user avatar
Colm MacCárthaigh
@colmmacc
VP / Distinguished Engineer at Amazon Web Services. Also: Open Source and Apache, Cryptography, Irish Music, mediocre Photography.
Seattle
Joined April 2008
Posts
  • Pinned
    user avatar
    After using wifi in 3 airports and 4 planes this weekend, I've created neverssl.com to make logging on a little bit easier.
  • user avatar
    Does anyone else feel that they basically lucked into a high paying career because their interests randomly aligned with scarcity and a rapidly growing field, and that it's nowhere near as hard, or as societally valuable as what teachers, medical professionals and care-givers do?
  • user avatar
    How hilarious would it be if the new iPhones were unveiled and this is the connector?
  • user avatar
    A quick rage-thread about credentials. When security auditors just say things like "Critical credentials need to be rotated every 90 days" you need to fire them into the sun with urgency. Here's what you actually need ...
  • user avatar
    Have you ever needed to generate a random number in code? whether it's for rolling a dice, or shuffling a set, this tweet thread is here for you! There's no reason that it should be easy or obvious, very experienced programmers repeat common mistakes. I did, before I learned ...
  • user avatar
    Yesterday the current Irish president, Michael D. Higgins, signaled that he's going to run for another term. He'll probably be unopposed, with broad support, and no election needed. If you're not Irish, allow me to blow your mind with the state of Irish politics ...
  • user avatar
    I think right around this minute is just about exactly 5 years since the Heartbleed vulnerability in OpenSSL became public. I remember the day vividly, and if you're interested, allow me to tell you about how the day, and the subsequent months, and years unfolded ...
  • user avatar
    The cryptography that is in 'crypto' is merely enough to serve as a foundation myth of mathematical purity and incorruptibility. It is a blinding lustered talisman used as privatized statecraft to support empires of scams. It is not actually good cryptography. A small thread.
  • user avatar
    Would you use a terminal based editor that's a cross between 'cat' and 'vi'? Keyboard shortcuts and multi-line editing without taking over the screen or mental context. Let me know with likes and replies. If there's interest, I'm going to clean this up and get it on GitHub. Demo:
    00:00
  • user avatar
    This table says it all. One of the reasons we're going big on Rust it because it delivers incredible economies, without trading off safety. On Cloud, sustainability is a big motivator, and on devices battery lifetime is the biggest differentiator.
  • user avatar
    Congratulations to @abbyfuller, who is now a Principal Security Engineer at AWS. She was already a Principal, but becoming a security engineer is a very difficult role change and there aren't many Principal SecEngs! Also: now I can never leave my laptop unlocked at home.
  • user avatar
    This Facebook outage is a prime example of one of the unfathomably stupid design decisions in DNS: if resolvers just served the "stale" cache entries, everything would likely be fine right now. The records rarely change, it's madness to treat TTLs like time-bombs.
  • user avatar
    Updated LinkedIn for the first time in a while. I've got a lot to live up to, and thanks to everyone I've worked with! I'm still on-call, still getting paged, still writing code, still going to stand-ups, and love that. I'm told there are no executive washrooms or parking.
  • user avatar
    Last week I spoke about how we build ultra-reliable AWS services. It's my favourite talk that I've given. Everyone I've asked has told me that they learned something new and interesting 😃 Here I'm going to tweet some highlights to tempt you to watch ...