Marv

making computers do stuff, currently @shopifyEng. Weird mix of trashy German and technical English tweets☝🏻

[Marv @MarvSec]

@BrandyZadrozny omg yeah just spent a week there for a team event and now I'm wondering why we didn't relocate years ago. Shorts in April? Yes, please! Also on the other hand not being able to afford things is a big meh

[Marv @MarvSec]

@mikejulian Somewhat disagree. GCP is fully integrated into Google’s authentication and authorization system, which makes it a no-brained for any modern company - using gmail and docs etc anyways. Very easy to get started that way. Feels like AWS has this the other way around.

[Shopify Engineering @ShopifyEng]

“Resiliency is sort of a fiber that runs through a lot of what we do." In this new video Tai Dickerson expands on practices like storytelling that help reinforce our culture of resiliency and make it accessible across every team at Shopify.

[Dino A. Dai Zovi @dinodaizovi]

Tech friends: I think now is a good time to submit PRs to systems you work on that replace terminology like whitelist/blacklist with alternatives like allowlist/denylist. Besides not having any racial overtones, they are clearer to non-native English speakers too.

[Shopify @Shopify]

Join us on our virtual #ShopifyReunite stage 💚

https://t.co/x3VV12efjJ

[Marv @MarvSec]

@tobi Unsure if EF/RF mount lenses would really be required, suddenly we're knee deep into pricey / pro territory. Going with the existing M system would also allow to build a no battery, say, M200 body, but flipped. Name it Canon "W". Like wwwwwebcam 😅

[Marv @MarvSec]

@tobi Strong vote for Canon. It's mostly software and the prototype Windows tool they released recently is a very first step. Newer models have USB-C for charging anyway, seemingly small firmware update needed to allow charging while in use. Still: non-fisheye-y lenses <= 20mm needed

[Marv @MarvSec]

@pix_bun Yes please, would put up on my video game art prints wall. Loving it!

[Marv @MarvSec]

@OddNina Ach? Das war mir nicht klar. Verstehe das ganze Modell nicht 😅 sorry

[Marv @MarvSec]

@HendricRuesch „Raucher-“kneipe“

[Karl @KarlKFI]

The problem with GitOps is that nothing gets reviewed/merged outside of business hours.

And it’s less business hours and more like the least common denominator of everyone’s work hours.

So you all have to live/work in the same time zone and eat/sleep/work like a normie.

[Marv @MarvSec]

@LoonaWho Besonders wenn man unterwegs ist, genau wenn man ein Taxi braucht. „Mobile Banking“ und so. Ausreden waren dann Vorgaben und Richtlinien. Verständnis das die Implementierung das Problem ist schien schwierig.

[Marv @MarvSec]

@pires_oss @sebp True, that‘s one of the few services capable of 4K, but I don’t think it matters that much, if at all. Invest into proper lighting and auto focusing, the result will look “better” in 1080 or 720 than full 4K res that way.

[Marv @MarvSec]

@pires_oss From my experience you won’t see any difference between actual 4K (from any modern digital camera HDMI out into a Camlink4k) and 1080p on the receiving end, just your machine catching fire trying to encode the stream. For zoom/hangouts that is.

[Marv @MarvSec]

@AshBerlin @FiloSottile But yeah, naming is hard and the RFC also makes it clear that a JWT is only a valid JWT if "[...] encoded in a
JWS and/or JWE structure." It's pretty tangled.

[Marv @MarvSec]

@AshBerlin @FiloSottile not only 'to you', but also clear from the RFCs:
> [JWT] is used as the payload of a JSON Web Signature (JWS) structure or as the plaintext of a JSON Web Encryption (JWE) structure
Together they're called JOSE, but people really just call it JWT anyway. PASETO can replace JWE+JWS

[Marv @MarvSec]

@coutoworld @FiloSottile Depends on your use case. It does not standardise the payload format or including claims (like expiration). Some implementations wrap around JWT structs, some don't. If you need to pass claims between two independent systems, it might not be a drop-in replacement.

[Kieran McHugh @kieranmch]

Things I did but don’t do any more...
- Say “guys”
- Call things “crazy” or “mad”
- Call myself “OCD”
- Use “master/slave” technical terminology
- Use “whitelist/blacklist”

I don’t miss any of them and it actually feels good. Words matter!