jvehent

Ping me on signal when you get a chance!

that was very much one of the lesson learned

Yeah. Sorry about that...

We didn't think that the intermediate CA expiring would break the signatures, because code signing generally doesn't care about expiration, but we never tested the code path until the intermediate expired and the signatures broke. That was a hard lesson to learn...

Hey Ben!

(I made and used to maintain Autograph at Mozilla)

Don't called your project *Zilla. The copyright owners of Godzilla are known to go after everyone who tries to use the "Zilla" suffix. Mozilla learned its lesson long ago and had to negotiate a special agreement.

The most compelling reason to use Firefox Sync is that it is client-side encrypted. Mozilla stores opaque encrypted blobs that it is entirely unable to decrypt.

Law enforcement agencies request that data from time to time, hoping to obtain browsing history, only to be turned down thanks to the encryption.

(disclaimer: former Mozilla security)

Mastodon's infosec.exchange is doing genuinely well. It's not the infosec Twitter of the olden days, but it's the most promising replacement we've got.

Sops original author here. I haven't contributed to the project in a few years, but it's really cool to see that it continued to grow and gain traction outside of Mozilla. Thanks folks!

Wait until this happens to your car...

that's why archive.org exists

Which any programming language can handle easily. The architecture here is more interesting than the language choice.

So governments already have all the potassium nitrate, Palantir is just helping them make bullets?

Sops creator and co-maintainer here. We love Sops. We love Vault. We use both of them at Mozilla in various places. Beyond the "tool war", which is silly, what really matters is using tools that integrate well with your workflow, provide real value and strong security.

Mozilla did this a couple years ago. https://medium.com/firefox-test-pilot/test-pilot-no-more-404...

I hate gigantic URLs, but not as much as I hate extensions that want to access my data for all websites.

> 76-97 minutes read

indeed...

IANAL, and I wouldn't try explaining that to a prosecutor or a federal judge...

"Math Basics"

It's 2000 pages long....

Firefox Reality is a version of Firefox targeted at VR headsets. You can install it from the store of the Oculus Quest (the headset I own, I imagine others are supported). It's not meant to run on a regular workstation.

The interesting feature of this browser is navigating VR ready websites that provide an immersive experience (aka. webvr). You can also browse the regular web from your headsets, of course, but that's not particularly exciting.

This is accurate. I would add that, in my experience, the value-add of working with a technical editor to shape the book and stay on track is definitely worth the cost of an editor.

And then there are typesetters, copywriters, graphists, reviewers, marketers and distribution platforms that do a lot of the work of making a book successful. Sure, writing is critical, but bringing a high quality book to readers requires a lot of work that you have to do yourself when self-publishing.

They have Visual Studio Code.

Advertise yourself as an infrastructure architect and aim for jobs that value your many years of experience.

Learning kubernetes is good, but it doesn't replace understand the many ways a database migration is going to fail.

They are just tools. People will come up with better ones every other year, and we'll abandon the old stuff. That's ok, components should be replaceable without having to reinvent the whole thing.

> I always try to explain to my clients that web security is a complex field and they should hire a pro for that area...

No. Just no.

Every other field of engineering includes security and safety as a core requirement of anything they do. Software engineering is no different, and while specialists can help, every engineer needs to know how to write secure code if we are to improve the sad situation the Internet is in.

Sell yourself as a software engineer who knows security, and watch the money rain as literally everyone tries to hire you.

would you have purchased it?

$8/month is the yearly price. Monthly is also $10/month.

Because bundling Tor in Firefox would generate so much traffic it would take down the network. Tor needs to grow significantly before that integration is possible.

Open Source crypto is no worse than closed source crypto. This is fantastic news and a strong validation of the open source development model for security systems.

;)

Or use the docker container directly: $ docker pull mozilla/send

https://github.com/mozilla/send/blob/master/docs/docker.md

There is only a finite number of people willing/able to spend $60k on a recreational vehicle.