git ssb

1+

gb / gwenbell.com



Commit 104c9485e2a70389447e09c8245390456e5b6a91

tweak sandboxing

Gwen committed on 7/13/2016, 9:40:31 PM
Parent: 2114dafb4357eda3548bfb423c2ad36cd85beb09

Files changed

layouts/index.jadechanged
layouts/layout.jadechanged
src/sandboxing.mdchanged
layouts/index.jadeView
@@ -1,6 +1,6 @@
11 extends layout
22
33 block content
44
5- <a href="/sandboxing"><img src="/daily/daily-life-list-2016-07-13.jpg" class="profile"/></a>
5+ <a href="/sandboxing"><img src="/sandbox-star.jpg" class="profile"/></a>
66
layouts/layout.jadeView
@@ -13,7 +13,11 @@
1313 .contain(style="margin-top:2.5em;")
1414 .twelve.col
1515
1616 block content
17+ br
18+ br
19+ br
20+ <p style="font-size: .7em;">When not walking around Mexico City, doing yoga or publishing here I discuss things on <a href="https://github.com/ssbc/scuttlebot">sbot</a>. Holler there if you wish.</p>
1721
1822
1923
src/sandboxing.mdView
@@ -4,55 +4,50 @@
44 layout: post.jade
55 collection: blog
66 ---
77
8-<img src="/sandbox-star.jpg" class="profile full">
8+Yesterday I walked [across the heart of Mexico City](https://en.wikipedia.org/wiki/Paseo_de_la_Reforma). As I walked I talked with and listened to [Everett](https://evbogue.com). As with many walks the two of us take, this one lasted longer than either participant anticipated. At one point I checked a parking meter and the clock said 15:30. I mentioned that it was one thirty.
99
10-Yesterday I walked [across the heart of Mexico City](https://en.wikipedia.org/wiki/Paseo_de_la_Reforma). As I walked I talked with and listened to [Everett](https://evbogue.com). As with many walks the two of us take, this one lasted longer than either participant anticipated. At one point I checked a parking meter for the time, not because I cared what time it was (I almost never care what time it is) and the clock said 15:30. I mentioned that it was one thirty.
11-
1210 Everett witnessed me check the time and said what do you mean 1:30? That clock said 15:30. It's three thirty!
1311
14-I didn't notice the five. This is why [Pair Linuxxing](/pairlinuxxing).
12+I didn't notice the five. This is why [Pair Linuxxing](/pairlinuxxing). Good thing I had no place to be.
1513
16-In total, six hours walking, talking, wondering why I don't feel the urge to write. Of course, I feel the urge to write. And do. To a notebook. To a piece of paper. But less frequent is the urge to write to the web.
14+In total, six hours walking, talking, wondering why I don't feel the urge to write. Let me append that. I feel the urge to write. And do. To a notebook. To a piece of paper. Less frequent is the urge to write and then publish to the web.
1715
18-Tough, in essence, is what Everett responded.
16+Tough, in essence, was Everett's response.
1917
2018 I've written since elementary school. I have been a writer since.
2119
2220 If writer I am, write I must.
2321
2422 ### Sandboxing
2523
26-Sandboxing (I starred the word in the image above -- we'll work through each of the five points in this piece). Now, I've just mentioned elementary school, but this isn't that kind of sandbox. In fact, I don't remember spending much time in actual sandboxes when I was little. I've never been a fan of sand.
24+Now, I've just mentioned elementary school, but this isn't the elementary kind of sandbox. In fact, I don't remember spending much time in actual sandboxes when I was little. Not a huge sand fan.
2725
28-Sandboxing is something we do as programmers to protect one part of a program from another. It's one reason to use a VPS (virtual private server) to test experimental tech. It's a reason to use a branch in Git when committing experimental code. Sandboxing was created so that nefarious ne'er do wells can't get their mitts on your bits.
26+Sandboxing is something web developers do to protect one part of a program from another. It's a reason to use a VPS. It's a reason to branch in Git. Sandboxing started so that nefarious ne'er do wells can't get their mitts on bits.
2927
30-Actual bits. Digital bits.
28+If sandboxing can be done with computer bits, it can be done with mental bits. Indeed, I belive it _must be done_ with mental bits. Restrict access to some parts to protect the integrity of the whole system.
3129
3230 ### Commitment to Daily Body Practices
3331
3432 Sit daily. Eat well daily. Practice yoga daily. Walk around the city daily. Easy. Done.
3533
3634 ### Express Appreciation Daily
3735
38-Here's another easy A. Express Appreciation Daily. Been doing so for years, so it's part of a daily routine that I believe leads to deeper connections with the things and people that matter.
36+Here's another easy A. Express Appreciation Daily. Been doing so for years, so it's part of a daily routine that I believe leads to deeper connections with the things and people that matter. Part of sandboxing is focusing on what works, to the minimization of that which doesn't.
3937
4038 ### Acknowledge Difficulty, then Sandbox It
4139
4240 > An application can do little harm if its access to the underlying operating system is appropriately restricted. [Goldberg, et al](https://www.usenix.org/legacy/publications/library/proceedings/sec96/full_papers/goldberg/goldberg.pdf)
4341
44-Here's the thing that programmers know: there will always be nefarious actors. You have to **build the system in such a way as to protect the operating system from said nefarious actors**. It's something I've learned as I've learned to code. You have to assume the worst, rather than assuming the best. It's been one of the hardest things for me to learn, but I'm getting there thanks to sandboxing.
42+I've mentioned I use [microloops](/microloop) to break bad habits. Adding sites that drain me to my hosts file keeps me from checking them. It's analagous to sandboxing: break bad habits so healthy ones can thrive.
4543
46-I've mentioned I use [microloops](/microloops) to break bad habits. Adding sites that drain me to my hosts file keeps me from checking them. It's a sort of sandboxing that I can't recommend highly enough for breaking shitty digital habits.
47-
4844 ### _Siempre es Mejor que Nunca_
4945
5046 I'm experimenting with what can best be called 'forever' technologies. Writing to a cryptographically secure eventually consistent immutable log was at first terrifying.
5147
52-Until I realized forever is better than never. In Spanish that's _siempre es mejor que nunca_. I could never commit to the web again because someone might notice a fuckup and only point it out when I'm launching. Nothing I can do to stop that. Only thing I can do is commit to the forever web knowing I could be paralyzed into never publishing again.
48+Then I realized _forever_ is better than _never_. In Spanish that's _siempre es mejor que nunca_. I could choose never to commit to the web again because someone might notice a fuckup. Nothing I can do to stop that. Only thing I can do is commit to the forever web knowing I could be paralyzed into never publishing again. Or I could write forever, fuckups and all.
5349
54-I don't think Bill Cunningham would be too thrilled about that way of doing business.
50+I choose to write forever. Forever is better than never.
5551
56-Because it's not a way of doing business at all. Forever is better than never.
52+# **REMEMBER FOREVER & WORK FOR THE NOW.**
5753
58-**REMEMBER FOREVER & WORK FOR THE NOW.**

Built with git-ssb-web