Disqus - Latest Comments for joej

Re: http://elasticthreads.tumblr.com/post/215794982

joej — Mon, 17 Jan 2011 11:39:29 -0000

dead Drop.IO source for this

Re: jQuery Plugin: Tokenizing Autocomplete Text Entry

joej — Sat, 18 Jul 2009 13:05:54 -0000

OK -- I'm about ready to give up on this. After many, many days ... I'm just tired of this.

this plugin, on an input field ... followed by a fieldset, legend, or select drop down ... is *always* obscured by those later elements. (can't click/select LI items, can't read them, looks horrible)

Mediocre solution = "make the div.token-input-dropdown position:relative. The containing div will expand to slide later fields/elements -- so you AVOID the problem of having this plugin overlaying them"

However, if you want this plugin's dropdown div to lay on top of everything, you have to do position:absolute.

Once done, you're stuck. I've placed "position:relative;z-index:9999;" on all the token-input-dropdown elements (ul, li, etc.) -- nothing will get these things to move up the z-index and lay on TOP of checkboxes, fieldsets, legends, selects or other form elements.

I've made all my form elements "position:relative; z-index:0" ... and they won't go below this plugin's dropdown.

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> HELP !

EDIT -- note: This is NOT an ie-only problem. This occurs with FF 3.0.x, IE, etc.

Re: jQuery Plugin: Tokenizing Autocomplete Text Entry

joej — Sat, 11 Jul 2009 16:24:19 -0000

++ source code control & allow contributions
One version would be nice, all fixes in that version would be nice.
You have an initial groundswell of folks & attention on this -- please leverage it, so we all can win.

bugs:
IE drop-down slips under, and peeks out from, fieldset after this input
hard to position ... I'm wanting to make some changes to make it easier & all bundled it its own div

Re: The Problem With Selling Information Security as a “Business Enabler”

joej — Sat, 28 Mar 2009 01:14:19 -0000

Definitely. I'm with you on this.

I really do believe that, if infosec/security folks are doing a good job, then there is a gained efficiency (not just robustness, resilience, etc.)

One recent example:
Moving to field a DoD system to the field, we coordinated with the defense contractor to leverage Fortify SCA -- a manual code review would have been VERY costly.

This was focused *only* on the information assurance/security necessity (requirement, policy, etc.) - but they ended up loving its strength, got over their embarrassment at the kind of flaws that were in the code base and, in the end, moved to integrate this as part of their normal development & build practices.

End result: we saved (literally) millions of dollars (or) pursuing a waiver and fielding known-flawed code -- and we both got what we really can value:
- my organization gets improved quality/security and can oversee/audit a practice
- they get something that moves them forward more efficiently and keep us out of their shorts :-)

Nice win -- money and a practical, sustainable practice that dramatically affects what we produce.

==> I'd love to hear other, real-world examples of security + engineer/dev collaboration to produce successes.

Re: The Problem With Selling Information Security as a “Business Enabler”

joej — Fri, 27 Mar 2009 21:27:05 -0000

If you don't perform basic "good health" engineering and development, then *sure* ... security is not an enabler. Security is one of those dumb, slow-you-down, "cross your Ts and dot your Is" anal retentiveness.

However ... if you worry about produce reliable, error free systems or software, then you include good practice, techniques, double-checks, etc as part of the dev/eng processes (called; "security") and you bring in some testing/external checks to ensure you didn't make obvious mistakes.

Looking at the Top-25 CWE list, repeated, low-level, obvious-to-spot and remediate (and abuse) flaws in systems and software ... I'm thinking this:

... The perception that security is a burden, comes bad practitioners: either security or the eng/dev folks on their team. Security is (again) not the problem, its a people problem.

Re: http://www.intrusionlabs.com/testpage/

joej — Sat, 15 Nov 2008 16:43:28 -0000

test comment for /testpage/

Re: A Django Management Command for Amazon S3

joej — Thu, 30 Oct 2008 11:52:31 -0000

This is absolutely useful.
I've been keeping a shell script in a bin/ subdir and running it to sync.
And -- it never occurred to me to move it to a mgmt command !
(duh!)

Thanks for this
-- joe