Sign in

Eric Chiang

@ericchiang.bsky.social
121 followers 122 following 43 posts

@oblique.security. Ex Google Security, CoreOS. ericchiang.github.io

PostsRepliesMedia
Eric Chiang @ericchiang.bsky.social · 10/12/2025
Bad news everyone
000
Eric Chiang @ericchiang.bsky.social · 16/05/2025
Every day I'm glad my job isn't staring into the IAM abyss of a large Cloud org. matduggan.com/iam-is-the-w...
So that's effectively the AWS story, which is terrible but at least it's possible to cobble together something that works and you can audit. Google looked at this and said "what if we could express how much we hate Infrastructure teams as a service?" Expensive coffee robots were engaged, colorful furniture was sat on and the brightest minds of our generation came up with a system so punishing you'd think you did something to offend them personally.
010
Eric Chiang @ericchiang.bsky.social · 14/03/2025
Quick reminder:
121
Eric Chiang @ericchiang.bsky.social · 12/03/2025
"Vibe coding will ruin the quality of our codebase!" The codebase: github.com/pandas-dev/p...
A Python code comment that says "Welcome to the spaghetti factory"
110
Eric Chiang @ericchiang.bsky.social · 12/12/2024
Good news - we've increased "encryption of data both at rest and in transit" by more than 10%! I'm sure we'll finish the rest of that whole "zero trust" thing in time for the holiday freeze. www.whitehouse.gov/wp-content/u...
000
Eric Chiang @ericchiang.bsky.social · 28/11/2024
Forcing users set a PIN is the "one weird trick" solution to all hard security problems
Google Password Manager

Create a recovery PIN
This helps you access your saved passkeys on any device
000
Eric Chiang @ericchiang.bsky.social · 14/11/2024
Also, to get to that dialog, you're first prompted to create an unrecoverable local key... Surely there's a better default here?
Create a passkey for localhost

This passkey will only be saved on this device

(Save another way) (cancel) (continue)
110
Eric Chiang @ericchiang.bsky.social · 14/11/2024
Cleaning up this dialog would go sooo far Like, just give me a list of Cloud providers and/or password managers I use. I have no idea why choosing my Pixel is different than Google Password Manager or if those share storage.
Choose where to save your passkey for localhost

- Google Password Manager
- iCloud Keychain
- Pixel 8 Pro
- Pixel Tablet
- Use a different phone, tablet, or security key
110
Eric Chiang @ericchiang.bsky.social · 10/11/2024
Nothing makes me feel safer than the phrase "secure, locked PDF format"...
000
Eric Chiang @ericchiang.bsky.social · 10/11/2024
Apparently the Alameda county vote count is taking super long because (checks notes) CA mandated PDF as the interchange format? From @berkeleyside.bsky.social www.berkeleyside.org/2024/11/08/a...
100