petejansson

Same here, except I also wrote assembly and had teammates who wrote RPG

The first two paragraphs of the article specifically talk about a study done on Waterloo & City coming to a negative conclusion.

Last mile delivery companies don't handle the volume of non-package traffic that the USPS does. At that scale, tailoring can really pay off in productivity.

FedNow (https://www.federalreserve.gov/paymentsystems/fednow_about.h...) just went live in July, 2023. It will take some time for adoption.

every time this article pops up

I don't think this is the same article of which you're thinking. This is a tool to rotate DKIM keys and publish the old ones (in a sense, a scheme that replaces revocation).

A few years ago, there were a number of devices that came on the market that essentially blew ozone through the airflow pathways in PAP devices, and this was supposed to be a substitute for disassembly and scrubbing (which is a lot less convenient). While nobody has said these devices and the ozone methods actually damaged the foam, replacement PAP units all are not warranted if ozone cleaning devices are used. I don't know if this is the only "cleaning material" to which the article refers.

Turns out Montessori education runs in 3-year cycles (ages 2-3-4, and 5-6-7, for example). Not all schools make that clear, and, if you put a kid in in the middle of a cycle, there is orientation material they will miss. Without that grounding, Montessori can turn out to be a really ineffective experience. (Source: Was a parent who realized this and had to compensate for it. The 5-6-7 cycle was much more effective.)

JIRA implementations I've seen don't help people see what's ahead; they focus on what's been done to date. If you're on a single, small team that has minimal dependencies on other teams, that can work, but if the project has any significant dependencies on other teams, it becomes very hard for anyone to understand how things are going.

How do you move money among the accounts? I like the idea of using multiple bank accounts as financial firewalls for my money, but it seems difficult or expensive to move the funds, especially if the accounts are not all at the same institution.

A serious problem with biometrics is credential revocation. The best answer I've seen to this is using the biometric to locally unlock some other credential like a certificate that can be revoked. There are other problems that are flashier, like spoofing and liveness, but revocation is a real show-stopper that is frequently ignored.

It's great that this exists. Many typical users are still befuddled by multifactor authentication, and the one thing that helps is practice. Unfortunately, by having all these islands of identity, the frequency of interaction for many of them ends up being low, resulting in users forgetting they enabled MFA and the associated recovery costs.

There have been technologies to try to bridge the identity islands -- social login (which previously created trust issues through OAuth abuse - many resolved, but trust is hard to win back), Mozilla persona and others. But, at the end, the hostility of end user identity is still a problem that needs to be solved in such a way that end users have good authentication choices (no more bad security questions, for example) with good security attributes (low replay, discoverability and guessability, for example) with good usability. Ideally, an end user should be able to choose an identity provider, trust them, and then use that identity provider across multiple services. I know that some companies are working on this, but it still tends to be in islands, rather than an industry group, for example, dedicated to making it work. At this point, a de facto standard may be the best thing.

I've been in meetings with IAM architects at large banks who scoff at social login because they don't want to trust social login security, yet their own end user security is marginal. Some honest conversations need to happen in this space to help move things forward.

Better identity infrastructure for end users will help service providers.

While not a direct successor, there's this: https://www.schneier.com/books/cryptography_engineering/

While I agree with your premise about different types of work, and while I agree there's some level of clerical work required to interact with a computer, computers can do far more than clerical work, and can provide intellectual leverage when used properly. Banning a high-level executive from using something that gives them intellectual leverage holds the organization back.

It's about time it got an update. https://www.w3.org/Jigsaw/

Irony!

The article seems to say that the estimate of all who have lived is about 106 billion, so the number of currently-alive is estimated at about 6% of those who have ever lived.

Arthur C. Clarke wrote "Behind every man now alive stand thirty ghosts, for that is the ratio by which the dead outnumber the living." I wondered if that ratio needed updating. It does, but not, it seems, in the direction I expected.

One approach is to issue one certificate per device per subject. The subject identifier could remain the same. If this approach is taken, revocation checking is critical -- you end up having a bunch of certificates that all claim to be the same subject, so you need to make sure any presented certificate is valid. However, while revocation checking is often problematic for clients, some of those issues are more easily managed on a sessile server.

Purely from a user's perspective, the Mac app store has a considerable advantage in centrally managing updates. Non-MAS apps each have their own eclectic ways of updating. Some support automatic update checks, while users have to explicitly check others. For the ones with automatic updates, there are a number of ways it's handled. Users don't generally want scores of update daemons running, and the whole business of "On launch, check for update, notify the user and let them choose whether to update now" really feels like the web page pop-ups that are so popular. ("I launched the app to do work, not to see if there was an update. The update prompt is in my way.") This cries out for a better user experience.

