Tutorials

Tutorials

Tutorials

Finally Killing SSLv3 On This Server

A weekend chore I put off for a week and a half: patching SSLv3 out of this blog's nginx config after the POODLE disclosure, with the actual lines I changed.

October 24, 2014 · 3 min read

Tutorials

Patching Around POODLE

Google's security team disclosed the POODLE SSLv3 vulnerability this week, and it cost me an evening patching nginx. Here's the one-line fix and why the browser vendors' response matters more than yours.

October 18, 2014 · 3 min read

Tutorials

Killing SSLv3 Before Bed

Google's POODLE disclosure means it's time to kill SSLv3 on your servers — here's the quick Apache and nginx fix, plus why 2014 has felt like one long string of vulnerability patches.

October 15, 2014 · 3 min read

Tutorials

Turning On Two-Step Everywhere (Finally)

After a week of iCloud headlines I finally spent a Saturday turning on two-step verification everywhere, and found out Apple's version still doesn't cover what you'd think it does.

September 7, 2014 · 4 min read

Tutorials

Three Weeks Into the Yosemite Beta

Three weeks into running the OS X Yosemite public beta: what's actually good (Spotlight), what's half-broken (Handoff, iCloud Drive), and why Helvetica Neue is bugging my eyes at night.

August 17, 2014 · 4 min read