chip @chip@us.dev

Markdown or LaTeX for memos?

Not only is this vuln interesting but the fact "... if you’ve ever installed the Zoom client and then uninstalled it, you still have a `localhost` web server on your machine that will happily re-install the Zoom client for you, without requiring any user interaction on your behalf besides visiting a webpage" https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5

It'd be awful for many services but think about how great being able to visit metro.geo and have the zone be delegated to the metro servicing your area.

So this would be terrible but is a fun thought: what if you offered domain registration but answered NS records based on the client's geo? Per-region domain registrations would be fun.

FB’s chain https://libra.org will have support for validators and smart contracts.

"#315: Dance Like No One Is Watching, Encrypt Like Everyone Is" thanks AWS podcast, I'm stealing that title as my new life motto.

How do other orgs catalog all their Git repositories? We’re about to break 1K and are wondering if this is a solved problem already.

GitHub announces package registry. Npm, RubyGems, NuGet, Maven and Docker support at first.

The 2019 Verizon Enterprise Data Breach Investigation Report (DBIR) is available: https://enterprise.verizon.com/resources/reports/dbir/

Mock up quick and user-test early.

Microsoft announces open-source ElectionGuard voting SDK https://blogs.microsoft.com/on-the-issues/2019/05/06/protecting-democratic-elections-though-secure-verifiable-voting/

There's still a lot to explore on mastodon but so far so good!

Software engineering inspiration can come from anywhere, even utility markings on the sidewalk. (Gonna try this mastodon image upload)

In the mid 1990's the team at Netscape first created a feature that allowed browsers of the web to view the HTML that was sent by the webserver for the page you were currently browsing. I had never thought about "view source" (or it's older cousin "inspect") as a feature that someone had to come up with in a browser.

I was able to get custom built Windows Server images deployed in AWS with terraform.io today. One config file for keys, VPCs, security groups, EBS volumes, etc.

If you haven’t looked at #terraform, infrastructure as code is worth it just no avoid having to click through cloud platform web UIs!

Nothing inspires confidence more than your vendor's support portal keeps responding with 504's

Have you verified your backups lately?