406 karma · joined February 23, 2024
It's the companies that pile on to a stack because it's "easy to hire for". If everyone optimizes for hiring we end up with a local maximum, React. We can't do better because no one else is doing better.
1. Caused by pure ignorance and completely avoidable (this bug).
2. Caused by subtle configurations, workflows, programming (mostly avoidable, secret scanning, security linters, code reviews, general intelligence, etc). This is where 99% of security bugs are.
3. Caused by a malicious actor aligning planets with a single intent to maximize their cause. You'll never stop these people (three letter agencies, state actors).
edit:
A must watch talk https://vimeo.com/95066828
Finding random email addresses and sending them a notice would have gone no where other than spam folders. I get dozens of "disclosures" every week from mostly script kiddies that think my DKIM setting is somehow going to be the end of my business. My brain automatically ignores emails like it.
So... not perfect, but it works.
;)
I starting writing code in C again, because I really enjoy the simplicity. I wanted to use some nice-isms in C++ (function overloading, some encapsulation with struct) so I wrote C code, but leveraged the C++ compiler with a few features enabled by C++.
1) C++ programmers hate my code because I don't use the stl, containers, etc.
2) C++ programmers hate my code because I don't use referencing counting, "safe" pointers. Instead I raw dog it and wrote my own memory arenas (I alloc memory once at program start and free at the end).
3) C programmers hate my code because it leverages some C++-isms when it's convenient.
4) Rust programmers hide in fear and regard everything I do as unsafe, dangerous and borders on undefined behavior (they are like helicopter moms).
When you `ls` $HOME or open a Finder it's a lot nicer when things match (Documents, Videos, etc). It's weird to see that one random folder (src).
I know typing a dot is annoying, hence the Bash alias.
~/.src/my # my stuff
~/.src/oss # things I've downloaded, built from source, etc.
I have a bash alias 'ws' that 'cd ~/.src' so most of my movement is like: 'cd my/gamedev/pong' or 'cd oss/helix', etc.
1. todo.md
2. scratchpad.md
I put my tasks for each project in the todo file separated by headings. I put random notes in the scratchpad file as they pop (ex, need to update x dependency in project y, etc). I then organize my scratchpad and create new todo items if needed at the end of the day.
I ran around smacking cows and chickens and PK-ing some people.
When you submit the contact us form I receive a message via Matrix on Element. I also receive an email and the submission is recorded in postgres.
Depending on the request details, I may reach out to you immediately or put you on my task list for 24-48 hours to handle.
I don't sell or do anything with the data. I'm the only person that sees it.
For the vast majority of people (ie, 99%) there's no difference between the major browsers and the overall security they provide.
For that 1% the difference may be noticeable but pale in comparison to other things like solid opsec, etc. For instance, it doesn't matter what browser you use if you are using SMS 2FA and get hit with a sim-swap because you're bragging on Twitter about how your Coinbase account is sitting at $2MM.
On the other hand, if you're international arms dealer your browser choice probably matters a lot more. Though, the three letter agencies already have your poster on their wall and you were pwned a year prior anyway. Even worse, if you're outside the US the drones have already been deployed.
The US isn't beyond blowing up hackers, look at Junaid Hussain[1].