rietta

But what do you do with the signatures on the signed commits? It is of some, limited value, to GPG sign because it does provide a little bit more of "John Hancock" for a release, but how doe…

Mr. Camp has written about this topic before, see More Encryption Is Not the Solution (2013) https://queue.acm.org/detail.cfm?id=2508864 http://www.techrepublic.com/bl…

It's the cult of the API. I have personal experience with this. Because of the lack of reliable iCal sync, a project I worked on had to spend over a week and a half of developer hours implementin…

A bug that tricks the secure password management tool into revealing your Twitter password to a website that is not Twitter! That's a pretty major security vulnerability due to a bug in URL parsi…

Another case of how bad defendants make terrible caselaw. The court doesn't want to let the bad guy get away on a technicality and thus rulings like this happen.

Gosh. It's almost worth it to never resell anything. Just throw old electronics away even though that's bad for the environment and squanders value both for the owner of no longer needed gea…

For PGP encrypted, yup, it's not allowed. PGP plaintext signatures are presumably allowed as they do not obscuring the meaning of the communication. That was my thesis in 2004 and I believe it to…

I wrote an extensive piece on this as part of a presentation in 2004, called Authentication Without Encryption for Ham Radio - https://rietta.com/blog/2009/08/17/au…

Site without a paywall - http://www.ajc.com/news/business/home-depot-visa-and-masterc... …

Because usernames and passwords can be implemented without reliance on 3rd party infrastructure and they are culturally accepted and understood - however poorly - by everyone. We're still using 8…

Don't know why, but the CatChurn game jumped out at me as being written by Yahoo Software in 1982 (the year I was born). There does not seem to be a Wikipedia entry for this company, but the addr…

I dislike this change. I specifically only access Facebook on my phone via the web app because (1) it saves significant battery and (2) I absolutely do not want the popup bubbles during the work day f…

And one has to be mindful of that time you ran: export AWS_CREDENTIAL=xpXfLVsY/77Nr+m1mKmys719h0m2z2BCYSv9d5r That is then an increased risk of breach because it is kept around for a long time. Y…

NOOO! That's how I go back! And use the space bar to scroll up and down!

The oldest code that I wrote that I suspect is still in use is RoboGen, an editor for robots.txt files, that I wrote in Visual C++ 6 with MFC. I remember working on it while not paying enough attentio…

That's what I am thinking while looking at my seemingly cramped kitchen with by comparison massive 24 inch deep countertops with only 4 outlets (5 if you count the one hidden behind the refrigera…

Just having extra outlets though would not help with that much if more than 1 or 2 appliances were drawing that much load and did not have their own breaker. The standard 15-20 amp breaker powering al…

An outlet every 18 inches seems like a lot! A standard double sink is about 32 inches wide. What on earth is the motivation?

Please tell us more about this Merb workaround! Was it merged into Rails or did it fall away?

It would be a pipe dream, but at the conclusion of the gag period there should additionally be a disclosure requirement - like a data breach notification. That would help balance out the desire to kee…

It would seem that no US person could package or distribute such open source crypto without becoming a covered entity.

This is not just govt access. For a judge to be able to order your computer unlocked, means people at Microsoft, at Lenovo (or whoever you use), and at your ISP all have the keys to unlock your data e…

Not profitable in this contex probably means they do not have the cash flow nor the means to pay a higher wage. The options are 1) increase revenue, which may not be easy or possible in a given market…

Seperates those who remember their math from those who don't! Brilliant. I love the Gauss equation for this (had to look it up, I need to review math more).

Just be ready for copy+paste from Stockoverflow.

Which is why large cash transactions are heavily regulated and reported on. In the US, one cannot just withdraw $10k or a series of smaller transactions that add up to $10k or more without the bank re…