Daniel Ehrenberg

Daniel Ehrenberg

@littledan.dev

(((🏳️‍🌈🪗🎹🏊🟥🟨🟪)))

1.8K followers5.1K following1K posts

Pinned

Vegan version works great too! Double the olive oil Double the salt Sautee a bunch of garlic and onions (or any generic sofrito/masala) This was my formula before I moved to Catalunya, but there, I learned that you can actually put *even more* oil and salt and it keeps getting better.

Tips for tricking people into thinking you are a great cook: Double the butter Double the salt Use chicken broth instead of water

I'm excited to go to Brussels for Code & Compliance this week! I'll be in town Monday to Wednesday, so please DM me if you want to meet for a coffee or beer etc.

Daniel Ehrenberg reposted

Bloomberg uses a lot of C++ & contributes to the standard as well as various industry conferences and libraries. I’m looking for an experienced engineer to join a distributed systems team in New York working on our core Deployment Infrastructure for the Bloomberg Terminal 🗽 🧵

Daniel Ehrenberg reposted

The past years have seen horrendous attacks towards trans people. We have a duty to protect the most vulnerable members of our communities. There is no Haskell without the trans people who have shaped it through the years. This June is a month of celebrations, but the struggle continues. ✊🏳️‍⚧️λ

Daniel Ehrenberg reposted

I realize I sound like old man yelling at clouds but... ...in my day WE READ ALL THE CITATIONS BEFORE WE CITED THEM. That's how you GAIN THE KNOWLEDGE TO CITE THEM IN THE FIRST PLACE. Signed: Someone who literally read two whole books on the color blue just to write a single 1000 word article.

Dr. Holly Walters@manigarm.bsky.social

I'm sorry, what? In writing my first monograph, I spent six weeks trying to track down a citation in TWO languages I didn't know. And good thing too, because the citation was wrong. That's scholarship. That's research. You know, the thing we're trained to do?!?

Daniel Ehrenberg reposted

For April Fools, I told the ETSI CYBER EUSR rapporteur group on web browsers that the European Commission was giving us until April 15th to submit our final draft. Got them good! Well, some requests for clarification but actually no laughs… (Real timeline: edit through May, then more review stages)

Daniel Ehrenberg reposted

JavaScript's date object has been tricky for years, but that is changing. The NEW Temporal API brings, 🌍 Easily handle time zones 📆 Precise date math 🕒 Parse ISO strings without errors ⌛ Durations, date ranges, and more. Start experimenting 👇 developer.mozilla.org/en-US/docs/...

developer.mozilla.orgTemporal - JavaScript | MDNThe Temporal object enables date and time management in various scenarios, including built-in time zone and calendar representation, wall-clock time conversions, arithmetics, formatting, and more. It is designed as a full replacement for the Date object.

In addition to development in GitLab, we have regular calls. The next one is tomorrow, Feb 3rd at 3 PM (CET). If you want to join this or a future call, please DM me and we can discuss how that works.

The Cyber Resilience Act mandates that commercial software handle vulnerabilities well. What does that mean exactly? The CRA names sound principles in Annex I Part II, but applying them in practice is another thing.

For this reason, there's an ongoing standardization effort translate these principles into more clear requirements to meet, to make it easier to demonstrate compliance.

Rescheduled for Tuesday, the 27th at 1 PM. Hope to see you there!

Daniel Ehrenberg@littledan.dev

Please join @denjell.bsky.social and me on Thursday, 3:30 PM Central European Time for a deep dive into the draft standard for BROWSERS under the Cyber Resilience Act (CRA). www.stan4cra.eu/event-detail...

This event is postponed. I'll post here again when it is rescheduled.

Daniel Ehrenberg@littledan.dev

Please join @denjell.bsky.social and me on Thursday, 3:30 PM Central European Time for a deep dive into the draft standard for BROWSERS under the Cyber Resilience Act (CRA). www.stan4cra.eu/event-detail...

