Matt Edwards

One Million Checkboxes

Nolen Royalty built something very cool: On June 26th 2024, I launched a website called One Million Checkboxes (OMCB). It had one million global checkboxes on it - checking (or unchecking) a box changed it for everyone on the site, instantly. What a nifty idea. Flippant and fun, this is the sort of website I miss and think1 I can recall from my college years (late 2000’s into 2010’s). ...

Bypassing airport security via SQL injection

Ian Carroll writing on his blog: The KCM [Known Crew Member] process is fairly simple: the employee uses the dedicated lane and presents their KCM barcode or provides the TSA agent their employee number and airline. Various forms of ID need to be presented while the TSA agent’s laptop verifies the employment status with the airline. If successful, the employee can access the sterile area without any screening at all. ...

On Artificial Intelligence 'Slop'

Craig Hockenberry writing on his blog Furbo.org: As these generative technologies get better, you will be less likely to trust what appears in your search results. This change will happen at an exponential rate thanks to slop being generated from other slop. […] The human component of the web won’t change. People will need answers that they can trust. Folks on the web are also resourceful; they always have been. ...

How did the bike industry get into such deep trouble?

Although it was published back in February of this year, I recently listened to this four-part podcast series on the sudden rise and subsequent fall of demand for cycling during the 2020 COVID-19 pandemic. Fascinating listening with excellent sourcing from industry insiders and bicycle shop owners. ...

Lessons Learned while Automating Fetch of Ansible Vault Encryption Passwords using 1Password CLI

The other day I was unable to decrypt a few of my Ansible Vault encrypted host_var files in a playbook. As best I can tell, the problem was related to my use of an executable vault-password-file and the 1Password CLI for fetching passwords. Follow along for a frightening story and some interesting technical tidbits. Background on how I stored Vault passwords I rely on Ansible Vault to encrypt sensitive data in my homelab Ansible playbooks. I stored the Vault password in 1Password, and retrieve it using the 1Password command line interface (CLI). ...

CrowdStruck

Last Friday the endpoint security company CrowdStrike had a little oopsie: On July 19, 2024 at 04:09 UTC, as part of ongoing operations, CrowdStrike released a sensor configuration update to Windows systems. Sensor configuration updates are an ongoing part of the protection mechanisms of the Falcon platform. This configuration update triggered a logic error resulting in a system crash and blue screen (BSOD) on impacted systems. The sensor configuration update that caused the system crash was remediated on Friday, July 19, 2024 05:27 UTC. ...

Using Cloud Init with Proxmox VM's

Need to spin up some virtual machine’s using Proxmox / QEMU? Below is my approach for using a cloud-init Debian image to make the creation of those VM’s nice and simple. Create the template VM image Start with a cloud-specific image. Each distribution has it’s own set of these. For Debian, you can find them at https://cloud.debian.org/images/cloud/. Read the instructions on that page for which image to download. I’m using the generic Debian 12 Bookworm image for an Intel (AMD64) processor in the qcow2 format. ...

Income Share Agreements at Lamda School

Excellent reporting here by Ben Sandofsky about the fall of coding school / boot-camp Lamda School. In the past, I had believed in the idea of Income Share Agreements (ISAs) which allowed a student to effectively sell “equity” in themselves in exchange for an education. Once the education was complete and the student landed a job, they would pay back X% of their income for Y years up to a maximum cap of $Z. This was in contrast to taking out a loan which would be a fixed dollar amount and have to be re-paid regardless of what that student ended up earning post-graduation. ...

The iPadOS Files App is still a disaster

From Federico Viticci’s overview of challenges facing iPadOS: Out of all the apps I’ve mentioned so far, I want to shine a spotlight on Files. It’s a bad product that needs a fundamental rethink from a design and performance perspective. Files has only marginally improved since its debut in iOS 11 (!), and we’re well past the point of arguing that, well, iPads aren’t meant to have a file manager. Apple has offered a native iPad file manager for exactly half the iPad’s lifetime; that ship has sailed. It’s time for Apple to take the Files app seriously, because this version just doesn’t cut it. ...

Who is selling all this underpriced life insurance?

Asks Matt Levine in two columns on April 30 and May 2: People could take out new life insurance policies specifically to sell to investors. Go to an insurance company, get a $5 million policy, have it pay out to a trust, make an investor the beneficiary of the trust, have the investor pay the premiums, and charge the investor a fee for the exposure. This is called “stranger-originated life insurance,” or STOLI, and it is largely not allowed. ...