April King
@april.social
Staff Security Engineer at some random tech company, previously Mozilla, Dropbox, and (pre-Elon) Twitter. Has read @kateconger.bsky.social’s autobiography.
web @ grayduck.mn // also github.com/april
web @ grayduck.mn // also github.com/april
as someone who used to work at twitter and who spent the last half-decade working with T&S teams, this whole aaron thing (where the bluesky head of trust liked a porn scam post) almost stretches incredulity.
imagine designing a social media network in the 2020’s with public likes.
imagine designing a social media network in the 2020’s with public likes.
December 20, 2024 at 7:02 PM
as someone who used to work at twitter and who spent the last half-decade working with T&S teams, this whole aaron thing (where the bluesky head of trust liked a porn scam post) almost stretches incredulity.
imagine designing a social media network in the 2020’s with public likes.
imagine designing a social media network in the 2020’s with public likes.
was asked a really interesting question in an interview yesterday: given a budget, which areas of security spending produce the greatest and worst (or negative) ROI?
my answer:
positive: SSO/OAuth, hardware keys
worst: DAST, DLP, honorable mention to poorly configured IDS’s
what’s your answer?
my answer:
positive: SSO/OAuth, hardware keys
worst: DAST, DLP, honorable mention to poorly configured IDS’s
what’s your answer?
December 10, 2024 at 4:07 PM
was asked a really interesting question in an interview yesterday: given a budget, which areas of security spending produce the greatest and worst (or negative) ROI?
my answer:
positive: SSO/OAuth, hardware keys
worst: DAST, DLP, honorable mention to poorly configured IDS’s
what’s your answer?
my answer:
positive: SSO/OAuth, hardware keys
worst: DAST, DLP, honorable mention to poorly configured IDS’s
what’s your answer?
Handling Cookies is a Minefield:
Inconsistencies in the HTTP cookie specification and its implementations have caused a situation where countless websites (including Facebook, Netflix, Okta, WhatsApp, Apple, etc.) are one small mistake away from locking their users out.
grayduck.mn/2024/11/21/h...
Inconsistencies in the HTTP cookie specification and its implementations have caused a situation where countless websites (including Facebook, Netflix, Okta, WhatsApp, Apple, etc.) are one small mistake away from locking their users out.
grayduck.mn/2024/11/21/h...
November 21, 2024 at 5:11 PM
Handling Cookies is a Minefield:
Inconsistencies in the HTTP cookie specification and its implementations have caused a situation where countless websites (including Facebook, Netflix, Okta, WhatsApp, Apple, etc.) are one small mistake away from locking their users out.
grayduck.mn/2024/11/21/h...
Inconsistencies in the HTTP cookie specification and its implementations have caused a situation where countless websites (including Facebook, Netflix, Okta, WhatsApp, Apple, etc.) are one small mistake away from locking their users out.
grayduck.mn/2024/11/21/h...
close, it’s actually:
input -> unexpected condition -> unhandled exception
input -> unexpected condition -> unhandled exception
October 26, 2024 at 2:14 PM
close, it’s actually:
input -> unexpected condition -> unhandled exception
input -> unexpected condition -> unhandled exception
“hey babe, what do you wanna watch tonight?”
“I dunno, something red maybe?”
“I dunno, something red maybe?”
February 28, 2024 at 5:26 PM
“hey babe, what do you wanna watch tonight?”
“I dunno, something red maybe?”
“I dunno, something red maybe?”
happy halloween everyone, please enjoy this costume my son wore a couple years back of himself dressed up as a TI-89 calculator
(costume designer: my talented wife)
(costume designer: my talented wife)
October 31, 2023 at 7:51 PM
happy halloween everyone, please enjoy this costume my son wore a couple years back of himself dressed up as a TI-89 calculator
(costume designer: my talented wife)
(costume designer: my talented wife)
finally a vehicle that will protect me from kindergarteners with hammers 😮💨
October 21, 2023 at 5:32 PM
finally a vehicle that will protect me from kindergarteners with hammers 😮💨
new septum piercing who dis
October 15, 2023 at 7:36 PM
new septum piercing who dis
apple having “video effects” such as rising balloons on by default in macOS Sonoma has got to be one of the greatest trolls of all time.
(as my therapist discovered during our session yesterday)
(as my therapist discovered during our session yesterday)
October 3, 2023 at 8:20 PM
apple having “video effects” such as rising balloons on by default in macOS Sonoma has got to be one of the greatest trolls of all time.
(as my therapist discovered during our session yesterday)
(as my therapist discovered during our session yesterday)
dear diary,
thankfully nobody will ever know that my 10-year-old son just kicked my ass at DDR. 😮💨
thankfully nobody will ever know that my 10-year-old son just kicked my ass at DDR. 😮💨
September 24, 2023 at 10:15 PM
dear diary,
thankfully nobody will ever know that my 10-year-old son just kicked my ass at DDR. 😮💨
thankfully nobody will ever know that my 10-year-old son just kicked my ass at DDR. 😮💨
I appreciate Amazon having such a generous limit.
As someone who types 60 words per minute for 17 hours per day, I was worried I wouldn’t be able to publish my three daily novels.
arstechnica.com/information-...
As someone who types 60 words per minute for 17 hours per day, I was worried I wouldn’t be able to publish my three daily novels.
arstechnica.com/information-...
September 24, 2023 at 12:45 PM
I appreciate Amazon having such a generous limit.
As someone who types 60 words per minute for 17 hours per day, I was worried I wouldn’t be able to publish my three daily novels.
arstechnica.com/information-...
As someone who types 60 words per minute for 17 hours per day, I was worried I wouldn’t be able to publish my three daily novels.
arstechnica.com/information-...
the new iOS live voicemail feature is going to save me from having to deal with an absolutely immense about of bullshit
September 19, 2023 at 5:51 PM
the new iOS live voicemail feature is going to save me from having to deal with an absolutely immense about of bullshit
things are going great over on t2
September 6, 2023 at 10:28 PM
things are going great over on t2
why don’t doctors ever tell you that one of the side effects of HRT is the ability to move any number of spaces horizontally, vertically, OR diagonally?
August 17, 2023 at 1:20 PM
why don’t doctors ever tell you that one of the side effects of HRT is the ability to move any number of spaces horizontally, vertically, OR diagonally?
the city came by to inspect my rain garden
August 12, 2023 at 1:13 PM
the city came by to inspect my rain garden
I’ve spent the last 20 years of my career riding the gravy train of “being good at Google,” but now that Google search results are awful I guess I’ll need to become good at something else.
August 11, 2023 at 1:45 PM
I’ve spent the last 20 years of my career riding the gravy train of “being good at Google,” but now that Google search results are awful I guess I’ll need to become good at something else.
vehicular biologists like myself truly appreciate the sexual dimorphism of the Ford F-150.
on the left, the industrious 1987 F-150, is commonly found at construction sites and farms.
on the right, the 2023 F-150, with its vestigial flatbed, largely spends its time grooming and fetching groceries.
on the left, the industrious 1987 F-150, is commonly found at construction sites and farms.
on the right, the 2023 F-150, with its vestigial flatbed, largely spends its time grooming and fetching groceries.
August 9, 2023 at 3:53 PM
vehicular biologists like myself truly appreciate the sexual dimorphism of the Ford F-150.
on the left, the industrious 1987 F-150, is commonly found at construction sites and farms.
on the right, the 2023 F-150, with its vestigial flatbed, largely spends its time grooming and fetching groceries.
on the left, the industrious 1987 F-150, is commonly found at construction sites and farms.
on the right, the 2023 F-150, with its vestigial flatbed, largely spends its time grooming and fetching groceries.
one of my favorite command line discoveries is that of “transient prompts,” where you can get a dense, multi-line, information-filled prompt that doesn’t pollute your backscroll.
August 8, 2023 at 1:14 PM
one of my favorite command line discoveries is that of “transient prompts,” where you can get a dense, multi-line, information-filled prompt that doesn’t pollute your backscroll.
since today is urbanist drama day about whether north american cities can be saved:
my city went from 153 (92 separated) miles of bike paths in 2015 to 212 in 2023. the 2030 bike plan calls for 335 miles by 2035, 245 miles of it separated.
it's hard but it is getting better.
my city went from 153 (92 separated) miles of bike paths in 2015 to 212 in 2023. the 2030 bike plan calls for 335 miles by 2035, 245 miles of it separated.
it's hard but it is getting better.
August 1, 2023 at 3:36 PM
since today is urbanist drama day about whether north american cities can be saved:
my city went from 153 (92 separated) miles of bike paths in 2015 to 212 in 2023. the 2030 bike plan calls for 335 miles by 2035, 245 miles of it separated.
it's hard but it is getting better.
my city went from 153 (92 separated) miles of bike paths in 2015 to 212 in 2023. the 2030 bike plan calls for 335 miles by 2035, 245 miles of it separated.
it's hard but it is getting better.
Every Minnesotan dreams of being a snowbird: having a cabin up north near the border during the summer but then migrating to the warmth of the far south (Minneapolis) to live out the winter.
July 28, 2023 at 1:08 PM
Every Minnesotan dreams of being a snowbird: having a cabin up north near the border during the summer but then migrating to the warmth of the far south (Minneapolis) to live out the winter.
One of the upsides of Twitter rebranding to X is that maybe someday I’ll again be able to tell people that I worked at Twitter instead of clarifying that I worked at “pre-Elon Twitter.”
July 24, 2023 at 3:37 PM
One of the upsides of Twitter rebranding to X is that maybe someday I’ll again be able to tell people that I worked at Twitter instead of clarifying that I worked at “pre-Elon Twitter.”
Me: Did you hear about the guy who got fired from the keyboard factory?
Wife: 😑
Me: He kept skipping his shifts.
Wife: 😑
Me: The situation was out of control. They had no other options.
Wife: 😑
Me: Now he spends all day drinking at the space bar while posting on his alt account.
Wife: 😑
Wife: 😑
Me: He kept skipping his shifts.
Wife: 😑
Me: The situation was out of control. They had no other options.
Wife: 😑
Me: Now he spends all day drinking at the space bar while posting on his alt account.
Wife: 😑
July 21, 2023 at 6:04 PM
Me: Did you hear about the guy who got fired from the keyboard factory?
Wife: 😑
Me: He kept skipping his shifts.
Wife: 😑
Me: The situation was out of control. They had no other options.
Wife: 😑
Me: Now he spends all day drinking at the space bar while posting on his alt account.
Wife: 😑
Wife: 😑
Me: He kept skipping his shifts.
Wife: 😑
Me: The situation was out of control. They had no other options.
Wife: 😑
Me: Now he spends all day drinking at the space bar while posting on his alt account.
Wife: 😑