fhoxh

Liquid Mode. Adobe Acrobat Reader.

This represents a dramatic escalation of side-channel attack vectors and surface area. It’s an unfortunate inevitability that this will not end well. Secure platforms never provide affordances for backdoors, especially backdoors tightly coupled to externalities. Bitwarden is further attracting unnecessary attention to itself from actors who have an interest in the collection of the volunteered emergency-trust relationships. Bitwarden would be well-advised to reconsider this feature.

https://aws.amazon.com/blogs/aws/new-cloudformation-drift-de...

Fixed!

Hoboon,

I invite you to step out of yourself for just a moment. Position your perspective within someone else of your choosing; a co-worker, a manager, an interviewer. Read both the post from today and the one from several months back. Ignore the particular details of the narrative itself. Instead, see what you can pick up on, sense, about the _author_ of the narrative. Then, observe how, what you sensed about the author, makes you, the observer, feel.

Go ahead. I'll wait.

As the observer, did you pick up on desperation, despair, defeatism, confusion, and anguish?

How well do you think you'd be able to hide those mental states in person or even just on the phone?

I think we already know the answer to that question.

Being around a person that's experiencing acute non-positive states induces acute non-positive states in others. Considering that most people spend the vast majority of their time preoccupied with both moving towards feeling good and moving away from feeling bad, they would do everything in their power to avoid being around such a person.

It's not even about the words that would be coming out of your mouth. It's easily detectable before so much as a single word is uttered. Your posture, facial expressions, respiratory rate, inflection, intonation, etc., will tell anyone, everything, in an instant.

This is why the places that you have interviewed with have not hired you. It has nothing at all to do with your technical competencies, because your technical competencies were not, in fact, evaluated. They shut down, disqualified you virtually immediately based solely on "lack of cultural fit", went through the motions, and then fed you a generic line.

When people spoke about the "experience they want," I don't think you quite understood the subtlety. They were not referring to your technical background. They were speaking to what they wanted in terms of the experience of having a new hire at the office: a positive, uplifting, energizing experience.

As an aside:

* Trying and failing is good, not bad. Why? Because you're learning. Not trying at all is bad.

* No-one wanting to hire you doesn't mean what you think it means. No-one wanted to hire Steve Jobs.

* Similarly, just because the few companies that you've interviewed with didn't extend an after does not mean that you colossally effed anything up.

* You can't say that "no-one" wants to hire you. You've interviewed at only a tiniest fraction of potential employers.

You may or may not feel better knowing that the roadblock is your disposition, as opposed to your technical competencies, but at least you now know the truth.

The question is _why_ is this your disposition? The answer is quite obvious.

In your short post from today alone, I have counted a staggering thirty two occurrences of first-person pronouns. Here's what your post looks like with all of the other words removed:

I...I...I...my...I'm...I...

I...I...my...I...me...I...

my...I...I...I...I...my...

I...I...I...I...I'm...I...

I...me...I'm...I'm...I'm...

I...I'll...I.

It's no wonder at all that you are the way you currently are; you are stuck -- trapped -- instead your own head. Replaying and re-analyzing the past, over and over, worrying about and agonizing over the future, over and over. When other people are speaking to you, you're not really listening -- they don't have your full undivided attention -- you're off in your head doing something else. When you're eating, you're not tasting your food, you're too distracted talking to yourself. You are perpetually lost in thought. This is why you're struggling with trying to get good on your own and struggling with trying to do stuff on your own.

Your self-identity is far too strongly, unnaturally, and unhealthily, intertwined with things that it should not at all be intertwined with. You are not your career; You are not your skill at programming. Your value as a person is not measured by your career progression; your value as a person is not measured by your programming skill.

This is the point where you have a decision to make.

You take the blue pill, the story ends. You wake up in your bed and the bullet that you spoke of may very well, at some point, find you. Considering that you've already made suicidal statements, it may be sooner than later. Let's hope that you don't take the blue pill.

