jph

75 ms·

901.
by jph 9y ago
Linus advocates: 1) first do no harm to the kernel. 2) better to phase in warnings and fixes, rather than enforce a panic. 3) there's sufficient track record of security in practice. This sounds fully reasonable to me. If you're a
902.
The cargo cult of versioning – summary notes - WIP RFC
2 points by jph 9y ago|0 comments
903.
by jph 9y ago
Thanks! I added your links to the README.
904.
by jph 9y ago
Behavior driven development (BDD) and test driven development (TDD) enable much faster coding when done well in my experience, and that includes full coverage fast unit tests, functional tests, benchmark tests, and integration tests. Unit t
905.
by jph 9y ago
How to write a great git commit message: http://github.com/joelparkerhenderson/git_commit_message
906.
by jph 9y ago
Full text of the published study: http://ascopubs.org/doi/full/10.1200/JCO.2017.72.7735 Long-Term, Supplemental, One-Carbon Metabolism–Related Vitamin B Use in Relation to Lung Cancer Risk in the Vitamins and
907.
by jph 9y ago
Use a random password and secure generator. If you like terminal commands, here's one way: LC_ALL=C < /dev/urandom tr -dc "abcdefghijklmnop" | head -c32 && echo (Choose the character set and length as you
908.
by jph 9y ago
Summary of key points: • The case against fiat is an ethical case, much more than an effectiveness case. Crytpo advocates often misunderstand this. * The primary reason fiat succeeds is it offers price stability. But stability is often purc
909.
by jph 9y ago
To give help: https://hispanicfederation.org/unidos/ The Unidos fund has 100 percent of donations going toward relief for Hurricane Maria.
910.
by jph 9y ago
You make good points. How would you improve it to clarify the aim is to be generally useful for both sides? For example, when I personally discover a security issue, I want to be able to report it to a company, and also include a link to th
911.
by jph 9y ago
Done. Thank you for the advice, and all your security work. https://github.com/joelparkerhenderson/coordinated_disclosur... If you have anything more you want in it, please let me know.
912.
by jph 9y ago
If you're considering this, please consider responsible disclosure steps. Here are ones I use with consulting clients. https://github.com/joelparkerhenderson/responsible_disclosur...
913.
by jph 9y ago
> What's the point of running CI on a branch that's effectively for tracking releases only? I'm recommending using master as the output of a successful continuous integration, and thus always ready for release. I'm
914.
by jph 9y ago
> Leave the "master" for developing. IMHO do developing always on topic branches, never on master. This keeps master available for fully-working software, such as for the most-recent successful build using continuous integratio
915.
by jph 9y ago
Great post. The history matches my firsthand experiences with Ext JS and Sencha, both in terms of tech and dev community engagement. If you're curious about what Sencha code looks like: https://github.com/SixArm/si
916.
by jph 9y ago
Kudos to the product team that wrote the various "Shelf vs. X" posts. These are well done and very useful for quickly understanding the Shelf product value. IMHO more companies should do these kinds of posts because they emphasize
917.
by jph 9y ago
https://github.com/joelparkerhenderson/responsible_disclosur... Constructive criticism welcome. This is a first draft, work in progress, request for comments. Responsible disclosure is a hot topic in the news because o
918.
Show HN: Responsible disclosure: what is it? how to do it? (RFC, WIP)(github.com)
1 points by jph 9y ago|1 comments
919.
by jph 9y ago
Rote is a great accomplishment. IMHO it's superior to Make, Rake, Cake, etc. Thank you for writing this! If you're curious, take a look at Do. It's like all of the above, yet flipped over on their heads. The value of Do is in
920.
by jph 9y ago
Sun employee here. What killed Sun wasn't Oracle -- it was Sun management's absolutely incorrect focus on selling hardware over software, and especially over information. Solaris, Java, and JavaSoft software were always treated as
921.
by jph 9y ago
For a better "make" try "do" (also known as "DJB redo"). It's designed by Dan Bernstein of crypto fame and implemented by Avery Pennarun now at Google. http://apenwarr.ca/log/?m=201012
922.
by jph 9y ago
Ruby email validation gem: https://github.com/SixArm/sixarm_ruby_email_address_validati... Feedback welcome. I'm the contact person for the gem.
923.
by jph 9y ago
Summery: This research paper investigates how introductory computer science students can learn better, and how teachers can coach better, especially in large classes. The paper describes "a technique for clustering incorrect submission
924.
by jph 9y ago
Massive props to you all -- thank you for this step for freedom. Purism is doing some of the most exciting work in the field of personal privacy and consumer computing. The tech blog is terrific, the laptops are coming along nicely, and the
925.
by jph 9y ago
Medium has a core challenge ahead, and IMHO the opportunity is more akin to Patreon donations and less akin to Facebook likes. I read many long blog posts especially about tech. I donate money to many authors and creators. I've learned
926.
by jph 9y ago
Selenium IDE is a tremendous help for projects that want integration testing, and want to enable any team member to write ballpark tests. Selenium IDE saved us hundreds or thousands of hours. For example, my team took an existing web app wi
927.
by jph 9y ago
Bronwyn Tarr's research on synchrony is fascinating. See e.g. her paper on silent disco dancing. I speculate that good teamwork programming may be activating related areas of the mind. I know coders who develop together can achieve a k
928.
by jph 9y ago
Thank you, your work is terrific! Good docs, good code, and I especially like the ability to create custom code to write to alternative storage.
929.
by jph 9y ago
For example some keywords: rapid web/mobile prototyping, info visualization, split test planning, throttle rollouts, accessibility areas, i18n/l10n, risk management, compliance verification, pattern recognition, time series analys
930.
by jph 9y ago
I advise companies on tech security, and talent is very much needed. What's surprising (at first glance) is that the security talent need is very strong in UI/UX/CX. For example, security is needed to gradually escalate a use

More ›