Writing
My Python Development Environment, 2020 Edition 1 week, 1 day ago
For years I’ve noodled around with various setups for a Python development environment. A couple of years ago I wrote about a setup I finally liked; this is an update to that post. Bad news: this stuff still isn’t stable, and I’ve had to make some changes. Good news: the …
My questions for prospective employers (Director/VP roles) 7 months ago
Last time I was looking for a job, I wrote up a list of questions I wanted to ask prospective employees. I just ran across the list again, and figured I’d share. I was looking for a senior management role (Director/VP-level) in Engineering or Security, so the questions are sloped …
IQ isn’t enough to get hired 7 months, 3 weeks ago
I’ve interviewed hundreds of people for technical roles, and a pattern has emerged. In general, we reject many more candidates for social skills than for technical competence. In fact, most technical interview funnels are arranged so that technical screens are earlier. This means that if you reach an interview, you’ve …
Goals aren’t enough; you have to talk about performance, too 7 months, 3 weeks ago
Craig recently wrote about his mixed opinions about OKRs. The crux of his argument, I think, is that communicating goals is the important thing, and that OKRs are a heavyweight tool (with limited success). I agree, somewhat; this post is a "yes, and": OKRs (when done well) do one other …
My interview kickoff script, annotated 11 months, 3 weeks ago
When I interview, I say nearly the same thing at the beginning of the interview. It’s a script I’ve practiced and honed over the years . It’s only eleven sentences, but each has a specific purposes. I’ve iterated on this for years, and it’s pretty tightly honed at this point. …
Speaking
To ••• With Passwords 2 weeks, 4 days ago
A keynote I gave at North Bay Python 2019
How to Ace a Technical Interview 9 months ago
A keynote I gave at PyCon APAC 2019
Let's build a web framework! 2 years, 6 months ago
A tutorial I gave at PyCon US 2017
Implementing multi-factor authentication 3 years, 8 months ago
A talk I gave at dotSecurity 2016
Django's request/response cycle 4 years ago
A talk I gave at Django Under The Hood 2015
Heroku Under The Hood 4 years ago
A tutorial I gave at Django Under The Hood 2015
HTTP in Django 4 years ago
A talk I gave at Django Under The Hood 2015
Minimum Viable Security 4 years, 2 months ago
A talk I gave at DjangoCon US 2015
Elsewhere
📌 Kore4 and Python
There’s a bunch of interesting stuff here—async, automatic ssl—but the seccomp stuff is _really_ fascinating. I wonder how hard it’d be to do this with Django? #
📌 Design better data tables - UX Collective
I really like these patterns. I wonder if there’s a good front-end library that makes this stuff easy? I tend to use django-tables2 on the backend, which handles all the sorting/filtering nicely, but the UI leaves something to be desired. #
📌 Resources for measuring cybersecurity: a bibliography #
📌 AWSume: AWS Assume Made Awesome! | AWSume #
📌 toniblyx/my-arsenal-of-aws-security-tools
A huge list of open source AWS security tools. #