I’m getting involved in security standards for web browsers as part of my new role at CrabNebula! It’s important to ensure that the web’s security model is not compromised, as browser engines evolve, new browser derivatives become more popular, and brand new web engines emerge.

View full thread

I’m getting involved in security standards for web browsers as part of my new role at CrabNebula! It’s important to ensure that the web’s security model is not compromised, as browser engines evolve, new browser derivatives become more popular, and brand new web engines emerge.

View full thread

I’m getting involved in security standards for web browsers as part of my new role at CrabNebula! It’s important to ensure that the web’s security model is not compromised, as browser engines evolve, new browser derivatives become more popular, and brand new web engines emerge.

View full thread

If you’re interested in getting involved, there are a number of free-to-join, publicly streamed conferences coming up which discuss CRA and the “vertical” standards for particular high-risk products including web browsers:

I’m getting involved in security standards for web browsers as part of my new role at CrabNebula! It’s important to ensure that the web’s security model is not compromised, as browser engines evolve, new browser derivatives become more popular, and brand new web engines emerge.

View full thread

This effort isn’t about mandating new practices from an ivory tower, but rather collecting best practices deployed today and encouraging their consistent usage more broadly. We need browser engineers and web security experts to be involved to accurately document these security best practices.

I’m getting involved in security standards for web browsers as part of my new role at CrabNebula! It’s important to ensure that the web’s security model is not compromised, as browser engines evolve, new browser derivatives become more popular, and brand new web engines emerge.

View full thread

ETSI (a European Standards Organization, like Ecma or W3C but specifically authorized to write standards referenced by EU law) is developing a standard for one way to demonstrate that a browser meets these additional cybersecurity requirements.

I’m getting involved in security standards for web browsers as part of my new role at CrabNebula! It’s important to ensure that the web’s security model is not compromised, as browser engines evolve, new browser derivatives become more popular, and brand new web engines emerge.

The European Union’s new law, the Cyber Resilience Act (CRA) requires all commercial software made available in Europe to meet essential cybersecurity requirements, and correctly calls out web browsers as a high-risk type of product with additional security requirements.

Daniel Ehrenberg reposted

I take a deep dive into Interop 2025; why the project is there, how it picks what browser features to focus on each year, how well it's doing and what the big areas for this year are - a mix of cleaning up existing features and making sure new features arrive already interoperable

thenewstack.ioInterop Unites Browser Makers To Smooth Web InconsistenciesFor the past four years, major browser vendors have collaborated to improve web interoperability by coordinating enhancements to inconsistent browser implementations.

Daniel Ehrenberg reposted

It’s concerning me how overconfident people who want Pierre Poilievre to lose are sounding right now. It’s reminding me how sure people were that Trump would lose. Dont let Trump win in Canada. POLLS DON’T WIN ELECTIONS. TURNOUT DOES. Don’t assume. Vote. #CanadaStrong #ElbowsUp #VoteCarney

If there is a sale of Chrome, the buyer should be required to spend at least 25% of their revenue on the core browser engine and standards development. Browsers are enormously profitable, but a new owner might try to run things for the short term.

Daniel Ehrenberg reposted

European Union Vulnerability Database (EUVD) by European Union Agency for Cybersecurity (ENISA) is valid Option as compensation of the MITRE #CVD. We will see, if and how this will work to address the fashists way of disruption via #Project2025 I whish all the best for #EUVD ❤️ euvd.enisa.europa.eu

Everyone is going crazy trying to implement software supply chain security so that they aren’t deploying code with known vulnerabilities. But with the MITRE news, that might become helpfully scoped down: You can’t ship any new vulnerabilities if there are no more CVEs!

Crazy but not so surprising given the context. Computer security will suffer from continued degradation of the CVE system. Various EU laws mandate the creation of cybersecurity institutions that, in principle, should play a similar role. I hope that can work.

Tib3rius@tib3rius.bsky.social

BREAKING. From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.