bgidley

7 ms·

1.
by bgidley 2y ago
Agile peaked with Extreme Programming and paper story cards, since then all that seems to have happened is the adoption of more tools/process that missed the whole point of it. The most productive project I ever worked on followed that
2.
by bgidley 2y ago
The most bizarre App Store rejection I’ve seen was for a TV app which was rejected by Play for ‘Policy Violation’ without much explanation… After several rounds of resubmissions and emails it turned out the problem was some channels on it w
3.
by bgidley 2y ago
Try using Cloudflare R2 with zero egress and you'll rapidly discover there are lots of 'gotchas'... - Want to use a cloudflare managed domain - pay for egress if you have enterprise account - Want to use their 'dev'
4.
by bgidley 3y ago
Page is struggling - https://archive.is/yn6rk
5.
by bgidley 3y ago
It may not be legal depending on how it’s done - this was Asus UK and the rules are on https://www.gov.uk/government/publications/online-reviews-an... The UK Government are also in processing tightening this up…
6.
by bgidley 4y ago
The question is how did you do training. If in the process you 'copied' the image (e.g. from network to memory) you did require copyright. Reading with a human is not copying, but reading by machine is - there are several cases wh
7.
by bgidley 4y ago
It's been pretty clear from all the guidence (e.g https://ico.org.uk/for-organisations/guide-to-data-protectio... ) issued around GDPR 'forced consent' would not work - Facebook decided to try and push th
8.
by bgidley 4y ago
The law has passed - but it also has exemptions for security.... So we can expect a lot of negotiating between the EU & Apple/Google on what they actually have to do.
9.
by bgidley 5y ago
If you want to keep the google accounts working for things that free (photos, YouTube etc) you can switch first to the business essentials plan and then to the cloud identity plan. Then you can move the email elsewhere but the google accoun
10.
by bgidley 5y ago
My favourite oracle issue was an older version would not install on Linux if you had number lock key on!
11.
by bgidley 10y ago
It can prevent MITM IF it's loaded in client page (defining MITM as network interception). It can't stop keyloggers, people looking over your shoulder, malware in the browser (MITB)/plugins as it still sits within the browser
12.
by bgidley 10y ago
We did think of that :) - we can detect your tampering with the forms we protect. But that said it doesn't stop everything if you can install a keylogger, or get the user to enter data somewhere else we can't stop it and it does d
13.
by bgidley 10y ago
You can prevent MITM from the browser - you 'simply' use Whitebox Crypto to create a secured channel - (shameless plug Irdeto who I work for sell this as solution https://irdeto.com/payments-and-banking/cloake
14.
by bgidley 10y ago
I agree - but as you say OAuth also suffers from MITM weaknesses. I'm just not convinced 'plain' client certs solve that as it's very hard to distribute those securely and manage them. I guess it depends where you see th
15.
by bgidley 10y ago
Even dev's can't cope. Most apps leak credentials severely. You need integratity verification, obfuscation and whitebox crypto to do this sort of thing securely. All of that is available in the banking world and is often deployed
16.
by bgidley 10y ago
This is unlikely to work - developers in general can't cope with managing SSL certificates. They won't know what to do with them or handle them securely. You need full integrity verification, with a secure store and whitebox crypt
17.
Software Security for JavaScript(irdeto.com)
1 points by bgidley 11y ago|0 comments