One of the questions submitted on the info gathering form was “why not just use Mastodon Social”? To be perfectly honest, I’m leaning towards an off-the-shelf open source solution, such as Mastodon Social. But… We need to decide on an organizational structure to run and support the social network. When it comes to moderating and …
I’ve had a few interesting conversations recently highlighting & confirming my perspective on software development frameworks. 1.) Do you know Zend? I was asked if I know Symphony and my response was “sort of”. They responded (in a snarky tone) “well, you really should know Symphony & Zend because we have a massive job upgrading …
Background 2 junior coworkers asked my boss about a statement I made regarding CSRF tokens and web app security. My boss was unable to answer that question but didn’t refer to me. So, there was a bunch of confusion, miscommunication, and duplicate work. This is the internal documentation I wrote to answer that question. I …
CSRF Tokens, What They Are, What They’re Good For, and Why… Read More »
I found this article quite interesting. I’m quite keen to work in TypeScript for strict typing and compiled JS. But it seems React is far more common and thus you’d assume the pool of developer candidates is greater.
For those who don’t know: My employer, ITS Consulting, is a consulting company; they hire out to other businesses to solve IT/tech challenges. In 2016 I was in a near-fatal crash, while cycling home from work, that has left me with multiple challenges and thus far I’ve only been able to work part time at …
What does one do on a boring, cold, snowy Thurs night? Create dev on-boarding/training tools of course.
I’m working on an event log for a client (of my employer): At a bare minimum, an event/security log offloads some of the responsibility to the user. If you show fail and successful login attempts hopefully a user will catch when their own account has been compromised even if you can’t (I.E. their password was …
I was trying to think of how to communicate this to a client, I’m still not sure how to communicate this in a non-technical way. I also think this is valuable for most people to know & think about. Data, if it changes, has a relationship with time.
I’m facing some serious issues in my current contract position. What started as “I’m willing to work hard, full-time for 4 months to deal with these serious security flaws” has been whittled down. What I originally quoted as a project plan was 570 hours at an hourly rate. On the other hand the contract manager …
