Processing. Just found out via 23&me that I have a half sister I never knew I had. She’s crazy cool and I look forward to getting to know her better :)
I want to try clojure development with emacs.
I’ll be installing and configuring spacemacs with CIDER, then writing a simple web application using the Luminus framework
My wife and I are going to turn off our phones, tablets, laptops, etc at 6:30pm tonight (Friday) and we won’t turn them back on until Sunday morning. We have a few activities planned, along with some blocks for napping, reading, yoga, and general relaxation.
I’ve been working on a C64 assembler implemented as a Ruby DSL, as practice with DSL stuff, and to make it easier to import modules with good namespacing than I’ve been able to accomplish in other tools.
I might put together a very simple note system that fits with my immediate flow, having seen a few people post about that this week. More or less, i only type notes from my computer, so it should be easy to write and consume from there, where I also do my work. Also, infrequently, I want to refer to my notes using my phone, so l will have a very minimal web interface on top. Probably slap a text search on top. No tags, no categories, l will lean on the search functionality for that. Initially I thought of using codesearch for that, and maybe rank the search results by frequency of search terms or something. Idk. I want it to be really simple to use, and have zero frills.
Otherwise I’m feeling a little down and overwhelmed and professionally bored and I’m probably going to use Final Fantasy XIV as a temporary cure for that.
Realistically… checking the Guardian liveblog more often that I should for updates on the invasion of Ukraine.
I’m also working my way through reading a machine translation of Foundations of Geopolitics from Russian to English and it’s frightening how clearly it lays out Russia’s actions over the past twenty years.
Outside of following politics, I’m relaxing with a few beers watching the rugby, enjoying the somewhat normal atmosphere of the pub now that restrictions are almost completely lifted in Ireland (mask wearing isn’t technically gone until Monday, but outside of public transport and retail, there is very little observance)
Updating my resume. Looking to pivot to offensive application security, which gives me somewhat more joy than writing software. It will be a bit of a step down in terms of seniority, which is interesting.
Where are you based? Various MSRC teams are hiring (too late to register now but one of my collaborators there is running a CHERI CTF at BlueHatIL next week, to give you some idea of the kinds of fun things that they get up to).
Boston area, which is definitely a plus for finding these types of positions. However, I’m getting the sense that defensive has a lot more openings. :-) It really doesn’t float my boat, though.
There’s a lot of overlap. The MSRC folks that I work with do a mixture of:
Operational defensive things to design and deploy fixes.
Strategic defensive things to design and deploy mitigations at scale.
Strategic offensive things to test mitigations.
The last category includes red teaming the stuff that we’re doing. As someone doing security research, it’s fantastic to be able to throw prototypes at experienced exploit writers and see how they do at breaking them. Generally people seem to do a mixture of offensive and defensive work, since it’s hard to do either well without understanding the opposing side.
Oh, for sure. There’s no aspect of security I can think of that doesn’t involve both. Makes the terminology hard.
I guess the distinction I would draw is that I mostly don’t enjoy defensive as a job role. The closest I come to that is that I do enjoy writing secure software, which is a defensive role at heart but isn’t generally categorized as “defensive security”. Usually that term entails incident response, threat-hunting, monitoring, or something similar, and that’s not really my cup of tea. (I’ve taken an incident response role for the past couple years as my 20% time at work, more or less. Important, but not satisfying.) When it comes to deployed systems, I’d far rather be finding vulnerabilities than doing anything else. When it comes to design and development, I’m much less picky. :-)
I wrote a pirate-themed wordle clone called arrdle in clojurescript/re-frame. The answer is always a 5-letter a+r+. Needs a little more polish then I’ll post it.
Driving my small truck an hour away and going on a nice hike. Smoking weed and reading otherwise.
“Describe your perfect sunday.”
Processing. Just found out via 23&me that I have a half sister I never knew I had. She’s crazy cool and I look forward to getting to know her better :)
I want to try clojure development with emacs.