You take the red pill, you stay in wonderland, and you show yourself just how deep the rabbit hole goes. You enroll in an MBSR course in your area, or find a Mindfulness retreat, or listen to headspace.com, or find a good Mindfuless book. Mindfuless will allow you to dissolve those negative emotions, gain insight, not be stuck in your own head all of the time, attain full control of your internal state, and so much more.

Only then; and not before; will you have transformed your disposition such that you'll easily find a job that will progress your career, have successes doing your own stuff, and be able to do the best work of your life. None of these things will ever be possible if you're constantly experiencing negative emotions which are inducing pain, and distracted by negative thoughts that are constantly stealing your attention, as this will only serve to cause others to feel uncomfortable, unsafe, and/or ill at ease around you.

Seems like they were granted multiple deadline extensions to address this:

http://discussions.agilebits.com/discussion/comment/112937/#...

No worries! In my mind, there are only a few situations where I feel the 15" rmbp is particularly worth it (for developers):

1. If you're offsite far more than you're onsite.

2. If you need >8 GiB of RAM.

Of course, if you expect to do much gaming on your laptop, you may want a laptop with a dGPU. *8-)

In my experience, that can be comfortable on a part-time basis, but less so -- perhaps significantly less so -- on a full-time basis. I find myself overwhelmingly more productive with an external display. When I'm onsite, I typically use my rmbp lid-down with a 27" Apple Thunderbolt Display (2560x1440).

With version 2.0 of the card and GnuPG 2.0.18, 4096-bit RSA keys are supported:

https://wiki.debian.org/Smartcards/OpenPGP#Features

Many obesity researchers find Guyenet to be quite the joke.

For example, Peter over at HyperLipid recently ripped him to utter shreds:

http://high-fat-nutrition.blogspot.com/2012/06/confused.html

http://high-fat-nutrition.blogspot.com/2012/06/insulin-un-de...

Not to mention, Taubes countered Guyenet with a 6-part series refuting Guyenet's widely mocked food-reward/palatability hypothesis:

http://garytaubes.com/2011/09/catching-up-on-lost-time-ances...

The thing is, there's a lot of infighting; These guys are always going back and forth. They both have their camps. Those both have their arsenal of studies. It's almost a sport...

The simple fact of the matter is that we're not really going to actually know conclusively and incontrovertibly one way or the other for at least another decade.

I would say that you might consider reading the complete 6-part series. :-)

As per his Twitter feed[1]:

"We're being kicked off HostGator for crashing their server due to volume. Working to get a dedicated server. Sorry for inconvenience!"

In the meantime, Google's cache of this article is here:

http://webcache.googleusercontent.com/search?client=safari&#...

And the direct link to his talk [video] is here:

http://vimeo.com/45485034

[1] https://twitter.com/EatLikePete/statuses/225822001154117632

Guyenet is a joke.

Peter over at HyperLipid recently ripped him to utter shreds:

http://high-fat-nutrition.blogspot.com/2012/06/confused.html

http://high-fat-nutrition.blogspot.com/2012/06/insulin-un-de...

Not to mention, Taubes countered Guyenet with a 6-part series refuting Guyenet's widely mocked food-reward/palatability hypothesis:

http://garytaubes.com/2011/09/catching-up-on-lost-time-ances...

http://garytaubes.com/2011/11/catching-up-on-lost-time-–-the...

http://garytaubes.com/2011/11/catching-up-on-lost-time-–-the...

http://garytaubes.com/2011/11/catching-up-on-lost-time-–-the...

http://garytaubes.com/2011/11/catching-up-on-lost-time-–-the...

http://garytaubes.com/2011/11/catching-up-on-lost-time-–-the...

Google's cache for this article:

http://webcache.googleusercontent.com/search?client=safari&#...

Link seems fine to me:

https://vimeo.com/45485034

What is best for your career given that the future is -- by definition -- not knowable and that the past and present are not necessarily indicative of the future?

Go deep (specialize) just enough to be unquestionably proficient, but not enough to be one of the world's foremost experts. Go broad (generalize) just enough to be learned (well-informed) in discordant technologies, but not enough to be omniscient (all-knowing). I call this type of a person a "genspec", a generalist-specialist.

