st3fan

13 ms·

181.
by st3fan 2y ago
You can remove "larger programs". Personally I also find python typing useful in "smaller" programs and I use them pretty much everywhere. For example I use it in all my automation scripts which are usually not much long
182.
by st3fan 2y ago
I flagged this because the title of this post is completely wrong and not representative of the content it links to.
183.
by st3fan 2y ago
I can answer that: I've used plenty of apps the past decade that tried to do this and each and every app "felt wrong". You know it within seconds that an app is not using native UI. There is always some basic interaction miss
184.
by st3fan 2y ago
I think it was removed from Focus for iOS much longer ago https://github.com/mozilla-mobile/focus-ios/pull/1720
185.
by st3fan 2y ago
OMG seriously? Is there _anything_ that people will not use as a "sign of Mozilla's distress" ? Is there nothing Mozilla can do right? Is anything it does a sign of failure and doom? FFS people ...
186.
by st3fan 2y ago
Bad example. Probably not intentional, but of course they did kill XMPP usage in the end. Messenger (and all the other big tech non-XMPP platforms) is where the users are now. Nobody recently said "i need to get on XMPP to connect to m
187.
by st3fan 2y ago
Nobody is forcing you to buy an iPhone.
188.
by st3fan 2y ago
that was already settled. this article is about other things.
189.
by st3fan 2y ago
"How do you compete with iOS without supporting iOS apps, iCloud, and iMessage blue bubbles?" You build good alternatives for each of those.
190.
by st3fan 2y ago
https://archive.is/R6meP
191.
by st3fan 2y ago
Why is getaddrinfo considered a legacy API? I understand that you probably don’t call this when you write software on top of Apples frameworks but it is a pretty standard thing to call for “Unix” (for lack of better term) programs.
192.
by st3fan 2y ago
It does redact secrets passed as command line arguments. This is what makes it so inconsistent. It does recognize a GitHub token as an argument and blanks it out before sending it. But then it doesn’t do that if the GitHub token appears in
193.
by st3fan 2y ago
No it logs every command macOS runs or that you type in a terminal. Either directly or indirectly. From macOS internal periodic tasks to you running “ls”.
194.
by st3fan 2y ago
Unfortunately the software doesn’t allow for scrubbing or redacting to be configured. Those features simply do not exist.
195.
by st3fan 2y ago
It may depend a bit on your organization but I bet most folks using an EDR solution can tell you that Macs are probably very low on the list when it comes to malware. You can guess which OS you will spend time on every day ...
196.
by st3fan 2y ago
But why only forced on MacOS? I think some configurability would be great. I would like to provide an allow list or the ability to redact. Or exclude specific host groups. We all have different levels of acceptable risk
197.
by st3fan 2y ago
Ask them to search for the usual env var names like GITHUB_TOKEN or AWS_ACCESS_KEY_ID.
198.
by st3fan 2y ago
Found out that the CrowdStrike Mac agent (Falcon) sends all your secrets from environment variables to their cloud hosted SIEM. In plain text. Anyone with access to your CS SIEM can search for GitHub, aws, etc creds. Anything your devs, ops
199.
by st3fan 2y ago
All the focus is on frameworks that appeared more recently but Tornado is rock solid and functional. It also seems to be well maintained. Releases have slowed down a bit but I don't think that is a surprise for stable software. I would
200.
by st3fan 2y ago
"We cannot process this report. Please attach 50GB of logs that may or may not include PII". I've had enough cases where a simple screenshot or log snippet should have been enough to accept the bug report but instead they wer
201.
by st3fan 2y ago
You forgot the action items to be moved into the next sprint.
202.
by st3fan 2y ago
Also, you don't have to worry about half of your stack? The shared responsibility model really works.
203.
by st3fan 2y ago
If you don't need any of those things then your use of k8s just becomes simpler. I find k8s an extremely nice platform to deploy simple things in that don't need any of the advanced features. All you do is package your programs as
204.
by st3fan 2y ago
Nice things like nil pointers and a foundation of C.
205.
by st3fan 2y ago
Do not take this article for granted. There are so many incorrect explanations in it. This is a really bad writeup for a security blog. I really don't know where to start ...
206.
by st3fan 2y ago
The default wallet if your bank is going to make you install a shitty app when you want to use their debit / credit cards.
207.
by st3fan 2y ago
Where Vendor can also be an open source project. The cost of moving away from a project like Tau can be equally high as a closed source PaaS of course.
208.
by st3fan 2y ago
> But I think at a certain point you can only care so much and dedicate so much time to it. That is most likely what _Linksys_ did. Please! Lets not just accept this poor state of security and somehow try to be apologetic for this issue.
209.
by st3fan 2y ago
UHOH!
210.
by st3fan 2y ago
Similar sentiment at Blackberry when they looked at the first iPhone. Forgetting that it is a long play. And that hardware will improve every iteration.

More ›