Richi edits another book

via Kristina Podnar:

This book, out in March 2019, lets you unleash the power of digital policy. You can sign up now to be the first to hear about the release:

kpodnar.com/book

Hackers love Docker: Container catastrophe in 3, 2, 1...

The day we all feared would come has come. Docker and Kubernetes #containers are revealed to be badly vulnerable—along with LXC, Mesos, and several other container flavors.

An easily exploited flaw means a container can escape its paper-thin walls and execute on the host system—as root. Time to audit your trust boundaries.

Happy Valentine’s Day, DevOps peeps. In this week’s Security Blogwatch, we drop everything and patch.


Read more: techbeacon.com/security/hackers-love-docker-container-catastrophe-3-2-1

FaceTime FauxPas: Sorry-not-sorry about the bug bounty boo-boo

Apple says sorry for the privacy-busting FaceTime bug we talked about last week.

But there’s no apology yet to the kid and his mother who tried their best to report the “FacePalm” bug to Apple, yet kept facing brick wall after brick wall. Although there is the vague suggestion the trillion-dollar company might pay him some money.

In trying to fix its PR fail, has Apple made things worse? In this week’s Security Blogwatch at TechBeacon, Richi Jennings is sorry.


Read more: techbeacon.com/security/facetime-fauxpas-sorry-not-sorry-about-bug-bounty-boo-boo

Remember me?

Hey, it's Richi. … Richi? … Jennings? … Yeah, that guy.

Thanks to the business geniuses at Surpass Hosting for quadrupling my hosting fee, and to the fine folks at Alphabet who are killing Google+, I'm resurrecting my old blog as a web presence.

Apologies in advance for dust and broken links. I'll get to fixing things up as soon as I can.

A lot's happened since my last post in 2011. Maybe I'll tell you about it sometime…

RJA standard terms

Richi Jennings Associates

DUNS: 218782122

Standard terms for the avoidance of doubt (modified September 16, 2016):

1. Richi Jennings Associates (RJA) is the trading name (“t/a” or “d/b/a”) of R Jennings under UK law.
2. RJA is a “disregarded entity”, with no “permanent US establishment” under US law.
3. RJA is a “person” by the definition of the UK/Canada double taxation convention (3rd protocol).
4. The intention of the parties is to create a client/supplier relationship, with no mutuality of obligation.
5. Any statements of time or cost are intended as estimates, unless clearly otherwise stated.
6. The hours worked per week may vary, based on the effort needed to complete the project.
7. Invoices are due for payment receipt by the Due Date: 30 days after the date shown on the invoice.
8. Overdue accounts will be charged commercial interest at the Bank Of England base rate pertaining at the time plus eight percentage points, calculated from the date of invoice on a daily straight-line basis.
9. RJA will be responsible for minor expenses incurred (e.g., local car travel to/from a client site).
10. Major expenses are additional to any estimate or quote, and will be agreed with the client beforehand.
11. RJA is responsible for deciding the methods of fulfilling the contract and location where those methods are used.
12. RJA reserves the right to use substitute or additional workers (e.g., associates).
13. The client reserves the right to refuse any substitute or additional worker offered.
14. The “place of supply” for all services is outside of the European VAT area, unless otherwise agreed.
15. The “place of effective use and enjoyment” for all services is outside of the European VAT area, unless otherwise agreed.
16. While RJA does not currently charge VAT, RJA reserves the right to do so in the future.
17. Copyright does not vest unless and until payment is received in full. In the interim, RJA grants a conditional license, subject to immediate and automatic revocation if payment is not received by the Due Date, as described above.
18. E&OE.