ن Aaron Poffenberger

@akpoff

Lutheran Christian, user, software developer, -er, CISSP. Geek. KG5DQJ. Needs more cowbell.

Houston, TX
Joined April 2008

Tweets

You blocked @akpoff

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @akpoff

  1. Pinned Tweet
    3 Sep 2017

    Ah, the good old days of Unix when the programmers were programmers and the users were too.

    Show this thread
    Undo
  2. 19 minutes ago

    Today is the commemoration of St. Monica, mother of Augustine. Movingly remembered by her son for her Christian patience, acts of pious devotion, and great concern for his soul. Image: Saint Augustine and his mother, Saint Monica by Ary Scheffer (painting from 1846) (Wikipedia)

    Saint Augustine and his mother, Saint Monica by Ary Scheffer (painting from 1846) (Wikipedia)
    Undo
  3. Aug 24

    Thoughtful, well articulated reply here from Damien Miller () explaining why the team committed and released fixes to the "user enumeration" defect without fanfare, secrecy or embargo. (CVE-2018-15473)

    Undo
  4. Undo
  5. Aug 22

    Who woke up that one day and thought: You know, in addition to content, images, style-sheets, and JavaScript we need web fonts. And while we're at it, let's use emojis specific to a given web font in lieu of graphics. Oh, and forget about graceful degradation.

    Undo
  6. Aug 22
    Undo
  7. Aug 19

    Use the ':R' modifier in make(1) when file suffixes vary, but output suffixes should be the same: SRC != find src -type f OUT := $(SRC:R:S/$/.html/g) # :R removes suffixes. Didn't know you could chain modifiers? See make(1) on variable expansion.

    Show this thread
    Undo
  8. Aug 19

    You probably really want something like: SRC != find src -type f \( -name \*.md -o -name \*.txt \) OUT := $(SRC:R:S/$/.html/g) # :R removes suffixes.

    Show this thread
    Undo
  9. Aug 19

    Use the ':R' modifier in make(1) when file suffixes vary, but output suffixes should be the same: SRC != find src -type f OUT := $(SRC:R:S/$/.html/g) # :R removes suffixes. Didn't know you could chain modifiers? See make(1) on variable expansion.

    Show this thread
    Undo
  10. Aug 17

    This teacher should read C.S. Lewis's An Experiment in Criticism: "An Experiment in Criticism springs from the conviction that literature exists for the joy of the reader and that books should be judged by the kind of reading they invite."

    This Tweet is unavailable.
    Undo
  11. Aug 17

    Life stretch goal: World Air Cellist Champion

    Undo
  12. Aug 17
    Undo
  13. Aug 16

    My wife made the most awesome cookies tonight. The two main ingredients were chocolate chips and potato chips. Yeah, you read that right. I'll see you on the other side of a serious milk and cookie binge.

    Undo
  14. Aug 16

    There you go! I just accidentally verified respect the CAA no-issue property ";".

    Undo
  15. Aug 16

    And then accepting the OTP without further transformation. Where's the security in that? SMS is dangerous security theater. It provides the illusion of security without the reality. 2/2

    Show this thread
    Undo
  16. Aug 16

    SMS is so bad I call it irresponsible in the blog post, and will say it's security malpractice. You're sending an OTP over a cracked protocol, via carriers who are demonstrably incapable of guaranteeing the owner of the account is in possession of the reception endpoint. 1/

    Show this thread
    Undo
  17. Aug 16

    Repeat after me: SMS is not secure[1] and is worse than nothing.[2] [1] With un-transformed values. [2] I said it and stand by it. SMS is worse than nothing. (You use a different password with each site, right?) See tweet above, blog below.

    Show this thread
    Undo
  18. Aug 16

    Yes, finally! Someone is trying to hold a mobile operator accountable for an unauthorized SIM swap. Now, if only we could convince more companies that SMS (with un-transformed codes) is not secure.

    Show this thread
    Undo
  19. Aug 16

    While slack is down you'll have enough browser resources to read about .

    Undo
  20. Aug 15

    Caesars claimed hotel security staff during Def Con only did visual walkthroughs of rooms. But videos show that's not the case.

    Undo
  21. Aug 15

    "Long pipeline my foot! I told them there's no way could beat us by 30%+ without cheating. I could double performance if I didn't have to worry about isolation." - A retired designer somewhere

    Undo

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·