David Lawrence

@AquaSecTeam did you guys just deleted the entire trivy repo? WTH?

Trivy リポジトリ消えた?? @AquaTrivy github.com/aquasecurity/t…

@HydroPaniked @jacnah63 @MichaelWarbur17 Good breakdown provided (not by me) here reddit.com/r/nextfuckingl…

The world needs this, let’s have Weird Al perform at the next Super Bowl halftime show - Sign the Petition! chng.it/RPBWCdyH via @Change

Why do B2B vendors feel the need to market to all the employees that are forced to use their service...? I'm also convinced nobody actually honors the "do not send me marketing emails" opt-in/out selections on signups.

@JunminLee6 came across your channel via @golangweekly, excellent content! I've been a Gopher for ~6 years and I'm sharing your videos with my team who are all much more recent converts.

@remarkablepaper my reMarkable 2 arrived yesterday and it was well worth the wait. Exceeded my expectations in every way!

@Fidelity not sure if credit card fraud prevention is handled by you directly or Elan Financial Services, but it's a terrible experience. Way behind your previous vendor @AmericanExpress

@Nigelrefowens Would love to take you up on this. Looking forward to hearing how!

If you’re bored and want something to read, will gladly send you a signed copy of my autobiography ‘Half Time’. Will DM you details if you are keen to purchase one.

@MayaKaczorowski They’ve already captured your image when you approached the door... We should carry small rolls of masking tape. Tape over the cameras without doing damage.

When you get somewhere, and they have a Ring doorbell, do you ring it? How else do you get let in? What about your facial data?

iOS’s password manager integration is easily my favorite security convenience feature released on any platform in many, many years

Verifying myself: I am endophage on Keybase.io. rzPEuFJ8O4HED6wWl_kSYqguHtdriWOGRIM2 / keybase.io/endophage/sigs…

Congrats to @levijunkert who will be presenting at #PerconaLive on @SmithRx_PBM's first OSS release Gonymizer (github.com/smithoss/gonym…), a database anonymization tool percona.com/community-blog…

@avideitcher @justincormack @thaJeztah @cpuguy83 @avideitcher pretty much exactly that. Notary has no constraints on that front, content name and location have always been entirely distinct. The restriction lies solely in the docker binaries. I think at least some progress was made with the client side mirror config...?

@justincormack @thaJeztah @cpuguy83 @endophage you mean I should be able to pull/run container image by referencing its content (name+tag+hash) and separately give 0 (local), 1, 2 or many registries from which to try to retrieve it? Makes a lot of sense. I know lots of cos that do weird tagging stuff to make this happen

Transport agnostic container image references is something that has been on the table since the beginning. It has not gotten the time it deserves because vendors just want to control the image and as such propose changes like changing default registry. This is backwards.

Interesting stuff but… why not just use The Update Framework / (TUF) - has additional controls that Fedora doesn’t and it’s open-source @CloudNativeFdn hosted goodness theupdateframework.github.io twitter.com/fedora/status/…

Using a browser's "reader view" on a desktop really highlights how little unique content makes up most web pages.

Some package thief is going to be disappointed today. Somebody stole 2 packages from my front door containing an ID badge reel and ID card sleeve...

Our investor @AstasiaMyers interviews @Docker's @endophage David Lawrence on TUF, Notary & software security @CloudNativeFdn medium.com/memory-leak/do…

I sit down with @Docker's @endophage to discuss @CloudNativeFdn projects #notary and #TUF. @astasia/dockers-head-of-security-david-lawrence-on-tuf-notary-and-the-importance-of-software-security-aaf30b260862" target="_blank" rel="nofollow noopener">medium.com/@astasia/docke…

It's OK, I can forgive you. Interesting seeing the comments on Discovery, I haven't had a chance to watch it yet. twitter.com/nigelpoulton/s…