464 karma · joined November 21, 2018
Product and Business Development Manager
Director of Operations
Product Design Manager
Engineering Manager
Staff Engineers (3)
Sr SW Engineers (2)
Sr Security Engineer
SW Engineer, Add-Ons Ecosystem
Sr UI/UX Developer
UI/UX Developers (2)
Android Project Lead
Android Developer (1)
Build & Release Engineers (2)
Full Stack Developer
Front End Developer
Community Manager
Marketing Manager
Bug Triager
Support Engineer
I've never seen "Bug Triager" listed as an advertised role. Isn't this a subset of what a product owner/manager typically does?- Shift left testing: quality can be implemented at all stages of the development process, from requirements gathering to deployment. Issues are easier and cheaper to fix the earlier they are discovered, and it does not necessarily take a software tester to discover these, although testers can advocate for a mindset of quality - Quality as a shared mindset/goal, not just one team's job: every team member seeks to quality control their bit of work, this inevitably involves developers doing a basic level of sanity testing on their code. When done right this should reduce the long feedback loop to discovering issues when a team completes a piece of work, hands it over to QA, then context switches over to another piece of work.
My other concern, which may be unfounded is that Vaultwarden [1], which is an unofficial Rust rewrite, may also be developed to different, or lesser security standards than the official client. However I don't have any real reasons to suspect this.
It's not the cheapest piece of software. However when viewed in comparison to the cost of a standalone mp3-player, I think Plex's $119.99 Lifetime Pass is justifiable.
[1] https://mobile.twitter.com/plexamp/status/158570440123829863...
https://podcasts.apple.com/podcast/twenty-thousand-hertz/id1...
Reading
Plants
Cars and motorsport
Photography
Cycling
Running
Swimming
Music productionThere are also web browser extensions that will redirect URLs to more privacy-friendly alternatives such as https://addons.mozilla.org/en-US/firefox/addon/privacy-redir...
1: Run on-device code to perform perceptual hash comparison of each photo against an on-device encrypted database of known CSAM hashes.
2: On iCloud Photos servers, send out the relevant notifications when a user’s iCloud Photos account exceeds a threshold of positive matches.
So as a high level testing strategy, I would want to:
- Verify on-device lookup of CSAM hashes. This could be tested by provisioning a test device with an on-device database containing CSAM hashes of images that aren't illegal. As a bystander, I think I'd be fairly confident with this approach because I'm guessing the on-device database that Apple ships could conceivably be changed over time to expand the definition of the images it will flag as CSAM.
- Do some exploratory testing to discover the threshold of how much image manipulation can be done on a flagged image before the perceptual hash comparison fails to return a match.
- Verify that the notification system notifies the correct parties once a user account exceeds the defined threshold of positive CSAM matches.
- Ensure the flagged account can still be investigated if user deletes the offending material from iCloud, or their account by the time a real person gets around to investigating.
- Ensure that the logging is informative and adequate (contains device name, timestamp, etc.).
- Test behaviour on same iCloud account logged in to multiple devices.
- Figure out any additional business logic - are positive matches a permanent count on the account or are they reset after a certain amount of time?
source: https://www.apple.com/child-safety/pdf/Security_Threat_Model...
[1] https://vpn.mozilla.org/ [2] https://www.engadget.com/mozilla-vpn-mac-linux-201939740.htm...