Terence Eden. He has a beard and is smiling.

Terence Eden’s Blog

Theme Switcher:

What's the optimal length for a 2FA code?

· 10 comments · 900 words · Viewed ~697 times


Screenshot of a text message. It says "Your one time passcode is 1031."

The other day, a company sent me a 2FA code which was only four digits long. I'll admit, this weirded me out. Surely 4 is just far too short. Right? I think almost every 2FA code I've seen has been 6 digits long. Even back in the days of carrying one of those physical RSA fobs, 6 has been the magic number. But why? A 2FA code is meant to prevent a specific class of problem. If an attacker…

Solar Panels - payback period during a time of rising energy costs

· 22 comments · 400 words · Viewed ~1,186 times


Graph showing how much money our solar panels have earned from exporting.

This is going to be a very unemotional, numbers-based blog post. I've rounded the figures to make it more readable. And I've put some pictures in to make it slightly more interesting. We have 5kWp of solar panels on our roof. The panels generate about 4,200kWh per year. Mostly in summer, but a decent amount in winter. Over a year, we export about 2,800kWh. That is what we sell back to…

How To Write A Cover Letter For A Job

· 6 comments · 750 words · Viewed ~2,964 times


A golden envelope.

I've just finished reviewing a few dozen CVs and Covering Letters. Almost all of them were awful! Candidates - I beg you - make this easy for me! I have been given a fixed set of scoring criteria and you've given me a 2,000 word essay on your life, loves, and hopes for the future. I've only got a few minutes per candidate to read, digest, rank, and score each application. Here's my 100%…

Review: Meta Quest 2 - first impressions

· 9 comments · 1,250 words · Viewed ~331 times


A VR headset.

The Meta Quest 2 is almost amazing. It is a tantalising glimpse of a future which isn't quite here yet. I dislike Facebook's Meta's vision of the Metaverse - but the tech is undoubtedly fun when it works. I remember using VR way back in the 1990s. When on holiday, games arcades often had a VR helmet. I wasted all my pocket money on virtual tanks, creeping through virtual dungeons, and…

Book Review: Binti - Nnedi Okorafor

· 1 comment · 200 words


Three book covers featuring a young African woman painting her face with clay.

Binti is an absolute treat. I've not read much Afro-Futurism, but what I have has been truly excellent and entertaining. What is it like to try to honour your ancestors while feeling the call for adventure? It's a topic which has been explored ad infinitum but rarely with such passion. Why do old men fear powerful young women? Binti isn't Buffy - she's a much more complex cipher for a million…

Responsible Disclosure: XSS in Macmillan's Website

· 350 words · Viewed ~249 times


Screenshot of the Macmillan website. The search box has some HTML in it - the page now looks like it says "Please enter your credit card details" with a big submit button.

Another day, another unfiltered reflection of user-supplied content! You know how this goes by now. You type into a search box <em>test and the whole page suddenly turns italic. Luckily, the Macmillan Publishers' website filtered out any <script> elements it encountered. But that still leaves the attacker with the ability to draw SVGs over the page or, more maliciously, start harvesting…

The point of a dashboard isn't to use a dashboard

· 12 comments · 400 words · Viewed ~2,339 times


Colourful graphs and charts. Image by Yvette W from Pixabay.

Every so often, an employer asks me to help make a dashboard. Usually, this causes technologists to roll their eyes. They have a vision of a CEO grandly staring at a giant projection screen, watching the pretty graphs go up and down, and making real-time decisions about Serious Business. Ugh! What a waste of time! The thing is - that's not what a dashboard is for. And that's generally not why a …

Book Review: Animal, Vegetable, Criminal - Mary Roach

· 300 words


Book cover featuring a grizzly bear in front of a police line up.

The book starts by referencing one of my favourite book - The Criminal Prosecution and Capital Punishment of Animals. That book looks at the history of criminal trials of animals and gets in to the philosophy about whether a flock of geese can be considered liable for the damage they cause. It is a deeply weird, but totally enlightening book. This book is a bit more of a roving travelogue. Roach …

Book Review: The Historian - Elizabeth Kostova

· 1 comment · 250 words


A blood-stained book cover.

This is a massive tome. Or do I mean tomb…? What if you discovered that your widower-father was not a mild-mannered historian but, instead… A VAMPIRE HUNTER! The caper takes us all over Europe - a veritable travelogue of bustling capitals and dusty backwaters. It holds itself ever-so seriously - occasionally dropping into the meta-narrative of fictional vampires - but always treating the got…

Game Review: Stray (PS4)

· 1 comment · 750 words


Box art showing a ginger cat.

The philosopher Thomas Nagel wrote "What Is It Like to Be a Bat?" and attempted to show that we can never really understand another living creature's consciousness. I had hoped that Stray would answer the question "What is it like to be a cat?" But it doesn't. Frankly, it doesn't even try. It feels like the developers lost the courage of their convictions. Cats can see in the dark - but your…

DNS Esoterica: BIMI - SVG in DNS TXT WTF?!

· 4 comments · 750 words · Viewed ~1,448 times


Screenshot of an email.

You've been on the Internet a long time, right? Of course you know what BIMI is. All the cool kids do. But, for those of you who aren't hip to the jive of the Infobahn... BIMI (Brand Indicators for Message Identification) is a new standard that can curb the issue of online impersonators. ... BIMI is a new standard that enables you to include your company’s logo alongside the emails you send. T…

Theatre Review: & Juliet

· 1 comment · 400 words


Poster for & Juliet. A Black woman with short hair stands in front of a neon heart pierced with an arrow.

About five minutes into the show I already had tears of laughter streaming down my face. I didn't stop laughing and squealing with delight until the curtain call. The plot - unusual for a jukebox musical - is relatively well thought through. What if Juliet didn't die at the end of Romeo + Juliet? What if she left Verona to seek her heart's desire? And, much like a Shakespeare comedy, there's no…