Show more

And thus begins my month long vacation. Not bringing either laptops with me. If it breaks my team will have to fix it without me, though I left ample documentation behind. Since I’m pretty sure my AD password expires during my vacation I went ahead and changed it to kick that can down the bad password policy road another 90d.

Looking forward to just chilling for a month. Practicing my violin again. Tacos.

@kyle wish I’d been able to stay at SCALE long enough to see it live. Good stuff.

In honor of here's my favorite talk I've given on password policy: Sex, Secret and God: A Brief History of Bad Passwords in a 10-minute Ignite-style talk: opensource.com/article/18/5/br and the full-length talk I gave at BSidesLV 2017: infocondb.org/con/security-bsi

Our PCR tests were nowhere near as bad as I’d be told they would be. Certainly no more painful than spraying a carbonated beverage out one’s nose.

@fribbledom I just bring a mechanical keyboard everywhere I go. Everything else is trash anyway, and it doubles as a defensive tool since I can use it as a shield 🤷🏻‍♂️😂

Well, not with these libraries anyway. Can do it in Linux, but not windows.

Show thread

Last week I figured out how to use the Nitrokey HSM2 for some critical tasks in my team from my Qubes system, and this week I figured out how to accomplish the same from my corporate laptop using PowerShell and git bash.

Today, I will try to hammer out some to remove the dependency on git bash.

Apologies to everyone being rained on in The Netherlands today. I left the house without an umbrella or rain jacket. This is clearly my fault.

Question for the system programming folks: I have a program that needs to subprocess some tasks to OS built-ins, and would like to have tests validating they work. So far I’ve only managed to take the function in question out and run it stand-alone in a ephemeral VM. Not the most easily automated task unfortunately. I’ve considered perhaps a test harness leveraging a tempdir and chroot, but I’m not sure how sane (or insane) that approach might be. Any suggestions on how to proceed?

2/2 - As a brown man from a state with legendary levels of racist hypocrisy, I understand the response and reaction of the other man. The attendant however appeared to be upholding the standards posted in several languages. In any event, I offered an apology of my own for creating a situation where even the appearance of racial discrimination was possible. This was met with a threat of violence so I broke contact. Battle drill 3 saves the day again, >13 years after my last day of combat...

Show thread

Just had an interesting experience as one of two individuals exhibiting similar behavior in a public space. I was not corrected - my lack of a face covering was for the ongoing act of drinking water. Another man was approached by the station attendant and told to put a mask on while recording some kind of media on his phone. His response was to loudly insist the same standard be applied to everyone, the implication being racism was why he was asked and I was not. 1/2

@kyle good thing I know how to make my own yarn and knit my own fabric I guess.

Any @purism Librem 14 owners have a USB-C dock recommendation?

Today, I setup a local version of A Rust Site Engine for my significant other. This uncovered a few bugs in the Windows binary, which were addressed in 0.7.1. Then, while setting her machine up so she could make local edits and have them Just Appear live on the site I made another release, 0.8.0, which removed the Credentials struct entirely. My roadmap has been updated accordingly, and I will focus on performance rather than making an admin portal for a minimal site generator.

Tune in to our new episode! @katherined and @dsearls chat with @kyle and Shawn Powers about Signal’s exposure of vulnerabilities in Cellebrite’s mobile device hacking software.
Click the following link for full episode - reality2cast.com/68

#Signal #Cellebrite #cellphone #encryption #technology #podcast #newEpisode

"All that's left...." for A Rust Site Engine on its path to 1.0 is complete documentation, and the admin portal. Just added user-defined bind address/port to the configuration, and spruced up the README, marking another release: 0.7.0

Since I'm taking a long vacation in May, expect me to also start serving more than just my tiny demo site. In fact, with a 10hr flight starting my vacation I might just build a few of them in the air and deploy when I land.

crates.io/crates/arse

@kyle one of the discussions I had with my team today was in fact the importance of documentation. It's now a performance target for the year for everyone on my team.

That said, my process for documentation occurs while I'm writing whatever I'm writing. This is, for me, mostly due to the fact I often question my abilities in even languages I use daily. Documenting what I am trying to do helps me accomplish the goal, and avoid perpetual feature creep.

Show more
Librem Social

Librem Social is an opt-in public network. Messages are shared under Creative Commons BY-SA 4.0 license terms. Policy.

Stay safe. Please abide by our code of conduct.

(Source code)

image/svg+xml Librem Chat image/svg+xml