borplk

36 ms·

151.
by borplk 6y ago
Same problem. A good login mechanism needs to rely on a "previously agreed upon" mechanism to perform the login and not break because an SMS or email is delayed. A password works this way. TOTP/HOTP 2FA also works this way.
152.
by borplk 6y ago
One big flaw with login links sent to email is the delivery problem. You can't assume the email will be delivered so quickly. Who wants to get locked out of their account because the email has not arrived? Login links can be a convenie
153.
by borplk 6y ago
To those of you who were cheering and clapping when these social networks started banning people like President Trump, or those who questioned the election results, or other right-wing people. Welcome to your new world. Now it's your t
154.
by borplk 6y ago
Each deploy containing fewer changes makes sense however it's not the only reason. Another significant reason is that more frequent deploys means more opportunities to identify and resolve any issues with the process. It becomes like a
155.
by borplk 6y ago
Very alarming to see the level of apologism in these threads for the appaling actions of the big tech companies. You celebrate today because what they are doing is aligning with your political views. Just wait, this wont stop there, you&#x2
156.
by borplk 6y ago
One reason is usually the person that decides for the company to use it never actually touches it.
157.
by borplk 6y ago
Etsy: Alibaba with a lipstick™
158.
by borplk 6y ago
Just from reading the title I expected this was going to be a "... and I'm sorry" article.
159.
by borplk 6y ago
Classic army of apologists with 'you are doing it wrong'. Yes we get your intricate textbook philosophies but the average Joe, works at AverageCo and has an average Schmoe manager that takes your buzzwords, weaponizes it and turns
160.
by borplk 6y ago
Trust me just say no and move on. It's a huge and expensive headache that only makes sense for companies that are already large and complicated. The red tape, bullshit, bureaucracy, and processes that you will have to add and adhere to
161.
by borplk 6y ago
Frequent deployment is almost always a reliable symptom of a mature team and pipeline. When they list it as positive bullet point they are saying you are not going to be chasing "Jimmy the only guy that can do deploys" to get your
162.
by borplk 6y ago
For what it's worth I vaguely remember listening to a podcast episode some years ago where some people were discussing a decision to become an Apache project. It may have been this one (but not sure as I didn't listen to it again)
163.
by borplk 6y ago
I'd advise against trying to turn this into a product. Companies will be hesitant to grant a third-party that level of privilege on their infrastructure. And sophisticated companies already have the means to manage their costs. For sop
164.
by borplk 6y ago
You have to charge them enough so either they don't agree (most likely), or you'll be happy to tolerate them for that price.
165.
by borplk 6y ago
HN needs to put a little tooltip description on the black bar. Every time it happens there's an "Ask HN" about it.
166.
by borplk 6y ago
The reason companies like Google can and do it is because their funnel of incoming candidates is large enough that they can decide to choose the 'intersection' of many factors combined. Meaning they will filter down to people who
167.
by borplk 6y ago
This is likely due to third-party social media account management software getting hacked. And they probably used compromised API tokens.
168.
by borplk 6y ago
I think one important thing to note is being "unusual" is ONLY celebrated for wildly successful people. If you make it like Steve Jobs people will over-analyse everything you did and said and try to somehow link that to your succe
169.
by borplk 6y ago
Terraform mostly can make the current state match the desired state but the challenge is the real world side effects such as the state that exists in the database that is about to get destroyed or down-time of services that depend on the re
170.
by borplk 6y ago
Not sure about your use case but if it's simple enough consider not using an object storage service and just serve the files from the filesystem.
171.
by borplk 6y ago
We'll consider using it in 4 years from now :) Google will lose interest in 2 years and shut it down like a kid playing with Lego.
172.
by borplk 6y ago
I think of whitelist/blacklist as emphasising the binary aspect of it (i.e. it's black and white, on/off, allow/deny, not shades of grey)
173.
by borplk 6y ago
It doesn't necessarily mean that. A limit always exists. If you don't enforce it yourself you will find out when someone decides to send you 64GB of data to hash as their password. So always better enforce the limit yourself.
174.
by borplk 6y ago
I think this might end up being used in a hacking scene in a movie ... with bright green text of course.
175.
by borplk 6y ago
Things like "SOLID principles" are what I call "Dunning–Kruger Traps". They lure the newbie (or worse, beginner experts) with a "learn me and become an expert" bait. They usually don't stand on a substanti
176.
by borplk 6y ago
I largely agree with you. However one thing to note is that different people are different. Some are easily impressed and not all have the level of sophistication you may expect in their decision making. If such a person is present in your
177.
by borplk 6y ago
They somewhat compliment each other, they are not really alternatives to each other. Usually Ansible is used for declaring the desired state of the individual servers for example you may use it to manage installed packages and configuration
178.
by borplk 7y ago
Yes somehow I had wireshark in mind! :)
179.
by borplk 7y ago
Does anyone have a guide for setting up server-to-server wireshark connection? Everything I have found so far is about consumer VPN stuff. I'm interested in possibly using wireshark for server-to-server as a less painful alternative to
180.
by borplk 7y ago
The schema establishes the contract between you the user and the database. You have to help the database so that it can help you. The information you are giving it is mostly things that it can't reliably know or decide on your behalf (

More ›