I had years of mechanical drawing in high school, and it wasn't until my junior year that the teacher noticed I am left-handed. He started having me create drawings from the lower-right corner to the upper-left, while the right-handed kids drew from upper-left to lower-right. When I switched, I stopped having smudged drawings caused by dragging my hand across the completed parts of the drawings.

Little things.

Please don't ever put keys in the source of an application.

I was comfortable with the notion. It seems to me that "soft technologies" are the ones that cause ideas and thoughts to be materialized in the world. The other technologies seem to be physical transformations of matter and energy.

What I'm really curious about is how to best consume these. I suppose a mailing list would be the norm, but I'd like to see them automatically land in Instapaper or Pocket. I'll have to see if there's a way already.

My comment was more of a "Jacques' case reminds me of this other case" comment. I agree that what you're experiencing is not a DMARC failure.

Like others, I'm interested in what root cause you've determined, if you can share.

TL;DR - Make sure your DMARC config isn't making your messages look like SPAM.

One one of the sysadmin professional organization mailing lists, email from one of the people speaking for the organization started to be marked as spam because the person had DMARC instructions on their domain, but messages remailed from the mailing list server weren't authorized. In this case, Google's mail servers were acting as instructed. I sent the person copies of the headers showing why Google's mail servers were taking this action, as, apparently, did a number of other people. The person became irritated and decided that people who use Google's mail servers needed to fix their own problems.

If your DMARC configuration is causing your messages to be marked as spam, you really should look into that.

If you appear to speak for a sysadmin professional organization, and your DMARC config causes your email to be marked as spam, you really need to fix that, and consider that blaming the recipient mail servers does not do good things for your credibility.

Of course, there are plenty of things that can go wrong other than DMARC, and some of those might well be Google's fault. You can typically track down the reasoning for a Google mail server spam decision from the headers of the delivered message.

Scalzi has a good take on this: http://whatever.scalzi.com/2015/06/21/amazon-tweaks-its-kind...

Notable is that Amazon still sets the overall amount that all authors can be paid -- the pages money comes out of a pot, and Amazon sets the pot. Also, he brings up the idea of a "choose your own adventure" book -- it's not yet clear what the payout would be in this case.

This is only for Kindle Unlimited.

Scalzi points out that he doesn't view Amazon as evil, but that there are situations in which Amazon acts more in its own interests than those of authors.

Relevant: http://www.safetyresearch.net/blog/articles/toyota-unintende...

Summary: Toyota settled an unintended acceleration lawsuit connected with analysis of the source code for a 2005 Toyota Camry showed it was defective "spaghetti code."

There'a a lot of poorly-organized code in the world, and a typical excuse for not cleaning it up is that "it works" so there would be no return on fixing it. In the Toyota case, the code may have contributed to unintended acceleration, and did result in a legal exposure for which Toyota felt it was necessary to settle a lawsuit.

From the documentation at http://flask-admin.readthedocs.org/en/latest/

Flask-Admin is a batteries-included, simple-to-use Flask extension that lets you add admin interfaces to Flask applications. It is inspired by the django-admin package, but implemented in such a way that the developer has total control of the look, feel and functionality of the resulting application.

The US is moving to Chip & Signature, rather than Chip & PIN, but the liability will still shift to the merchant, not the buyer.

http://krebsonsecurity.com/2014/10/chip-pin-vs-chip-signatur...

The exit interview is the wrong place to try to improve the workplace. You should be doing it diligently while you're there, in every interaction with cow-orkers, providing respectful feedback to supervisors and helping to improve processes.

The exit interview is unlikely to be read by the audience to which you seem to be referring (or at least, read in any serious way). By the time you've left, the only meaningful feedback to leadership is attrition.

Obstructive sleep apnea can cause lack of REM sleep and, as a result, no dreaming. Symptoms may be such that you have a long sleep period but are prevented from deep sleep by micro-arousals. Being overweight (as Mr. Arrington mentions in a linked piece) can cause or worsen apnea.

I'm reluctant to add to uncertainty, but I'm not sure these are the only concerns. Many Linux systems execute shell scripts via bash after acquiring a DCHP address, and would be vulnerable if someone took over the DHCP servers in, say, a co-working space, cafe or airport and maliciously configured them. I'm not 100% sure if Mac OS X (or iOS) use shell scripts for post-assignment configuration. The short answer is to be careful about wireless access you don't control until Apple issues a patch.