noahkunin

6 ms·

1.
by noahkunin 10y ago
Gov employee here (18F). If the operative word is "sent" and "all" the likelihood is zero, as I can assert I've never sent a private key to NSA, and I've made quite a few over the past few years. That said, car
2.
by noahkunin 10y ago
OP here. I think about this every day. Ultimately, it comes down to how you construct the root origin of the problem facing government right now. For me personally (hence why this post is on Medium and not on a *.gov) is the lack of both fa
3.
by noahkunin 10y ago
OP here. Yep - the record keeping is out of this world. Due to the spending clauses of the Constitution, even a penny spent in excess of budget or even without all the proper authorities in place can result in a Constitutional violation,
4.
by noahkunin 10y ago
OP here. I totally grok your feeling on that, but we've adopted the opposite strategy from Day 1. Extreme transparency to the degree we're allowed, so the public can see the value of the work and defend it if necessary. At the mom
5.
by noahkunin 10y ago
OP here. "In theory" - most of the stories don't realize we're funded by a fund with billions in revenue, and was net positive in 2016. https://www.gsa.gov/portal/content/152462#ASF Congress de
6.
by noahkunin 10y ago
There's actual several mentions of NIST, ATOs, and FISMA, all of which implicitly cover FIPS by reference. #acronymheatdeath
7.
by noahkunin 10y ago
Hi Godel - I’m Noah Kunin, the Infrastructure Director at 18F/GSA. While the Department of Homeland Security (DHS) owns the Trusted Internet Connections (TIC) policy and controls ( https://www.dhs.gov/trusted-internet-co
8.
by noahkunin 11y ago
@bicknergseng - 18Fer here. The main issue here is how the Gov actually gets $ to that entity. There are lots of laws and rules that we need to obey about who we pay $ to - Gov doesn't have a ton of flexibility here. There was a reason
9.
by noahkunin 12y ago
18Fer here. Before I answer in greater detail, why do you think FIPS requires RHEL with mod_nss only? I don't see why an OpenSSL in FIPS mode wouldn't fit the bill too.
10.
EC2mapper: open source interface to view Amazon AWS network configurations(github.com)
1 points by noahkunin 14y ago|0 comments