offense is getting cheaper, faster and easier to scale. finding and exploiting bugs is increasingly automated.
defense is improving too, but it still has to cover every dependency and edge case.
attackers need one way in. you have to close all of them.
Internet security starts with randomness.
Cloudflare built a wall of lava lamps to help generate it.
eMudhra's compromised CA private key was literally "4".
One built a wall of entropy. The other picked a number.
(xkcd/221)
real business success depends on tech that solves actual problems, not just what’s fashionable. in tech, we create tools; in business, we look for impact. without that alignment, no investment will last.
The 16 digits on your credit card aren't all data.
One is a checksum calculated from the others to catch mistakes before a transaction is even attempted.
The surprising part: billions of cards use a weaker algorithm despite stronger alternatives existing.
uuid - random unique identifier
uuidv7 - sortable time-based uuid
int auto increment - sequential numeric id
or just random int
what’s your first choice to create user_id?
"Oct 20 2:01 AM PDT We have identified a potential root cause for error rates for the DynamoDB APIs in the US-EAST-1 Region. Based on our investigation, the issue appears to be related to DNS resolution of the DynamoDB API endpoint in US-EAST-1." - AWS Health Dashboard
>“The G-Drive couldn’t have a backup system due to its large capacity”
>Four people have been arrested
>a government worker overseeing efforts to restore the data center has died after jumping from a building