Tumblr posts

1. 

   Juggling. on Flickr.

   March 23rd, 2013 3:03pm

   Posted on Tumblr over 13 years ago and archived here at /tumblr/2013/03/23/juggling-on-flickr/ in the Tumblr collection.

2. Monetizeyourcat:

   daily reminder that ponies never grow up into horses, they’re different animals

   March 23rd, 2013 2:38pm

   Posted on Tumblr over 13 years ago and archived here at /tumblr/2013/03/23/monetizeyourcat-daily-reminder-that-ponies/ in the Tumblr collection.

3. 

   Gifmovie:

   The Wire (2002)

   March 12th, 2013 8:27am

   Posted on Tumblr over 13 years ago and archived here at /tumblr/2013/03/12/the-wire/ in the Tumblr collection.

4. 

   The red switch. on Flickr.

   March 10th, 2013 10:25am

   Posted on Tumblr over 13 years ago and archived here at /tumblr/2013/03/10/the-red-switch-on-flickr/ in the Tumblr collection.

5. A thing some of your peers actually believe could happen

   “Understaffed startup attributes shipping on time releases and steady feature improvements without death-marches, attrition, an FTC injunction, a data breach, or revenue impact to weeks spent implementing:

   • an HSM.
   • a certificate authority tied to the HSM.
   • transport encryption (correctly).
   • browser based bcrypt(scrypt(PBKDF2())) password storage.
   • a honeynet.
   • data classification, retention, and encryption.
   • CAPTCHAs.
   • secondary questions.
   • out of band credential reset via e-mail and SMS.
   • authentication rate limiting.
   • two factor authentication.
   • the latest browser-supported frame-busting, XSS, and CSRF mitigating security controls.
   • a custom security library.
   • vulnerability management.
   • administrative roll based access.
   • proper logging.
   • log monitoring.
   • fraud monitoring.
   • BGP peering DDoS appliances.
   • a web application firewall.
   • an intrusion detection system.
   • Sender Policy Framework.
   • A separate top level domain for every system.
   • developer training in:application security, security architecture, cryptography, ecrime, computer and network forensics, and incident response.
   • security through obscurity (no NOT security through obscurity!) ((what does that even mean?)) (((well it rhymes!)))
   • a vulnerability disclosure bounty program.
   • an FTC injunction.
   • a SOX, HIPPA, PCI-DSS compliance program.
   • server file integrity monitoring.
   • and the free pizza lunches the founders provided daily.

   March 4th, 2013 9:32am

   Posted on Tumblr over 13 years ago and archived here at /tumblr/2013/03/04/a-thing-some-of-your-peers-actually-believe-could/ in the Tumblr collection.