dochtman

I suppose he's really keen on a Fish in a Barrel bounty... https://github.com/fishinabarrel/bounty …

That would be way too easy to game.

Given that it's from 2017, I'm guessing today's results might be quite different.

Azure only supported RSA keys last time I checked.

One of these days I'll write documentation for the toolkit I've been working on, which has a nice solution that satisfies this criterion.

Except Google, Microsoft, Apple, Amazon, Facebook, Mozilla, Dropbox, npm, Discord and a whole bunch of other companies.

I took Aiken's Stanford Compilers course on Coursera and wrote about it: https://dirkjan.ochtman.nl/writing/2012/07/21/compilers-on-c... …

I do wonder if physical hardware keys still make sense (at least under a threat model where my hardware is almost always in my home or, if not, under my control) if every device I use has a secure enc…

There was disappointingly little on the code review UX, or making the (Android, in my case) apps better.

Will the fully-fledged email service also be open source? (This is the first time I've become aware of Forward Email despite having run my own forwarding email server for years -- you should do m…

Stream is a struct (a type with named fields). It has three parameters, the lifetime s, the type S and the type A. S must satisfy the Seed trait, and A must satisfy the Copy trait. Stream has two fiel…

Didn't take it myself and still quite hands-on, but Execute Program seems a cool way to learn new things: https://www.executeprogram.com/ Also, Dan Boneh had a YouTube thing up a…

I guess you didn't actually watch the video? https://youtu.be/3018ABlET1Y?t=502

I'd be very curious to hear if there are specific bits about the Rust language that you think make it harder to audit or that (so far) it's just the lack of experience.

What I perceived as grumbling: "I absolutely understand what y’all like so much about Rust, but I have to say that as an auditor, my blood pressure drops and my shoulders relax the moment I switc…

Exciting! Are you doing this in your role as Latacora helping out startups with security challenges? (Update: apparently not https://twitter.com/tqbf/status/12762121635820707…

Some quotes from the report's conclusions: "the team of auditors considered the general code quality really good and can attest to a solid impression left consistently by all scope items.&qu…

The metric used by Stack Overflow is "% of developers who are developing with the language or technology and have expressed interest in continuing to develop with it", so it seems likely to …

Software Update isn't showing me 10.15.5 yet. Others? On my 2019 16" I've definitely noticed that Zoom calls slow stuff down by a lot. Would be great if that gets fixed here.