For example:

1. It's more useful to learn functional programming, object-oriented programming, procedural programming, etc., than to learn e.g., 3 different object-oriented programming languages.

2. It's more useful to learn embedded development, mobile development, web development, etc., than to learn e.g., three different mobile development platforms.

3. It's more useful to learn e.g., 3 different OSs than to learn e.g., 3 different distributions of a single OS.

Optimize yourself for change, adaptability, and continual learning of many materially dissimilar topics. That's what's best for your career.

I think the better question would be:

What is best for your career given that the future is -- by definition -- not knowable and that the past and present are not necessarily indicative of the future?

After all, what is better today may not be better tomorrow and what is better tomorrow may not be better the day after. We live in a world where all technologies are in a state of decay, and our environment is rife with disruption and innovation.

Go deep (specialize) just enough to be unquestionably proficient, but not enough to be one of the world's foremost experts. Go broad (generalize) just enough to be learned (well-informed) in discordant technologies, but not enough to be omniscient (all-knowing). I call this type of a person a "genspec", a generalist-specialist.

For example:

1. It's more useful to learn functional programming, object-oriented programming, procedural programming, etc., than to learn e.g., 3 different object-oriented programming languages.

2. It's more useful to learn embedded development, mobile development, web development, etc., than to learn e.g., three different mobile development platforms.

3. It's more useful to learn e.g., 3 different OSs than to learn e.g., 3 different distributions of a single OS.

Optimize yourself for change, adaptability, and continual learning of many materially dissimilar topics.

That's what's best for your career.

Dr. Lustig's rebuttals:

http://www.alanaragonblog.com/2010/01/29/the-bitter-truth-ab...

http://www.alanaragonblog.com/2010/01/29/the-bitter-truth-ab...

http://www.alanaragonblog.com/2010/01/29/the-bitter-truth-ab...

Do you think the two hundred and fifty MDs and PhDs that just this month signed[1] his petition[2] are also loons?

Or perhaps you think Walter Willett M.D., Ph.D., and David Ludwig M.D., Ph.D., of Harvard--two of the foremost nutrition authorities in the US--who agree with Taubes, are also loons?

Maybe you think all of these individuals simply don't bother to do due diligence on what they read? Or maybe you think they are suffering from insufficient intellect such that they're incapable of detecting your accusations of cherry-picking and snake oil?

I'm also a bit lost with your characterization of a low carb diet as a fad diet. Surely you understand that this is the diet our ancestors were exposed to during millions of years of hominid evolution?

[1] http://www.ipetitions.com/petition/response-to-nytimes-the-f... [2] http://www.ipetitions.com/petition/response-to-nytimes-the-f...

It's a common misconception that there are few overweight east Asians: http://www.hindawi.com/journals/jobes/2010/868573/tab1/

Further, much of the population of east Asia lives in poverty or near-poverty conditions. Their portion sizes are small (i.e., total daily carbohydrate intake is nowhere even remotely close to that of developed nations). In fact, half a billion Chinese are living on less than $2 / day: http://en.wikipedia.org/wiki/Poverty_in_the_Peoples_Republic...

Also, east Asians eat whole grain brown rice, not the fried, bleached, processed, white rice that Americans typically eat, which is largely devoid of nutrients and fiber.

For far more detail, visit page 226 of Gary Taubes' 'Why we get fat' book.

You'll never--as you've discovered--be able to do either activity particularly well if you're doing them concurrently. That is a dead-end; Just bury it. Focus fully on one thing and one thing alone.

Next, get rid of your elliptical. It's a wildly inefficient use of your time and effort.

Finally, get a Kettlebell.

According to a recent study from a well respected fitness research organization, in collaboration with an equally well respected research University, Kettlebell workouts can burn up to 20 calories per minute. This is primarily due to Kettlebell workouts being comprised of total-body movements that bring cardio and strength training together, in one quick workout.

