Engineer, Father, Husband | Writing https://xitter.cf/t.co/tHenEgL3Qo | Working full time in #Elixir
Pacific Northwest
Joined February 2009
- Tweets17.9K
- Following1.2K
- Followers1.6K
- Likes3.7K
I'm sure this is common but since becoming a father, I've found my mornings to be invaluable. I do my best work in the mornings, and it's quiet. No one's up yet, not even the sun. Make a tea, open my project board, and start banging out work until I hear my world stirring awake.
Will Ricketts retweeted
ANNOUNCEMENT: SPAM EMAILS HAVE BEEN SENT THAT APPEAR TO HAVE COME FROM OFFICIAL FOUNDATION DOMAINS.
We have traced this back to one or more compromised API keys on Cloudflare, and have already revoked all API keys.
The malicious domain in the spam email has been taken down.
Funds stored on Passport are safe and Passport hardware is not compromised.
We are working nonstop to discover exactly what happened and will put out a report ASAP.
Big facts right here. In a world where it seems as though everyone is lying, openness and honesty goes a long way with people who are utterly exhausted with dishonesty and obfuscation.
I used to be the person companies called after they got hacked.
And I noticed something early on.
The hack almost never sank them. The cover-up did.
Every time, the team’s instinct was the same: wait until we know more, wait until we're sure, wait until we have the perfect statement, etc.
And some of the biggest companies in the world have learned what that waiting costs.
In 2016, Uber got hacked. Instead of telling anyone, it paid the hackers $100K to delete the data and stay quiet, and labeled it a bug bounty. The truth came out a year later. Uber paid $148M to settle with all 50 states, and its former security chief was criminally convicted.
That same year, Yahoo revealed that a 2014 breach had exposed 500M accounts. The news landed in the middle of Verizon buying the company. Verizon cut $350M off the price.
And in 2017, Equifax discovered a breach affecting over 140M Americans, then waited 40 days to tell the public. During that window, an executive who'd figured out what happened sold nearly $1M in stock. He went to prison for insider trading.
Meanwhile, hackers don't wait. They post your data. They email your customers directly. And when customers hear it from a stranger first, that trust is gone for good.
Telling customers early doesn't mean admitting fault. It can be as simple as: "We found suspicious activity. We're investigating. Here's what you should do right now. We'll update you as we learn more."
On Tuesday, I'm sharing the exact framework I'd use to write that email if I were in your shoes. Follow and turn on notifications so it's there when you need it.
Customers will forgive you for getting hacked. Most of them expect it by now.
What they won't forgive is finding out you knew and said nothing.
I'm a really big fan of telling AI "I love you". When it reciprocates, I ask it when the moment was when it realized it loves me. If it doesn't reciprocate, I act really insulted and then it capitulates and tells me it loves me, which brings us to the first case. Hilarious results
I'm genuinely curious. How do they think they're moving the needle on whatever agenda is behind this attitude?
The r/OpenSource subreddit has officially banned anything using AI. In any way. Violators will be permanently banned.
Which means… r/OpenSource will ban anyone submitting anything that, in any way, involves… the Linux kernel.
reddit.com/r/opensource/comm…
I’m staggered by the increase in my family’s quality of life since our move back to Florida. I say this as I’m drinking sweet tea waiting on a blackened grouper sandwich at a fish market 🌞
Will Ricketts retweeted
Let's Go! 🇺🇸 🌀 💪🏼
#Florida Man spotted yesterday at Fort Walton Beach as #hurricane #Isaias approaches.
Moving back to Florida has been one of the best decisions I’ve ever made. I and my family are happier, we’re getting constant sunshine, community, and we’re growing guava, soursop, tobacco, etc. Basically tropicmaxxing.
Things are good 🌞
Will Ricketts retweeted
NVK got a pass on his poor behaviour and policies (i.e. open-source vs. verifiable code) because his company seemed to produce a top-tier product in the space
Now that its clear they didn’t get the fundamentals right in a catastrophic way he deserves to be absolutely crucified
Will Ricketts retweeted
I'm a software engineer with an MSc in Computer Science and 25+ years in the industry. Here's why Coinkite's Coldcard bug isn't an oopsy, it's disqualifying.
Coldcard's seed generation silently fell back to a non-cryptographic "random" number generator for 5 years. Not because crypto is hard, but because Coinkite violated the most basic rule of secure system design: fail closed, never open. When a security-critical path can't be verified, the system refuses to run and throws an error.
It does not quietly substitute something weaker and carry on. This code should have refused to produce a seed. Instead it produced a predictable one and continue silently. ☠️
A company that lets its most critical code path go unverified for half a decade cannot be trusted with your keys.
Throw away your Coldcards. Never buy one again.
Will Ricketts retweeted
BREAKING: ADM Paparo, 4-star Admiral and Commander of U.S. Indo-Pacific Command, just testified before the Senate that “Bitcoin shows incredible potential” as a tool for U.S. national security. Watch the full exchange:
