The Canadian government's plan to combat auto theft is to ban the Flipper Zero: https://www.canada.ca/en/public-safety-canada/news/2024/02/federal-action-on-combatting-auto-theft.html
Seriously, WTF?

so because my keyboard has no arrow keys I often use ctrl+p/ctrl+n to access my bash history, but this never seems to work correctly in docker containers...

I just learned that docker uses ctrl+p,ctrl+q as an escape code to exit the session. Disabling this and I can browse history again!

`docker attach --detach-keys 'ctrl-q,q'`

the struggle was real

Lest anyone tell you otherwise, we're decades behind the bad guys as far as detection on Linux.

Cado Security reanalysed a CrowdStrike report in 2022 and found a 20-year old piece of malware.

Why am I mentioning this? Because I just randomly clicked my way to the Cado link whilst going through some of their more recent reporting on Qubitstrike.

This isn't the first time that *old* malware has reappeared e.g. Luckscan as used by UNC1945/LightBasin and it won't be be the last.

Interestingly (for me at least), it's another example of malware poisoning argv[0], something we've been looking to add to ATT&CK recently and collecting evidence for.

I have interviewed 100s of candidates for software engineering positions.

I’ve done take-home tests, in person challenges, pair programming with the candidates.

I've had folks punch the whiteboard in frustration, refuse to do the task because it was beneath them, confidently produce an incorrect solution and then argue with me about it being wrong, and demonstrate they knew nothing about a language they claim to be an expert in. I've also had folks, largely from anxiety, freeze up entirely, make silly mistakes, and go down a wrong path and get stuck.

These types of interviews are far from perfect. I personally dislike them as I also experience crippling anxiety in those situations. They can provide useful information but only if you focus on how the person worked through the problem, not whether they got a right answer. Most of the time, I would tell the candidate that I did not expect them to finish and that I was looking at their approach, not the solution. Not only did this put them at ease early on, it let them focus on showing the skills that I was evaluating them on.

In other words, a significant part of why everyone hates these interview questions is that the recruiter and interviewer failed to set expectations. There's a vast array of books on how to do better as an interviewee but few on being a better interviewer. Even if there were, few companies put any incentives in place to be a better interviewer. Most of the time, there is an implicit disincentive of getting more interviews.

@thelinuxcast red nubs ok?

A new version of the AWK book is coming out! In 2023!
https://awk.dev

#unix #awk

@ned @IPEdmonton

Americans: I use miles and pounds

Europeans: I use kilometres and kilograms

Canadians: [snorting a line of assorted measuring systems] I'm 5'3", I weigh 150Ibs, horses weigh 1000kgs, my house is an hour away and I drive 80 km/h to get there, I need a cup of flour and 1L of milk

I present to you the 90s Band Alignment Chart.

This is a reminder to use https://www.movetodon.org one more time before the watertight doors on the Titanic close

@alberg Ironically that link to blacklight has a tracker embedded in the URL, and interestingly blacklight seems to discard UTM parameters from URLs

Oh hey, I keep forgetting to do music posts here. So here's Hepcat. If you don't know Hepcat, they're an absolutely amazing ska band from LA who have been around in some form or another for over 30 years (I first saw them in 1993). They put on amazing live shows with a ton of energy, so I went for a live clip... https://www.youtube.com/watch?v=EdST9suL3gg

@crash0ver1d3 @hacks4pancakes Just posting this on the off chance you haven't seen it https://ciechanow.ski/mechanical-watch/ #watches #MechanicalEngineering

He spends more time at my workbench than I do. The two of us completed a comparable number of #electronics projects last year #caturday #cats #CatsOfMastodon

@hacks4pancakes great article, lots of food for thought.

I'd love to hear how resume styles have changed compared to eg. 5 years ago

Accordion to a recent survey, replacing words with the names of musical instruments often goes unnoticed.

@fabian_bader If you split work and private then you would need a backup for each, right?

I think I'm going to need a spreadsheet soon to track which keys are enrolled where

Unscientific #2FA poll:

How many #FIDO #U2F #WebAuthN hardware keys do you have? Do you enroll the same ones in every service that supports them?

All Your Face.

TSA going hogwild with facial recognition is going about as well as you'd expect, "but you can opt out". YK Hong: Since folks asked what happens whenever I opt out of facial recognition, I documented it for you while going through US...
https://jwz.org/b/yj8C