the same.
648.
by rietta 11y ago
I've been a freelancer and now an agency owner for years now; in fact my entire career. I will gladly check into the Hangout if I can while in route to the Atlanta Ruby Users' Group meetup.
649.
by rietta 11y ago
Well, at least he is being more straight forward than Comey was. He's laying it out there that in his opinion it's key escrow or else! Of encrypted device users, just how many have not opted to have the key backed up by Apple or M
650.
by rietta 11y ago
It's a form of 'document storage' that allows a application to store data without the need to account for everything in the database schema.
651.
by rietta 11y ago
That can be the goal. In my last experiment with this short of going to pure fixed bid, we had a client running an Excel spreadsheets to figure out exactly what they were paying for hour, for each developer even. We finally just gave up and
652.
by rietta 11y ago
I have a 15 inch MBP, but work docked most of the time with a Thunderbolt display and a second external monitor run vertically. It works well. The newer models are very portable. You should not go wrong either way. Just be aware that you ca
653.
Uniqueness Validation Race Condition in Ruby on Rails Applications(rietta.com)
1 points by rietta 11y ago|0 comments
654.
by rietta 12y ago
I would actively insist not storing PII in plain text unless there was absolutely no way around it. And it may involve changing the business model to enforce that certain data is not needed to be actively processed by the web application in
655.
by rietta 12y ago
Yeah, I definitely would not do that to a 3rd party system without a specific letter of engagement for penetration test or security review. Now, that being said, it's the first thing I would tell every single developer about as a senio
656.
by rietta 12y ago
A data retention policy can state that you delete all non-operational data after 60 or 90 days. Or that it is moved to one-way encrypted storage for up to a year. In other words, it can be a security mechanism vs "we keep everything in
657.
by rietta 12y ago
It's definitely not just Uber. And drivers' license numbers are serious PII! It was my exact example that I gave to my last appsec talk for Ruby developers this month in Nashville. Starting with the user story: "As a Pawn Sho
658.
by rietta 12y ago
Probably so and also an indication of a probably lack of defense in depth and failure of access control. It will be another example to add to my Litany of Data Breaches the next time I speak with developers about appsec. You can see my la
659.
by rietta 12y ago
I type on a mechanical, though non-ergonomic keyboard, and like it quite a lot. Specifically a DAS Keyboard Ultimate with Cherry Blue switches. I added o-rings to quiet the report of the click a bit. I have not had tying discomfort in a cou
660.
by rietta 12y ago
I went through the M.S. Information Security program at Georgia Tech and and glad that I did it. Though at this point in my life I work mostly on building out web applications with Ruby on Rails for startups. Security is a tough sell in mos

More ›