We’re at that time of year where we go through everybody’s salary and makes sure it’s reasonable. We’re up to about a dozen in-house software developers, and we’d been paying them based on a compensation system developed by our cousins at Fog Creek, which is different enough from Stack Exchange that there was some chafing.
So we sat down and thought out developer compensation from basic principles, and came up with what we feel is a pretty robust way to pay great people. Here were the core principles on which the system is built: …
Where I work I'm forced to change my password every 90 days. This security measure has been in place in many organizations for as long as I can remember. Is there a specific security vulnerability or attack that this is designed to counter, or are we just following the procedure because "it's t...
Do the U.S. export laws around AES-256 apply to applications hosted in the cloud?
I asked advances in usability for cryptography/authentication and one of the commenters raises a good point: should this be in Security.SE?
Is there a good rule of thumb between the two? e.g. if it has actual algorithms in mind, should it stay here?
I got thinking about how webcams over MSN Messenger worked. After some digging on Google, I found that the camera stream on a port in the 6000's.
It then occured to me - I don't allow that reem of ports to be open on my router - yet the webcam stream works when I chat with a contact?
How is thi...
