Gonçalo Valério @dethos@s.ovalerio.net

🤔 seems to be a good approach, to at least put things in motion.

https://medium.com/@maxthelion/writing-proposals-to-speed-up-decisions8a13d4122649

Interesting presentation about tools and aspects to take into account, when securing a container environment

https://www.slideshare.net/MichaelDucy/securing-your-container-environment-with-open-source

#netsec #security

Documentation is crucial in any software project, but often neglected. Here is a nice introduction to the great tools available when using Python:

https://www.pythonforthelab.com/blog/documenting-with-sphinx-and-readthedocs/

#python #sphinx #readthedocs

Some common "mistakes" that can compromise your python projects:

https://hackernoon.com/10-common-security-gotchas-in-python-and-how-to-avoid-them-e19fbe265e03

most of them can be automatically detected, early on, by using some tools:

https://blog.ovalerio.net/archives/1472

#python #security #appsec

"Blender is testing PeerTube after YouTube blocks their videos worldwide" - https://news.ycombinator.com/item?id=17347560

Very nice 👍

#activitypub #decentrazation #video

Remember the #saveyourinternet campaign?

https://saveyourinternet.eu/

Here is a small example of why article 13 is dangerous:

https://torrentfreak.com/youtubes-piracy-filter-blocks-mit-courses-blender-videos-and-more-180618/

Nice set of tips to improve your Firefox's privacy settings.

https://restoreprivacy.com/firefox-privacy/

#firefox #privacy #security

A sad moment for the whole Internet...

https://www.nytimes.com/2018/06/11/technology/net-neutrality-repeal.html

#openweb #netneutrality

Some tips about securing your crypto-currency wallet (keys):

https://blokt.com/security/storing-crypto

#cryptocurrency #security #infosec

For certain kinds of jobs, it makes total sense.

https://www.remoteonly.org/

#remotework

It seems to be official now.

https://blogs.microsoft.com/blog/2018/06/04/microsoft-github-empowering-developers/

this might shake things a bit and people might consider other options. Not sure if it will be mostly good or mostly bad in the long run. Lets see.

And this kind of issues keep popping:

https://silviavali.github.io/Electron/only_an_electron_away_from_code_execution

#appsec #infosec #security #electron

These link "taxes" and mandatory upload filters go against the whole concept of the Internet. Only a few benefit from them.

A clear example of a bad "law".

🤦‍♂️

https://saveyourinternet.eu/

#openweb #europeanunion

It seems some people are sharing passwords on public Trello board.

https://medium.freecodecamp.org/discovering-the-hidden-mine-of-credentials-and-sensitive-information-8e5ccfef2724

Even if the boards were private, it would be problematic. Educating users to use proper password managers is essential. In cases it isn't possible something like https://hawkpost.co might be useful.

#security #infosec

Cool stuff about python's new debugging features:

https://hackernoon.com/python-3-7s-new-builtin-breakpoint-a-quick-tour-4f1aebc444c

#python

Electron makes the life of developers easier, it get it. But the price for users is too high: more risk and a lot more waste of resources. Still prefer proper native apps.

https://blog.doyensec.com/2018/05/24/electron-win-protocol-handler-bug-bypass.html

#appsec #infosec #security