kylequest

19 ms·

61.
by kylequest 7y ago
OAuth is a pretty popular option for delegation... and JWT isn't really necessary there...
62.
by kylequest 7y ago
Speaking of Auth0 and JWT... there was this nice (guest) blog post a while ago where they do cover some of the JWT problems: https://auth0.com/blog/critical-vulnerabilities-in-json-web-...
63.
JWTs suck (for web auth and basically everything else)(speakerdeck.com)
48 points by kylequest 7y ago|22 comments
64.
A Child’s Garden of Inter-Service Authentication Schemes(latacora.micro.blog)
1 points by kylequest 7y ago|0 comments
65.
YAML: Probably not so great after all(arp242.net)
445 points by kylequest 7y ago|444 comments
66.
by kylequest 8y ago
DockerSlim will reverse engineer / auto-generate a Dockerfile for you :)
67.
by kylequest 8y ago
Ping me if you have other gotchas you'd like to add. There'll be a few more soon (JSON, Cgo, etc).
68.
by kylequest 8y ago
Yes, race conditions are definitely common. Thank you for pointing out the race condition in that example! That code is intentionally simplified to make a point about the scheduling gotcha :-) The idea there was to show that a tight loop in
69.
Observability: the hard parts(peter.bourgon.org)
3 points by kylequest 8y ago|0 comments
70.
by kylequest 8y ago
Sounds like design by committee...
71.
by kylequest 9y ago
> 1. Don't put your internal libraries in /pkg. /pkg has special GOPATH meaning as "compilation cache". Its not an actual name conflict, but why bother risking it. It's a little too late for this because it&
72.
by kylequest 9y ago
I have another post that covers a few project structure best practices: https://medium.com/golang-learn/go-project-layout-e5213cdcfa... It has a little more than Peter's post, but it's still not too opinionat
73.
by kylequest 9y ago
Short answer, yes :) There are a lot of details and finer points that need to be considered, of course. The quality of the assignments and how the process is executed are big factors here. It's also important for the assignments to hav
74.
by kylequest 9y ago
Not all assignments are created equal. Like with anything it has to be well done. When I hire people I craft the assignments for each candidate depending on the role and the person on the other side. It's also important to communicate
75.
by kylequest 9y ago
This is my position on both sides. I'll pick a homework assignment anytime when I have a chance as a candidate. I have lots of life commitments and this is one of the big reasons why I like it. I also like it because it's an oppor
76.
by kylequest 9y ago
Take home assignments are as perfect as it gets (the assignments need to align with the role you have and there are also some challenges related to the scalability of the process and, in some cases, cheating). It filters those who think the
77.
by kylequest 9y ago
Actually it should be the opposite. Definitely do your own benchmark, but take a look at the latest numbers from Tyk and compare it with the latest numbers from Kong to get a general idea.
78.
by kylequest 9y ago
You should check out DockerSlim [0] then :-) It'll generate a seccomp profile for you and it uses ptrace too. [0] http://dockersl.im
79.
by kylequest 9y ago
Here's the actual video: https://youtu.be/5doOcaMXx08
80.
by kylequest 10y ago
Here's a couple of blog posts covering the conference... Day 0 and 1: https://cloudlock.engineering/pgconf-2017-days-0-1-c897dd90c... Day 2: https://cloudlock.engineering/pgconf-2017-day-2-8bd7e93404eb
81.
Awesome Kubernetes – A curated list for awesome kubernetes sources(github.com)
3 points by kylequest 10y ago|0 comments
82.
by kylequest 10y ago
and that happens to be the system they built :-)
83.
Outdated WordPress and Drupal Versions May Have Contributed to the Panama Breach(wptavern.com)
1 points by kylequest 11y ago|0 comments
84.
by kylequest 11y ago
So you are saying you don't spend any time preparing for your interviews :-)
85.
by kylequest 11y ago
> At least in the traditional technical interview, interviewers and candidates tend to be roughly equally invested in the interview process in terms of time spent Not really true unless you go to your interviews completely unprepared :-)
86.
by kylequest 11y ago
The Tour is a great place to start. It's a good idea to complement the basics you learn there with the common gotchas. "50 Shades of Go" covers most of the major gotchas.
87.
by kylequest 11y ago
They can't really do it because they have no idea where the data will be used. Depending on where your app puts the data different types of encoding must be done.
88.
by kylequest 11y ago
Sort of... They have a glib package. Take a look at this Atlassian post to see how you can make your Oracle Java based apps run with Alpine: https://developer.atlassian.com/blog/2015/08/minimal-java-do... I s
89.
by kylequest 11y ago
Ping me if you want to contribute. Don't worry if you don't know Go :)
90.
by kylequest 11y ago
If everything else you have is in a container not having your Go app in a container means the deployment process will be a bit awkward :) It's pretty easy to create tiny containers for Go apps. If you build the app separately then you

More ›