Protecting data

I’ve started to hear questions about encrypting memory. For decades the industry has used a model where root was god of a machine and could access anything. That has been changing – we now operate in environments where root isn’t the owner of the data or even the device. Confidential computing addresses this allowing software to push security controls to hardware, such as Mark Russinovich demoed at Ignite this year. Device owners can only access plaintext memory if the software allows it.

There are of course attacks against SGX. I’m confident the industry will either find ways to fix them or mitigate these attacks.

I’m glad to see Microsoft involved in confidential computing.

Protecting data on public clouds and edges with confidential computing | VentureBeat
— Read on venturebeat.com/2019/12/31/protecting-public-cloud-and-edge-data-with-confidential-computing/amp/

Clever Code

Great post from John Gruber on why clever code and cowboy culture is bad. Love the quotes from Guido van Rossum and Brian Kernighan. Every new programmer should read this:

“When asked, I would give people my opinion that maintainable code is more important than clever code,” he said. “If I encountered clever code that was particularly cryptic, and I had to do some maintenance on it, I would probably rewrite it. So I led by example, and also by talking to other people.” Guido van Rossum

Great example of not only coding style but engineering leadership.

Open Source Intelligence Techniques

For anyone concerned about their privacy, I highly recommend OSINT’s newsletter and tools at https://intel techniques.com. They have some tools to make it easy to see what others can find out about you easily using various search tools for both the web and social media.

This week Michael Bazzell mentioned a new linux distro he released with David Westoff called Buscador. It’s loaded also with a bunch of tools to make it easy to do privacy research while maintaining your privacy as well. It’s like Kali Linux for privacy instead of security. You can learn more at https://intel techniques.com/buscador/index.html.

Speaking of Kali Linux – they just released a new version this week as well.

@CarlPullein http://www.carlpullein.com/blog/how-to-be-stoical-with-your-time-management/7/3/2018

So rather than complaining and blaming, start taking responsibility. Be stoical. Spend ten minutes or so every evening and identify the most important things you must work on the next day and make sure this remains your priority. Lower the priority on your email and social media and only look at it when you have finished the things you really wanted to complete that day.

@CarlPullein http://www.carlpullein.com/blog/how-to-be-stoical-with-your-time-management/7/3/2018