The only other activity known to man that is that efficient is cross-country skiing, uphill, at a fast clip. Considering that your work-space likely lacks snow and hills, a Kettlebell may be more readily appropriate. ;-)

For more info, see: http://www.acefitness.org/getfit/studies/kettlebells012010.p...

According to Apple, alcohol should not be used on an iPad. iPads have an oleophobic coating for repelling oil. Each application of alcohol will cause significant degradation of the oleophobic coating. For more information, see: http://support.apple.com/kb/ht3226

It is one of your primary duties to safeguard the best interest of your organization. Incontrovertibly, the best interest is not served by storing passwords in plaintext as this can result in grave harm to your organization.

Accordingly, while I would not share any details with the outside world, I would advise you to strongly push the issue internally, from the position of an educator.

Here are four articles that may assist you in composing a stronger series of arguments:

https://www.owasp.org/index.php/Broken_Authentication_and_Se...

http://cwe.mitre.org/data/definitions/256.html

http://blog.moertel.com/articles/2006/12/15/never-store-pass...

http://marknelson.us/2011/02/06/gawker-considered-stupid-cri...

You will want to further notate that the effort of implementing non-plaintext authentication really isn't terribly significant.

What troubles me is this "most senior" programmer of yours. If storing passwords in plaintext is OK with him/her, meaning that he/she has a weak background in security engineering, I can't imagine that there aren't many additional severe security issues (SQL injection, XSS, CSRF, etc...). Most concerning of all though is that this "most senior" programmer seems disinterested in due diligence and is instead actively arguing against widely known best practices.

If, after your strong push, management still is not motivated, personally, I would resign. I would not want to be professionally affiliated with an organization and management that have a materially compromised decision-making process.

At some point in the future, your organization may be compromised, which may lead to people losing their jobs. You will not, in the future, want to be on the receiving end of questions like, "So the web application that you worked on stored passwords in _plaintext_???," "So how exactly was it that you were unable to present a compelling case to do something that is so blatantly obvious???."

I have a working solution for idonethis.com, a conceptual solution for "Epic Win!", and an additional insight to add to yours.

The working solution for idonethis.com is to simply set it as your browser's home page. I live on my laptop, and to a significant extent, my web browser as well. For people in this category, a browser's home page may have even more of an unavoidable visible presence than a wall calendar would, not to mention perhaps even a greater frequency of exposure. This also serves as a call to action, meaning that every time that one opens a tab to, for example, read a news site, they'll see their calendar first and have to consider whether reading the news is more important than the goals that they have set out for themselves. As a side-note, I have no bookmarks for any news or related sites, in order to force a view of the calendar.

One thing I can see being a solution for "Epic Win!" would be if it displayed its equivalent of the calendar as the iOS device's lock screen and home screen wallpaper. In this way, you simply can't avoid seeing it.

I've found that the key here is actually not in the unavoidability, the key here is reducing the effort required by greatest extent humanely possible. "Epic Win!", in its current state, fails because it takes effort, no matter how minuscule, to launch the app. Getting an automated reminder is great, but it still requires effort, again no matter how minuscule, to click into the body of the email to see the calendar. Using the browser home screen or iOS wallpaper approach means that you're always seeing your calendar as a side-effect of something that you were already doing, and thus itself requires zero intrinsic or additional effort.

Finally, I think you brought up a great point in that "not using an app hides away the shame of not using it". The practical effect of having to deal with that shame is that it increases the effort required, due to emotional reconciliation, which decreases the likelihood of the app being launched.

When you know that shame is unavoidable (since you'll see it as your wallpaper and/or browser home screen) you can no longer "ignore" the shame (e.g., ignore an email, don't open an app). The only way around not feeling the associated negative emotions is to just ensure that you're executing on the goals that you've set out for yourself.

This approach is also supremely motivational from the "carrot" perspective. Seeing your chain of successes, day after day, is profoundly self-affirming, addictive, and habitualizing. You'll get to the point, in a relatively short period of time, where there is simply no force on the face of the planet that will prevent you from continuing your streak.