oracuk

41 with two kids, all that time spent working should have been spent experiencing the world and having a lot more fun.

I think a combination of getting more senior at work and having kids reduces your choices in how you can spend your time (To be fair it opens up new options as well). It highlights the value of your time and how little you got in return for it when it was abundant.

Publish your exploits to github before you send them overseas or travel to the conference to announce them.

A word document describing the specification for an export controlled technology is as prohibited from export as the implementation.

Having the word document on a laptop you take to another country is as much a breach of the law as shipping a centrifuge.

http://en.wikipedia.org/wiki/Police-enforced_ANPR_in_the_UK

Apparently they signed up Huawei with a contract where they warranted there were no backdoors in the hardware. Guarantees nothing of course but props for the chutzpah to demand such an outrageous clause in the contract.

Also Qwant (https://www.qwant.com/) who also have a strong privacy focus for a search engine, privacy policy and settings here (https://m.qwant.com/privacy).

"Without exception, all of the allegations included within the September Dossier have been since proven to be false, as shown by the Iraq Survey Group."

http://en.wikipedia.org/wiki/September_Dossier

Prime Ministers Apology: http://www.theguardian.com/world/2009/sep/11/pm-apology-to-a...

Royal Pardon: http://www.telegraph.co.uk/history/world-war-two/10536246/Al...

However, my point was that even given the age of the OWASP Top 10 and its incredible brand recognition among developers globally, the IBM bulk application scans are still finding (At least some of) these issues.

Interesting point about taxonomies of security flaws, similarly taxonomies of security attacks are also hard (Wicked maybe). This may be due to the difficulty of fully defining the world of unexpected or unwanted application behaviour. There is something complex about the space of possible attacks (or flaws) that resists classification at anything other than at such a level of foundational definition to be practically useless in the real world.

The OWASP top 10 is old news but there is still work to be done.

http://www.amazon.co.uk/How-Will-Measure-Your-Life/dp/006220...

My experience of working alongside or for regulators is that they overwhelmingly do not want to write new law unless they absolutely have to. Law is hard to write, hard to schedule and politically difficult to agree.

Generally regulators prefer industry associations or similar creating 'best practices' that the regulators can then rely on for evidence of recklessness or negligence compared to peers in the industry.

This can lead to established players in a market controlling the regulatory framework for innovation but this is solved through either new players engaging with the industry associations or a truly valuable innovative approach forcing legislators hands.

By not engaging with regulators and industry associations to address best practices the only route left is to be valuable and disruptive enough to require new law which is resisted by all those involved until the last moment possible.

It is always worth remembering that no matter how good your relationship with the regulator is their goals are not yours, they would like you as an industry to be successful but they exist to protect society as a whole and when placed in a position between your success and the perception of harm to society they will enforce regulations strongly.

They perform slightly different functions and rely on a higher level of trust than an open mailing list can deliver but the security community is not uniformly awful.

Much of the (UK) law enforcement response to potential civil unrest is to try to prevent escalation, this would seem to be in line with that.

Also the tactics and techniques used are frankly not something any of the other bits of UK govt outside the MOD would understand or be able to deploy.

https://www.gov.uk/government/collections/end-user-devices-s...

They didn't single Ubuntu out of a crowd, they just only reviewed Ubuntu which is probably due to the brand name recognition in the government departments the advice was aimed at or possibly the experience of the team doing the review.

I have assumed that was what you were referring to and not a different statement?

I don't know of a good self-hosted combination for that.

No clear players in this market for consumers though. Where is the consumer remote desktop via browser+SSL that doesn't rely on a US hosted cloud service?

If there is limited time for learning and there is no space for programming then any changes should be discussed in light of the full current curriculum. The original post suggested that foreign languages should be dropped in favor of programming languages, there may be other subjects of the curriculum that could be dropped instead, especially if the yardstick of economic value is the measure to be used.

1: Computer programming competes with foreign languages in high schools and colleges.

2: The economic value of programming languages is greater than the economic value of foreign languages.

Your last sentence also suggests you are comparing apples and oranges, a grade of a foreign language that is dropped against achieving basic computer programming abilities. These are not the same level of achievement.

I think understanding computation is a key 21st century skill that we would do well to invest in but I think foreign languages also have value.

Overwhelmingly the core information management and processing is on the local IT infrastructure of each department. GDS is unifying the web presence and some of the citizen identity systems, its not fundamentally taking over the core information systems of state.

EDIT: To be clear, I think something like GDS should take a long hard look at the core information systems of state and start again with a clean slate breaking the technology and the data out of the policy silos.

Uk.gov is just the cherry on the top of an old and creaky enterprise design that hasn't kept pace with changes to its mission or the world around it.

I remain surprised there isn't anyone offering these as paid for MP3 downloads. Seems like the right audience for that.