CISO at @sardineai. Treasurer of @OWASP Board of Directors. (he/him) qatta' mIghtaHghach.
Phoenix, AZ
Joined July 2009
- Tweets 8,305
- Following 139
- Followers 776
- Likes 17,402
Stumbled upon a new TV series called “Paper Empire” that looks interesting, but appears to not have a home for watching it.
vimeo.com/362690658
Paying @WEXIncNews via a check in the mail is free, but paying online is a $20 fee?
This feels like a tax on younger people who (rightly) have eschewed checks for modern payment systems.
Joke is on @WEXIncNews because my bank will mail a check to them for free.
This is why you do NOT let @realhamed anywhere near your smart speaker: Baby Shark EDM Remix.
Are smart speakers safe?
▶️ youtube.com/gWxlAdFx-N4
@WhichUK @realhamed @imperialcollege @ImperialDyson
1
1
8
I’m sure the conversation went like this:
Privacy: We need to build out a CCPA automated system.
Eng: To scale properly, how many thousands per day will use it?
P: Maybe a few dozen a week?
E: Call us when you hit your first thousand.
I signed up for a new financial service and it wanted me to link my bank account via Plaid. #nope
PSA: entering your banking credentials into Plaid means you’re giving it to Plaid, not your bank.
Super-bad idea, do not do this! And if you have, change your banking password.
1
Bil Corry retweeted
Ouch. The Safari tracking prevention has privacy vulnerabilities allowing worse tracking than what it was trying to prevent.
Privacy engineering is *hard*. Honestly, I don't see a robust way around this one, though I haven't had enough time to sit down and really chew on it.
Apple/Safari Intelligent Tracking Prevention is a mechanism intended to improve privacy. It was found to have privacy vulnerabilities allowing sites to track the user (and fingerprint), and to stealing web browser history of a user. Incredible find. arxiv.org/pdf/2001.07421.pdf
2
50
95
Bil Corry retweeted
GGvulnz — How I hacked hundreds of companies through Google Groups medium.com/@milanmagyar/ggvu…
2
5
Totally get that. The mix of how many employees you have, how many different states you want to support, and how many benefits you want to offer will change which model will work best. Cost, liability, nexus, speed, ease, interest on escrowed taxes, etc all factor in as well.
1
Personally, the big advantage was shifting legal liability and being able to onboard anyone in all 50 states quickly, versus wanting to hire an employee in a new state that required onboarding the state first, then could hire the employee.
1