I did some reversing/exploring on a widely used IoT product for fun this week, and here’s what I found:

- embedded Linux on an SD card
- SD card not encrypted
- developed by a third party on behalf of the end customer who makes the actual device this thing is connected too
- runs the code in docker containers from a private container repo
- docker credentials for private repo stored locally
- can use docker credentials to access containers for all of third parties customers, not just the one who makes the device
- GitHub creds in bash history
- can access source code for all customer projects using said creds

So things are going well over there.

Dear #OpenSource folks, I'd like to offer #UX help to your teams. I've tried "making a small PR" on projects and it turns out that's TERRIBLE advice for a UX designer. The PR is usually misunderstood or ignored. I don't fault the teams for this! It's just the wrong tool for the job.

So I'm trying something different. I'm offering free consulting time to any project that wants it. Sign up here: https://cal.com/scottjenson/exchange

You’ve heard of Agile management

You’ve heard of test driven development

You’ve heard of pushing to prod on Friday before leaving for the weekend

You’ve even heard of vibe coding

But may I introduce you to “push driven Agile Vibe-based development”?

It takes the best parts of all these concepts and merges them into one seamless process, from starting development with no clear plan, to vibe coding, to no testing, with forced pushes to prod every Friday afternoon!