Profile avatar
moyer.dev
Security engineer in KCMO (he/him) https://moyer.dev
4 posts 272 followers 447 following
Prolific Poster

good morning and welcome to 2025

Each and every fresh snow reveals how much we’ve over-designed our streets and roads for cars, making them faster and more dangerous for everyone, and how much space we could reclaim for people and public life if we thought about street design differently. We call them #sneckdowns. #sneckdown

My latest in Bloomberg CityLab: Kansas City is a pioneer using microtransit, one of the hottest ideas in public transit. But KCATA chief Frank White told me microtransit’s costs are astronomical, 10x more than a fixed-route bus. He thinks the hype is overblown. www.bloomberg.com/news/article...

You surely having nothing better to do on a Thankgiving night than reading about the new AWS SSO PKCE authentication flow! blog.christophetd.fr/pkce-aws-sso/ tl;dr: Contrary to device code authentication, it can't be used for phishing, but there's still no way to disable device code authentication

I wrote some guidance on how to use AWS's new RCP feature: www.wiz.io/blog/how-to-...

Does anyone have good resources that discuss authorization, particularly in a distributed system? Not like _how_ but when/where to do it. eg. do you authorize at every network boundary? only at the gateway? everywhere in the code?

We should redesign cities for autonomous kids, not autonomous cars.

we gotta cancel bash yossarian.net/til/post/som...

Hope you all #EKS users like this! aws.amazon.com/blogs/contai...

Re: the DOJ / Chrome story - it's bad news. Browsers are massive and costly. Underdogs like Brave are the wrong benchmark: they tap into Google's work. And there's nothing that ChromeCo can sell to pay its bills that wouldn't hurt users worse than the ad dollars they're relying on today.

Speed reading @skamille.bsky.social & Ian Nowland's new book: Platform Engineering Interesting tidbits in 🧵 paved roads 🛣️: “layers multiple offerings together into easy-to-use workflows” vs railways 🚟 building to fill a "meaningful gap that is not covered by any existing product”

one to two billion files in a folder: an easy weeknight dinner. you will definitely not regret one to two billion files in a folder.

Good morning, #KubeCon Contributor Summit! I hope everyone feels our absence. Like really think about what that means

A quick blog on an interesting potential foot gun in #kubernetes RBAC where GET rights can allow for command execution in pods. raesene.github.io/blog/2024/11...

Very important finding on crosswalks, yield rates, and speed. At 20 mph, 3 out of every 4 drivers yield to a pedestrian in the basic crosswalk. At just 30 mph, that rate drops to 1 in 8 drivers.

This is for those building Kube APIs, in @crossplane_io or any CRD. @_surbaniak and I will dive into Kube API evolution. What's the mental model, which patterns work, which don't. No rants how bad or hard it is. Pure knowledge to navigate the domain. https://sched.co/1i7qn

The cross-sign of ISRG Root X1 by DST Root CA X3 has now expired. 
It's been 10 years in the making, but Let's Encrypt is now a fully standalone certificate authority, trusted by the vast majority of browsers and other devices 🔐

people (on here) yelled at me about this when i said it before but a) you need traffic enforcement and b) speed cameras are vastly preferable to cops.

some Go web dev notes jvns.ca/blog/2024/09...

JEFFERSON CITY, Mo. (AP) — Missouri high court rules a measure to restore abortion rights will be on the ballot, despite Republican opposition.

The people who live in the single-family homes next to the lot that's slated to be turned into an affordable housing complex will always turn out to the community engagement meeting. The people who don't yet live in the affordable housing complex obviously won't. We have to change this system.

ICYMI: Missouri just imposed a new mandate for Kansas City to spend 25% of its general revenue on the police. AND local officials will have no say in how their $ gets spent by the police department—since it's a rare city with no control over the police. boltsmag.org/kansas-city-...

We got tricked by science fiction into thinking a futuristic city is all about flying cars and crystal towers and hologram billboards but what it really looks like is nice apartment blocks, good mass transit, pedestrian zones with shade trees and safe bike lanes.

Can't believe Little Bobby Tables is all grown up and has had their first kid, Ignore All Previous Instructions

This was a fun and challenging feature to build, so happy it's finally rolling out! If you wanna read a bit about how I built the backend for it, check out this blog post - jazco.dev/2024/04/20/r... Roaring Bitmaps are a really neat datastructure and have a lot of uses in large-scale systems :)

I would humbly argue that the Missouri AG arguing that an innocent person should be kept on death row because to reopen his case would destabilize the system is proof that the system most motherfucking definitely needs to be destabilized.

@there.is.no.aarch64.mov re: torn writes in go from mastodon (since i don't have an account there), you may enjoy github.com/saleemrashid...

Induced demand, but the good kind.

New CTF style challenge from Wiz to learn Kubernetes security. eksclustergames.com

hey sorry I missed your text, I am processing a non-stop 24/7 onslaught of information with a brain designed to eat berries in a cave

Last Wednesday evening Kris Nova had a climbing accident and died. All of us that loved her are heart broken and stunned.  She was an amazing person that lived out loud and built connection and community wherever she went.  She will be horribly missed.

I wrote about the racist usernames found on Bluesky, obtained an email investors sent to the team, details about the personalized apologies from the company, and more. https://fortune.com/2023/07/31/inside-bluesky-moderation-crisis-investor-pushback-user-backlash-ceo-apology/

Someone took a very big and heavy old tire, filled it with dirt and plants, and used it to tighten up the turning radius at a corner where drivers turn way too fast. Love this creative bit of DIY traffic calming. (Sent to me by a friend. I'll head out later to see it in action.)

Nothing exemplifies a complete failure to understand the point of science like demanding to settle a scientific issue through the medium of emotionally persuasive public shouting

If a webpage presents one of these popups with proper rendering, it's 100% getting my system/FDE or iCloud password. Maddening security design by Apple.