HedgeMage

6 ms·

1.
by HedgeMage 3mo ago
Lots of monocultures exist in hiring even without an algorithmic scoring system. That's roughly how every stupid hiring fad works, and how it's always worked, because most employers have no idea how to identify great potential em
2.
by HedgeMage 9mo ago
I began my career as a software engineer, eventually moving up to architect before going to cybersecurity full-time, going from Senior Analyst to Chief Analyst to Deputy Director, followed by the sorts of executive roles I'm now in. T
3.
by HedgeMage 1y ago
Not that scary. Click it.
4.
by HedgeMage 4y ago
As others have noted, that's a pretty broad question. Are you interested in the theoretical or the practical? Do you prefer a scrappy, creative investigation or one within the walls of a big, well-resourced, legitimizing, and bureauc
5.
by HedgeMage 4y ago
It's really not pretty obvious...says the non-degreed cybersecurity researcher at a major university in the US. The majority of academia is further behind in cybersecurity than they think they are. Some bright spots are far ahead than
6.
by HedgeMage 4y ago
If I hired someone, and found out that they lied during their interview about anything at all, they'd be fired, period. I could not trust someone who lies during an interview to make ethical decisions in the future. Honesty doesn&#x27
7.
Autistic in a startup?
29 points by HedgeMage 9y ago|10 comments
8.
by HedgeMage 10y ago
I would agree with you if NTP classic had fixed the total of its social and technological problems. Unfortunately, this is not the case. "Patching faster" is one small victory.
9.
by HedgeMage 10y ago
That's simply not what I said; I was misquoted. Please watch the original video. https://www.oreilly.com/ideas/the-internet-is-going-to-fall-... It's amazing* how many people here are willing to roast me ove
10.
by HedgeMage 10y ago
As a side note, I'd like to add a point that I highlighted in my O'Reilly Security Conference talk but previously forgot to mention here... One of the coolest after-effects of this whole thing was that, after the fork, when NTP cl
11.
by HedgeMage 10y ago
I'm sorry if I wasn't clear, I meant "before they were disclosed to NTP classic or NTPSec". In other words, by simply improving on the software engineering practice, we eliminated classes of vulnerabilities without havi
12.
by HedgeMage 10y ago
In the case of Network Time Foundation, the nonprofit wrapper for NTP classic, the problem was largely mismanagement of funding. NTF funded Harlan Stenn's work on NTP, but funded no other developers. It did, however, fund a fundraise
13.
by HedgeMage 10y ago
The specific measures that were refused, from the rescue plan that Mr. Stenn rejected and my notes from that meeting: * Moving NTP development from a private Bitkeeper repo which requires all people accessing it (10 at most without private
14.
by HedgeMage 10y ago
I know what his side of the story is on that specific password. I don't think it's adequate, but... I also don't know that it's helpful to keep arguing this two years later. Casual contributors couldn't build the
15.
by HedgeMage 10y ago
I highly recommend that you watch my interview with Mac Slocum (video here: https://www.oreilly.com/ideas/the-internet-is-going-to-fall-... ) to find out what I actually said, rather than listen to a reporter saying wh
16.
by HedgeMage 10y ago
This is pretty much what happened. We spent a few months working with Mr. Stenn, and ultimately he did not agree to pursue strategies to correct the underlying problems that caused NTP's security and stability issues. Simply patching
17.
by HedgeMage 11y ago
It depends a lot more on her strengths and background than anything else. If she's the right kind of thinker, parlaying a polisci background into infosec isn't that hard -- there's a LOT of activity around the infosec policy
18.
by HedgeMage 11y ago
I don't have a degree, and am not currently pursuing one.
19.
by HedgeMage 13y ago
Actually, I made it a point to explain that it doesn't have to be computers... "Even if they lacked computers, they were taking apart alarm clocks, repairing pencil sharpeners or tinkering with ham radios. Some of them built pum
20.
by HedgeMage 13y ago
For my son, it was "Johnny Test" and "Phineas and Ferb", the latter being one of the most well-done bits of hacker/maker propaganda I've ever come across. Amusingly, all the scientists/engineers in Johnny
21.
by HedgeMage 13y ago
"...increased emphasis on identity politics is off-putting to me...because it's shifting attention away from the interesting stuff - the stuff that makes tech fun and interesting in the first place." This. This. A thousand
22.
by HedgeMage 13y ago
Recent bank reforms in the US created a requirement for any institution offering any checking account to offer at least one checking account option with no fees and no overdraft protection. At my banker's suggestion, I opened this typ
23.
by HedgeMage 13y ago
Ahh, but it wasn't magic...as you go on to say, the seeds were planted when you were young. "messing with radios and old VHS players" is a precursor to becoming a good technologist. It's not about what you played with,
24.
by HedgeMage 13y ago
> it makes me think: this might be a problem. Is it harder to be a hacker if you > also have an interest in social media and graphic design and popularity and > friendships? Are we defining "hacker" to include only people
25.
by HedgeMage 13y ago
Sure, it might be awkward at first for girls who don't have a lot of experience in mixed-gender environments. If it's a friendly mixed-gender environment, the awkwardness wears off pretty soon. I've watched it happen. On th
26.
by HedgeMage 13y ago
Exactly my point. I had it pretty good...way better than newbie women today have it. I'd like us to give them the advantages I had! Ironically, this means in many ways doing the opposite of what many of the people calling themselve
27.
by HedgeMage 13y ago
I have a predisposition to RSI. My carpal tunnel was so bad by my late teens/early 20's that one doctor recommended bilateral surgery. Then I: * Started taking large doses of B12 and B6 * Switched to Dvorak layouts on all my computer keyb
28.
by HedgeMage 14y ago
Dedicated to telecommuting here, for so many reasons that I hardly know where to begin: * I don't want to lose 2h/day to unpaid work (i.e. 1 hour commute each way). That's 500 hours/year if I take two weeks vacation, or a little over 60 8-
29.
by HedgeMage 14y ago
same problem here
30.
by HedgeMage 14y ago
My 9yo is learning Python, he's been a decent bash scripter for years. Why not let them loose with real, powerful grown-up tools from the start?

More ›