Tag Archives: security

Talk at a student club at APU: “You need to give up some convenience to be safer online”

Last Wednesday, April 15, 2026, I gave an informal talk at Azim Premji University (Bengaluru) on online safety to a bunch of undergraduate students from liberal arts, humanities and social science departments (Computing Club).

Its been over 4 years since I’ve given any talk. I was terribly out of shape and practice. I made too many slides for a 45 minutes talk and took more than 60 minutes to finish it!

It wasn’t bad but could have been much better had I practiced it for a day or two. Or I should have kept the content dense and focused more on keeping it interactive which is always a good idea with younger audience.

The audience were undergrads so they acted in usual and expected ways. A few were interested or at least sitting and listening politely. Some were there for reasons unknowns and doing their own things. A few were napping as well :-).

It took me 2 hours to travel to the university via cab. I get to meet my classmate from doctoral days :-).

I used Claude to make images using tikz and copy edit the slides.

Storing environment variables for CICD pipelines

Instead of storing environment variables in Gitlab, we encrypt the .env file using gpg and commit the encrypted file to the repository. Let’s say that we used key stored in environment variable KEY , encrypting is easy gpg -c .env. It will prompt for passphrase and create an encrypted file .env.gpg.

To decrypt in the pipeline,

gpg --yes --batch --passphrase-file <(echo $KEY) -d ./.env.gpg  > .env

I am usually nervous talking about security since there are many ways things can go wrong. But here is my take on the pros of this approach.

  • The environment remains part of the code and can be changed easily by the developer.
  • You can run the pipelines locally as well without downloading many environment variables and files from Gitlab.
  • It will be easy to migrate to a bit more secure setup e.g. using password vaults and their cli.

Cons

  • One secret to rule them all! Keep it secure please.