chunsaker

8 ms·

31.
by chunsaker 13y ago
Good question. The manual login ensures that a session is started with the correct authentication credentials. Its a good default way to protect against session hijacking attacks. I suspect we will automate the first authentication down the
32.
How We Increased New User Registration 27%(stormpath.com)
14 points by chunsaker 13y ago|5 comments
33.
by chunsaker 13y ago
That's a good suggestion - will see if we can add a para about it. We use digest authentication, fwiw.
34.
Secure Your REST API(stormpath.com)
115 points by chunsaker 13y ago|74 comments
35.
by chunsaker 13y ago
I'm particularly glad you highlighted that marketers often underestimate how social developers are. Analogous: tech marketers and BD people often overlook the fact that developers do a lot of business and share knowledge in social settings.
36.
Adventures in Caffeine Addiction(deviousfox.com)
1 points by chunsaker 14y ago|0 comments
37.
by chunsaker 14y ago
Switched from Dropbox to Google Drive a few months ago. the UIs are very similar, and Drive is much cheaper. My only complaint has been syncing: 1) After a week of repeated attempts, I gave up trying to get video from Dropbox to Drive. Mayb
38.
by chunsaker 14y ago
Helpful! I know this is a serious issue re the problems with inflated and systemic agricultural bureaucracy per the thoughtful comments below...but: raisins.org. Amazeballs as government URLs go.
39.
by chunsaker 14y ago
Stormpath ( http://www.stormpath.com ) * We have roles open for core Java engineers, a Data Guru and a Developer Evangelist (Python, Ruby, PHP, Haskell...) Stormpath is the first easy and secure user management and authentication service fo
40.
by chunsaker 14y ago
Please tell me this is an April Fools article. Please.
41.
by chunsaker 14y ago
Redwood City FTW? We've had two of our interns find good housing there, near the Caltrain.
42.
by chunsaker 14y ago
...Dramatically.
43.
Stormpath Identity API Solves Security Problem With Sleek Answer, Gets Fat Check(blog.programmableweb.com)
1 points by chunsaker 14y ago|0 comments
44.
Long Live The Password(stormpath.com)
4 points by chunsaker 14y ago|0 comments
45.
by chunsaker 14y ago
Stormpath (San Mateo, CA) Stormpath is an easy, secure user management and authentication service for developers. We're looking for - Core Java developers - Front-end engineers - DevOps - Developer Advocates It's a bonus if you love secur
46.
Startup Lessons from Kickboxing Class(deviousfox.com)
1 points by chunsaker 14y ago|0 comments
47.
by chunsaker 14y ago
This is a great synopsis. There are so many examples of how companies have handles sexist snafus well, compounding the gaffe like this is inexcusable.
48.
by chunsaker 14y ago
Way to go, Chase and team. This has tremendous vision and I hope you come out of YC with a ton of velocity.
49.
by chunsaker 14y ago
Profile updated. Thanks, didn't mean to be disingenuous. Its okay to call me tacky - I actually think this stuff matters.
50.
by chunsaker 14y ago
Yes, it certainly mitigates the scale of a potential breach and I like that the reduced scale/potential value makes it a less attractive target to hackers (assuming the server side is also built in a secure way). I havent investigated, but
51.
by chunsaker 14y ago
Sure, but designing around the inherent riskiness of user behavior/forgetfulness is an important part of security systems. Users want to be protected, not for blame to be shifted to them.
52.
by chunsaker 14y ago
What happens if your phone gets stolen?
53.
Password Breach? That'll Be $172,000,000 Please(stormpath.com)
30 points by chunsaker 14y ago|19 comments
54.
How Lack of Immigration Reform Harms Startups, US Economy(cnbc.com)
3 points by chunsaker 14y ago|0 comments
55.
by chunsaker 14y ago
Yay for error reporting - glad to see the Mongo community got heard on this one.
56.
by chunsaker 14y ago
Not unnerving, but pretty awesome!
57.
by chunsaker 14y ago
One reason to stay coding - even if you're not on the cutting edge - so you can teach your kids, or even grandkids. My dad was 40 or 41 when he gave me "BASIC for Kids" - I moved on to html and java, and if he had made it to 50, it would ha
58.
by chunsaker 14y ago
Totally Agree! I wanted to keep the scope for this narrow so it didn't turn into a total beast. The guys over at Cloud Passage have some great content on server security ( http://blog.cloudpassage.com/ ) that I think is really well informed
59.
by chunsaker 14y ago
You're talking about Bcrypt like its some magical golden unicorn that will cover your ass from all attack vectors. Sure, its awesome. But modern security requires more than just an awesome encryption algorithm.
60.
by chunsaker 14y ago
Totally agree Coda gets the basics right and I love that article. In fact, our CTO wrote a response blog article to that in February: http://www.stormpath.com/blog/strong-password-hashing-apache... However, to quote from that post: "The a

More ›