Aug 5, 2019
1 mins

recorded on the iPhone using Tincup Voice in the safari browser Tincup Voice is pretty easy to use. You go to the web form on your iphone using safari, supply a post title, your user name and your email address and click the record button and begin speaking. Once you’re done speaking, you click the stop record button and the recording that you’ve just made is sent to S3 and from there is sent into the transcription service.

Aug 1, 2019
2 mins

recorded on iPhone using the default Safari browser This is a post about integrity. A couple of days ago, there was news that Capital One credit card company had been hacked.  A former AWS engineer utilized her knowledge of how AWS works to gain access to one of the AWS roles that Capital One used to store customer data in S3, which is their simple storage service. Once she gained access to that account, or pardon me, that role she was able to download just scores and scores and scores of customer data files from S3.

Jul 26, 2019
3 mins

recorded on iMac using the Chrome browser This post is about securing S3 assets. Certainly, S3 has been used to back applications for a long time. Uh, no big surprise there - it works. Well, this post is about a particular scenario that I found challenging to get right and had a couple of edge cases. A very obscure case is that could leak confidential member data. And by member data, I mean, posts.

Jun 25, 2019
2 mins

Written by John Minnihan, No Risk, No Reward publishes analysis of the technology & internet sector, which emphasis on the utility, business and ethics of technology and those who create it. John is a technologist with a background that includes repairing some of the earliest PCs at the component level & inventing hosted source control. Freepository, the first site that allowed developers to collaborate on source code, securely managed 3 billion lines of code for members in over 120 countries.

Jun 23, 2019
3 mins

I received a DNA test kit for Father’s Day. I’m not going to use it. Here’s why. Submitting a DNA test to Ancestry requires signing up for an account and agreeing to their terms of service. I can imagine lots of people do this without actually reading the ToS. The Ancestry ToS is a contract. When you sign it, you’ve entered into an agreement that allows them to, among other things, take an in-perpetuity license to your DNA.