Claudio Wunder

Platform Engineering @HubSpot — Open Source @NodeJS @GNOME, Faculty Staff @TU_Muenchen

[Claudio Wunder @wunderacle]

@bhalligan @HubSpot @dharmesh So excited to see what comes next under your Leadership!

[Claudio Wunder @wunderacle]

Didn’t imagine Jensen leaving. Man… this is nuts.

[Claudio Wunder @wunderacle]

This is crazy. Never imagined seeing this happening.

[NVIDIA Newsroom @nvidianewsroom]

NVIDIA announces CEO transition. Read the release: https://t.co/MTTUvFHCJA

[Claudio Wunder @wunderacle]

@nimarblu @TU_Muenchen Absolutely! We shouldn’t blame the humans, but support them. We know how often they are underpaid and understaffed!

[Claudio Wunder @wunderacle]

Right, I do believe the “short term” one is securing the database. There are ways to encrypt the data so that actually seeing the whole dataset becomes visible only to the application. Now unsure if the server got compromised, if a MITM happened and how… Hence why there should be public disclosure imo.

[Claudio Wunder @wunderacle]

@nimarblu @TU_Muenchen Also important to mention that I don’t speak on behalf of TUM nor claim my information is an accurate depiction of reality 😅

[Claudio Wunder @wunderacle]

Yes the passwords were plain text. But for a reason “stupider” than lack of encryption for the sake of it. MyTUM communicates to TUMOnline by literally authenticating *as* the user. Hence why the plain text. This could have been prevented by the table itself or the database itself being encrypted. And the encryption layer being within the Application.

I wonder if the database password was in an .env file or how they got database access. That part is the, in my honest opinion, inexcusable part. Even more a SysAdmin without MFA and using same password on both places. That is just being reckless. That said the system should enforce MFA and not allow admins without MFA.

Maybe the ITO department is underpaid. Hoping that proper resources get invested in properly protecting the system.

[Claudio Wunder @wunderacle]

@nimarblu @TU_Muenchen That said, unsure if this was the case or as other say if there was a MITM. I hope ITO makes a public blog post in the future disclosing the whole ordeal for transparency

[Claudio Wunder @wunderacle]

@kdy1dev @e2e Glad to hear you landed a cozy job, @kdy1dev! Take care 🫶

[Claudio Wunder @wunderacle]

@ashleywolf @zeeg I do wonder tho, if it’d made the sense to have a toggle so you can see timeline events at the overview too… Sometimes we like to see the correlation of these 🤔

[Claudio Wunder @wunderacle]

@ashleywolf @zeeg Oh, that wasn’t obvious to me. Noting that down, thanks Ashley! ;D

[Claudio Wunder @wunderacle]

@zeeg @ashleywolf That said, everything else so far is neat ;)

[Claudio Wunder @wunderacle]

@zeeg @ashleywolf The only piece confusing for me is that the recent to older messages on issues and anywhere else is still top->bottom whereas on the new PR overview it is bottom->top and that can be disorienting.

[Claudio Wunder @wunderacle]

@goldglovecb @Dhirender_0001 Fair

[Claudio Wunder @wunderacle]

@nickytonline @github OMG the stuff at the store now is so cool :O

[Claudio Wunder @wunderacle]

@tobimori In @nodejs’s web projects we use Tailwind within CSS modules. Unironically pretty good.

[Claudio Wunder @wunderacle]

@moraes_c_ @github

[Claudio Wunder @wunderacle]

Thank you @GitHub for once again supporting my work in Open Source. 🫶💖