back
user profile

rietta

2,550karma·712submissions·October 29, 2012
about
Building and breaking applications for 26+ years. MS in Cyber Security (formerly InfoSec, GaTech). Focused on practical security controls to prevent breaches. Lifetime OWASP.

Website: https://rietta.com/ Blog: https://rietta.com/blog/

[ my public key: https://keybase.io/rietta; my proof: https://keybase.io/rietta/sigs/uk2sEk4_TfZeNJ8ZwJN7VF1Ub-aLW_l8clAq-EbQ578 ]

recent activity (712 total)
comment
It's definitely not just Uber. And drivers' license numbers are serious PII! It was my exact example that I gave to my last appsec talk for Ruby developers this month in Nashville. Starting …
11y ago·view thread
comment
Probably so and also an indication of a probably lack of defense in depth and failure of access control. It will be another example to add to my Litany of Data Breaches the next time I speak with de…
11y ago·view thread
comment
I type on a mechanical, though non-ergonomic keyboard, and like it quite a lot. Specifically a DAS Keyboard Ultimate with Cherry Blue switches. I added o-rings to quiet the report of the click a bit. …
11y ago·view thread
comment
I went through the M.S. Information Security program at Georgia Tech and and glad that I did it. Though at this point in my life I work mostly on building out web applications with Ruby on Rails for s…
11y ago·view thread
comment
It's amazing how hard it can be to remember a password that one has not typed in a long time, and has been subjected to solitary confinement. "Grassian and Haney show that a cluster of diffe…
12y ago·view thread
comment
That gets into key disclosure law and it does vary by jurisdiction. Though I am not a lawyer, it is my understanding that this is an area of dispute in the United States with respect to the 5th amend…
12y ago·view thread
comment
There is an argument against using the fingerprint access and that is that a user gives up the right of consent while in custody. If law enforcement gets a judicial order to forcibly press the prisone…
12y ago·view thread
comment
This is very welcome news from my point of view as a developer and security consultant, enough that I blogged about it first thing this morning at http://rietta.com/blog/2014/…
12y ago·view thread
comment
And the Bay Area has a really good social dancing community - Swing, Salsa, etc. I am in Atlanta, which also has a good dance community.
12y ago·view thread
comment
Wow, that's one billion more pages than there are stars in our Milky Way galaxy. That's a lot!
12y ago·view thread
comment
I copy and paste URLS on a daily basis. What's not clear from the article is if that is going away or not. Is that what the 'button that most people will not notice' is? As for securit…
12y ago·view thread
comment
I do not know about that. In a lot of environments deployments on the weekend are common, even in full devops/automatic deploy situations.
12y ago·view thread
comment
Wow! Bookmarking that one. What a great cautionary tale both for developers and devops. I may well need to use that as a teaching aide. Though a security principle, I cannot tell you how many times I…
12y ago·view thread
comment
On second reading, you are right! I did misread that. Sorry, piratebroadcast for reading into your statement something that you did not do.
12y ago·view thread
comment
While you may be fine in this case, be careful with that sort of action. When in dispute with a client, even a deadbeat, you have to be really careful what actions you take. Their failure to pay may …
12y ago·view thread
comment
Try to move up market if you can. That sort of really low behavior seems to go away as the budgets increase on projects. There are other challenges of course that come with bigger deals.
12y ago·view thread
comment
The gray area for that is sharing a business phone number of your friend that they share widely through business cards or their website. Though typically it ends up being an email introduction if you…
12y ago·view thread
comment
I am a software developer who works with startups who goes to church. So by a loose definition of 'know' in that we both have posted on HN, that increases the count by at least one.
12y ago·view thread
comment
Thanks for sharing the link! The etymology is fascinating.
12y ago·view thread
comment
That would not bother me. Its the word being used for a decidedly non-religious context that seems to trivialize the word. A programming language or system is a tool and is likely to be supplanted in…
12y ago·view thread
comment
It is a term that fundamentally bothers me in terms of technology. In my mind, evangelism is about spreading the good news of God, especially related to preaching of the Christian Gospel. I understa…
12y ago·view thread
comment
What language was your class using? There are so many ways to do what the students wanted to do, be it the tertiary function or a lambda function or even, defining a method/function like (Ruby)…
12y ago·view thread
comment
Happy birthday, Arpit! 24 is a great year.
12y ago·view thread
comment
Nice! I have not made the jump to ergonomic though I do have both a Unicomp Model M and a DAS Keyboard (Cherry Blue) that are my prefered. Though neither keyboard is ergonomic, its use is because it a…
12y ago·view thread
comment
This strikes me as an interesting read. I live in an Atlanta suburb. The closest shopping center is more than half a mile away and the one I go to most, and where I go to check my company's mail,…
12y ago·view thread
comment
You have followed it longer than I have then. My gut reaction is more to the universal nature of your claim that I quoted. It is a goal to have practical large systems that need no locks. Current ope…
12y ago·view thread
comment
"...No, no, no. If you are writing multithreaded programs, you _will_ have locks, period. The question is whether you explicitly use them or if they are hidden somewhere in your libraries, framew…
12y ago·view thread
comment
SEEKING WORK - Remote - U.S.-based team available for pre-project sprint planning for development starting mid January. Backend Ruby on Rails with strong emphasis on database and optimization. http:&…
12y ago·view thread
comment
Thanks for the link! I am taking Andrew Ng's Coursera class now - homework due today. I am finding it to be a good introductory class. I think probably equivalent to an introductory undergraduat…
12y ago·view thread
comment
That has been my impression too. Dark matter developers are people who work in software development in the employ of a company. Their employer may - and usually does - have a blog and a twitter and m…
12y ago·view thread