rietta

The argument has been around for a long time. The first crypto wars had their policy papers and summary pros/cons such as https://www.cs.cornell.edu/html/cs513-sp98/hw.p…

While you raise a point, I am not sure that the law in a heavy regulation environment will be that specific. For example, in the area of ham radio encryption is strictly forbidden and has been for yea…

Yes, I am not in favor of Federal regulation here, but that is somewhat off topic. Even still, I wanted to purposely point out information to those on HN who might not be familiar with the complexitie…

Yeah, that's not going to work. Just like Mr. Levison giving the FBI the key printed in tiny font did not fly from the court's point of view. Lavabit found in contempt for trolling the FBI w…

I'm not so sure about that as the language of the bill states: "(d) (1) ...that is not capable of being decrypted and unlocked by its manufacturer or its operating system provider shall not …

While fiatmoney may have been able to state the correlation better, there are parallels between the regulation of encryption and the regulation of firearms. And this goes beyond just that encryption i…

No kidding. Even something as simple as keeping track of what one can do as you drive across country requires an app, or at least http://www.handgunlaw.us/ . This is with a state issue…

Oh! I loved that game as a teenager. Actually, the first one even more so.

Nice! Maybe I am missing something, but I am not seeing a way to dig into a given database's structure without cumbersomely querying the pg_catalog. Noticeably absent are \dt and such vs running…

They probably brute forced his password given a copy of the private key file and didn't want to disclose that method.

While Jason Scott raises interesting points six years ago, the principles of data management remain the same as the days of dedicated servers with on premises systems. If you have only one copy of dat…

It would seem that more projects would benefit from running their own free software on their own virtual server infrastructure. A decade ago, there was GNU Mailman and it's still around - http:&…

That is a valid objection. It's best to use the right tool to communicate about the problem and solution.

I would say, yes. Some programmers have trouble reasoning abstractly or think it somehow beneath themselves because it does not produce something real at the end. There are also "programmers"…

Reminds me of competing in the ACM Intercollegiate Programming Competitions. With 3 students and one computer, you had to solve the problems offline and only spend keyboard time for entering and runni…

"We're still on for dinner on Thursday, right?" Some things are better said in person...

On a happier note, I still wear my Danger Developer Day t-shirt from 2007. That was my first visit to the Bay Area.

Wow, so asking for a PGP key or asking if they have TextSecure on their phone must be REALLY bad!

That transition was a real mess. We had some games in the T-Mobile Sidekick store and getting paid the royalties by Microsoft was way more difficult than it should have been after the transition. It t…

I got the same.

I've been a freelancer and now an agency owner for years now; in fact my entire career. I will gladly check into the Hangout if I can while in route to the Atlanta Ruby Users' Group meetup.

Well, at least he is being more straight forward than Comey was. He's laying it out there that in his opinion it's key escrow or else! Of encrypted device users, just how many have not opted…

It's a form of 'document storage' that allows a application to store data without the need to account for everything in the database schema.

That can be the goal. In my last experiment with this short of going to pure fixed bid, we had a client running an Excel spreadsheets to figure out exactly what they were paying for hour, for each dev…

I have a 15 inch MBP, but work docked most of the time with a Thunderbolt display and a second external monitor run vertically. It works well. The newer models are very portable. You should not go wro…

I would actively insist not storing PII in plain text unless there was absolutely no way around it. And it may involve changing the business model to enforce that certain data is not needed to be acti…

Yeah, I definitely would not do that to a 3rd party system without a specific letter of engagement for penetration test or security review. Now, that being said, it's the first thing I would tell…

A data retention policy can state that you delete all non-operational data after 60 or 90 days. Or that it is moved to one-way encrypted storage for up to a year. In other words, it can be a security …