I’ll be installing and configuring spacemacs with CIDER, then writing a simple web application using the Luminus framework
My wife and I are going to turn off our phones, tablets, laptops, etc at 6:30pm tonight (Friday) and we won’t turn them back on until Sunday morning. We have a few activities planned, along with some blocks for napping, reading, yoga, and general relaxation.
working on my Twitter bot that uses perceptual hashing to detect when North Korean tv goes live.
Heckin’ resting after being on a work trip to Brazil for 12 days. …if my flight ever actually lets me board in this benighted airport.
Maybe playing with Vulkan too. It’s been a while, and I want to make at least a prototype point-cloud viewer tool.
I’ve been working on a C64 assembler implemented as a Ruby DSL, as practice with DSL stuff, and to make it easier to import modules with good namespacing than I’ve been able to accomplish in other tools.
Wrangling a Bash scripting intro Jupyter notebook to host on Binder using Nix. Because why not?
Working on getting back into livecoding, been a couple years and enjoying recreational programming again
Getting out of the city and going hiking. Might visit an art gallery nearby too.
I had planned to visit a friend but then i got Covid. So i am staying home and try to get healthy again.
I might put together a very simple note system that fits with my immediate flow, having seen a few people post about that this week. More or less, i only type notes from my computer, so it should be easy to write and consume from there, where I also do my work. Also, infrequently, I want to refer to my notes using my phone, so l will have a very minimal web interface on top. Probably slap a text search on top. No tags, no categories, l will lean on the search functionality for that. Initially I thought of using codesearch for that, and maybe rank the search results by frequency of search terms or something. Idk. I want it to be really simple to use, and have zero frills.
Otherwise I’m feeling a little down and overwhelmed and professionally bored and I’m probably going to use Final Fantasy XIV as a temporary cure for that.
Realistically… checking the Guardian liveblog more often that I should for updates on the invasion of Ukraine.
I’m also working my way through reading a machine translation of Foundations of Geopolitics from Russian to English and it’s frightening how clearly it lays out Russia’s actions over the past twenty years.
Outside of following politics, I’m relaxing with a few beers watching the rugby, enjoying the somewhat normal atmosphere of the pub now that restrictions are almost completely lifted in Ireland (mask wearing isn’t technically gone until Monday, but outside of public transport and retail, there is very little observance)
Trying to learn golang more seriously. Doing a number of small projects on https://gophercises.com/.
Also been digging around in some larger open source go projects like Caddy.
Updating my resume. Looking to pivot to offensive application security, which gives me somewhat more joy than writing software. It will be a bit of a step down in terms of seniority, which is interesting.
Where are you based? Various MSRC teams are hiring (too late to register now but one of my collaborators there is running a CHERI CTF at BlueHatIL next week, to give you some idea of the kinds of fun things that they get up to).
Boston area, which is definitely a plus for finding these types of positions. However, I’m getting the sense that defensive has a lot more openings. :-) It really doesn’t float my boat, though.
There’s a lot of overlap. The MSRC folks that I work with do a mixture of:
The last category includes red teaming the stuff that we’re doing. As someone doing security research, it’s fantastic to be able to throw prototypes at experienced exploit writers and see how they do at breaking them. Generally people seem to do a mixture of offensive and defensive work, since it’s hard to do either well without understanding the opposing side.
Oh, for sure. There’s no aspect of security I can think of that doesn’t involve both. Makes the terminology hard.
I guess the distinction I would draw is that I mostly don’t enjoy defensive as a job role. The closest I come to that is that I do enjoy writing secure software, which is a defensive role at heart but isn’t generally categorized as “defensive security”. Usually that term entails incident response, threat-hunting, monitoring, or something similar, and that’s not really my cup of tea. (I’ve taken an incident response role for the past couple years as my 20% time at work, more or less. Important, but not satisfying.) When it comes to deployed systems, I’d far rather be finding vulnerabilities than doing anything else. When it comes to design and development, I’m much less picky. :-)
I wrote a pirate-themed wordle clone called arrdle in clojurescript/re-frame. The answer is always a 5-letter
a+r+
. Needs a little more polish then I’ll post it.Can always win in two, right? (Like https://jamesl.me/bytle/)
Taking part in my first game jam - the Bevy Jam!
Mowing lawn, what a notion. Here the lawn is under about a foot of snow!