back
user profile
rietta
2,550karma·712submissions·October 29, 2012
about
Building and breaking applications for 26+ years. MS in Cyber Security (formerly InfoSec, GaTech). Focused on practical security controls to prevent breaches. Lifetime OWASP.
Website: https://rietta.com/ Blog: https://rietta.com/blog/
[ my public key: https://keybase.io/rietta; my proof: https://keybase.io/rietta/sigs/uk2sEk4_TfZeNJ8ZwJN7VF1Ub-aLW_l8clAq-EbQ578 ]
recent activity (712 total)
comment
It's definitely not just Uber. And drivers' license numbers are serious PII! It was my exact example that I gave to my last appsec talk for Ruby developers this month in Nashville. Starting …
comment
Probably so and also an indication of a probably lack of defense in depth and failure of access control. It will be another example to add to my Litany of Data Breaches the next time I speak with de…
comment
I type on a mechanical, though non-ergonomic keyboard, and like it quite a lot. Specifically a DAS Keyboard Ultimate with Cherry Blue switches. I added o-rings to quiet the report of the click a bit. …
comment
I went through the M.S. Information Security program at Georgia Tech and and glad that I did it. Though at this point in my life I work mostly on building out web applications with Ruby on Rails for s…
comment
It's amazing how hard it can be to remember a password that one has not typed in a long time, and has been subjected to solitary confinement. "Grassian and Haney show that a cluster of diffe…
comment
That gets into key disclosure law and it does vary by jurisdiction. Though I am not a lawyer, it is my understanding that this is an area of dispute in the United States with respect to the 5th amend…
comment
There is an argument against using the fingerprint access and that is that a user gives up the right of consent while in custody. If law enforcement gets a judicial order to forcibly press the prisone…
comment
This is very welcome news from my point of view as a developer and security consultant, enough that I blogged about it first thing this morning at http://rietta.com/blog/2014/…
comment
And the Bay Area has a really good social dancing community - Swing, Salsa, etc. I am in Atlanta, which also has a good dance community.
comment
Wow, that's one billion more pages than there are stars in our Milky Way galaxy. That's a lot!
comment
I copy and paste URLS on a daily basis. What's not clear from the article is if that is going away or not. Is that what the 'button that most people will not notice' is? As for securit…
comment
I do not know about that. In a lot of environments deployments on the weekend are common, even in full devops/automatic deploy situations.
comment
Wow! Bookmarking that one. What a great cautionary tale both for developers and devops. I may well need to use that as a teaching aide. Though a security principle, I cannot tell you how many times I…
comment
On second reading, you are right! I did misread that. Sorry, piratebroadcast for reading into your statement something that you did not do.
comment
While you may be fine in this case, be careful with that sort of action. When in dispute with a client, even a deadbeat, you have to be really careful what actions you take. Their failure to pay may …
comment
Try to move up market if you can. That sort of really low behavior seems to go away as the budgets increase on projects. There are other challenges of course that come with bigger deals.
comment
The gray area for that is sharing a business phone number of your friend that they share widely through business cards or their website. Though typically it ends up being an email introduction if you…
comment
I am a software developer who works with startups who goes to church. So by a loose definition of 'know' in that we both have posted on HN, that increases the count by at least one.
comment
Thanks for sharing the link! The etymology is fascinating.
comment
That would not bother me. Its the word being used for a decidedly non-religious context that seems to trivialize the word. A programming language or system is a tool and is likely to be supplanted in…
comment
It is a term that fundamentally bothers me in terms of technology. In my mind, evangelism is about spreading the good news of God, especially related to preaching of the Christian Gospel. I understa…
comment
What language was your class using? There are so many ways to do what the students wanted to do, be it the tertiary function or a lambda function or even, defining a method/function like (Ruby)…
comment
Happy birthday, Arpit! 24 is a great year.
comment
Nice! I have not made the jump to ergonomic though I do have both a Unicomp Model M and a DAS Keyboard (Cherry Blue) that are my prefered. Though neither keyboard is ergonomic, its use is because it a…
comment
This strikes me as an interesting read. I live in an Atlanta suburb. The closest shopping center is more than half a mile away and the one I go to most, and where I go to check my company's mail,…
comment
You have followed it longer than I have then. My gut reaction is more to the universal nature of your claim that I quoted. It is a goal to have practical large systems that need no locks. Current ope…
comment
"...No, no, no. If you are writing multithreaded programs, you _will_ have locks, period. The question is whether you explicitly use them or if they are hidden somewhere in your libraries, framew…
comment
SEEKING WORK - Remote - U.S.-based team available for pre-project sprint planning for development starting mid January. Backend Ruby on Rails with strong emphasis on database and optimization. http:&…
comment
Thanks for the link! I am taking Andrew Ng's Coursera class now - homework due today. I am finding it to be a good introductory class. I think probably equivalent to an introductory undergraduat…
comment
That has been my impression too. Dark matter developers are people who work in software development in the employ of a company. Their employer may - and usually does - have a blog and a twitter and m…