ab

12 ms·

1.
by ab 6y ago
> if you thought it was safe The problem is that companies introducing chemicals into a clothing product aren't required to show that they're safe, at least in the US. So considering the negatives only happens much later, if at
2.
by ab 6y ago
It's more about what happens when you toss your phone into the landfill after two years, and the mountain of dead electronics starts leeching toxins into the groundwater. https://www.ncbi.nlm.nih.gov/pmc/articles&#
3.
by ab 7y ago
Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure access to multiple US government services throug
4.
by ab 7y ago
Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure access to multiple US government services throug
5.
by ab 7y ago
Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure access to multiple US government services throug
6.
by ab 7y ago
Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure access to multiple US government services throug
7.
by ab 7y ago
If there's not an obvious security contact at the agency, you can always report vulnerabilities to US-CERT, which has overall responsibility for connecting reporters to the right responders. https://www.us-cert.gov/ Th
8.
by ab 7y ago
Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure access to multiple US government services throug
9.
by ab 7y ago
Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure access to multiple US government services throug
10.
by ab 8y ago
This is a poor way to handle library upgrades that are guaranteed to break any existing compiled binaries. Frustrating that my PR to create readline@7 was rejected. https://github.com/Homebrew/homebrew-core/pull&#x
11.
by ab 11y ago
The white "Access Denied" page is to help you empathize with Jony Ive, still trapped in a white room after all these years. https://www.change.org/p/apple-free-jony-ive-from-his-white-...
12.
by ab 11y ago
It's interesting how your eye naturally groups the pentagons into the larger primitive unit, like the pinwheels of type 5. Wolfram Alpha also has some things about tiling: http://www.wolframalpha.com/input/?i=penta
13.
by ab 11y ago
Enforcement of nameConstraints is inconsistent at best. I experimented with name constraints a couple years ago for a private CA project, with the idea that I could restrict the private CA to issuing only names within a chosen subdomain. I
14.
by ab 11y ago
It's interesting how Comcast's track record in complying with regulatory requirements from past deals may be a major factor here. I wonder if they would have been able to muscle this through had they been just a little bit less aw
15.
by ab 11y ago
Pretty interesting stuff. I do wonder how much internal collaboration there is on topics like HTML5 video & WebM. The benefits of owning end-to-end both browser and server for driving media codec development seem enormous. It makes Goog
16.
by ab 12y ago
Stripe checkout does use an iframe from checkout.stripe.com for the payment form.
17.
by ab 12y ago
I'd love to hear theories for what might have installed it. If anyone still has that certificate, it would be helpful to export it and email it to support@stripe.com. We've worked around the issue for now by not using EV certifica
18.
by ab 12y ago
If this is anything like the issues we've seen at Stripe, the problem is probably an obsolete cross-signed root in your login keychain. It's caused by a certificate with CN="DigiCert High Assurance EV Root CA" but sign
19.
by ab 12y ago
+1 I'd love to see your notes. I found that when I was learning git there were two concepts that were crucial: understanding the staging area, and understanding the very basics of the DAG (not talking about tree objects, only spending
20.
by ab 12y ago
Honestly I can't imagine how we ever used HipChat. The Linux client is abysmal, and the IRC/Jabber integration is also terrible. Slack is really the best I've seen.
21.
by ab 13y ago
Not sure what the schedule looks like in general, but last night I waited ~10 minutes after the advisory watching the packages show up one by one. Still faster than any other source, of course.
22.
by ab 14y ago
We're working on it! :-)
23.
by ab 14y ago
There's an enormous difference between serializers that make any effort at all to be safe, and those like Ruby's YAML library, which make no effort. Python's YAML, for example, exposes a safe_load() method. It's really criminally negligen
24.
by ab 14y ago
While they're not great, chroots are much more powerful than most people give them credit for. The trouble comes when people think you can keep a root user contained in a chroot.
25.
by ab 14y ago
We're working on it. :-)
26.
by ab 14y ago
Along the same lines, are you doing anything special with munin to make it fast? We've had performance issues with the RRDs and graph generation that led us to pipe metrics to graphite with collectd.
27.
by ab 14y ago
Hilarious. I can't wait to see content relevant to my interests in my PD alerts.
28.
by ab 15y ago
It's pretty easy to run an instance for a few minutes while you rsync the whole thing wherever you want. We used AMIs mostly because we ran the CTF itself in AWS and didn't have a great place to store the images otherwise.
29.
Run your own CTF: Stripe publishes VM images(stripe.com)
106 points by ab 15y ago|11 comments
30.
by ab 15y ago
Not a bad idea, but how do you keep people from peeking at the passwords with root access on their own VM?

More ›