lordofmoria

11 ms·

61.
by lordofmoria 4y ago
(op here) I actually completely agree - you're right: "simple outperformed smart" doesn't point to a useful, nuanced solution. I wrote more in-depth here about slightly-more-specifically where there are problems, curious
62.
by lordofmoria 4y ago
Honestly, early on in our code auditing days, there were surprises - a lot of the more meta-lessons in here fomented in the last few years, looking back, and would NOT have been something I’d have thought early on. On the other hand, regard
63.
Learnings from 5 years of tech startup code audits(kenkantzer.com)
798 points by lordofmoria 4y ago|258 comments
64.
by lordofmoria 4y ago
But how do you avoid astroturfing? Seems like someone with two accounts (or a small cabal) could get anything they want published with very low friction. Are you considering a strongly-bound 1-account-per-person model with verified accounts
65.
Technology ROI discussions are broken(kenkantzer.com)
8 points by lordofmoria 4y ago|2 comments
66.
Software Engineering Foot-Guns(kenkantzer.com)
10 points by lordofmoria 4y ago|0 comments
67.
by lordofmoria 5y ago
I was so happy to have found I bonds in the last few months. This does beg the question - is there any other “safe, relatively liquid” option that has even close to the same yield as I Bond? Seems like traditional bank savings and short ter
68.
Accurib: Daily McRib Forecast(accurib.com)
3 points by lordofmoria 5y ago|0 comments
69.
by lordofmoria 5y ago
It’s interesting how many of these happened during WWII. The fact that the Pentagon was built in under 500 days is astounding, if you’ve ever walked through the place. True urgency is really such a key predictor to things getting done impos
70.
The Backlog Peter Principle(kenkantzer.com)
4 points by lordofmoria 5y ago|0 comments
71.
How to Gauge Engineering Experience(kenkantzer.com)
3 points by lordofmoria 5y ago|0 comments
72.
The Googler’s Dilemma: Why Experience Will Always Have a Premium(kenkantzer.com)
1 points by lordofmoria 5y ago|0 comments
73.
by lordofmoria 5y ago
I read this right after reading about Tony Hsieh’s last few days - https://www.wsj.com/amp/articles/the-rise-and-fall-of-the-ma... . The author of this needs to seriously think about where this “new management phil
74.
by lordofmoria 5y ago
wow, thanks for this link, I wasn't even expecting a 1Password solution, but the very first item on that is exactly what I was getting at. Though this seems to be maybe aimed at enterprise, I hope they continue their tradition of relea
75.
by lordofmoria 5y ago
Yes, but that's more of a general argument against all SSO - besides, does your concern hold even for things like Sign In with Google / Apple? I assume losing access to iCloud / Gmail (if you've opted into these ecosyste
76.
Ask HN: Anyone else constantly forget which SSO service they signed up with?
22 points by lordofmoria 5y ago|13 comments
77.
by lordofmoria 5y ago
I was looking for the GitHub repo link, but apparently it’s a simple one liner at the bottom! :) Does anyone know of a service that does this or ideally, covers other non EC2 services? I’m at a late stage startup and our AWS sprawl is crazy
78.
by lordofmoria 5y ago
This is insightful, but a bit depressing. How do you propose solving these problems if cryptography is not the answer? At least Moxie is suggesting that there is a viable path forward by focusing on solutions that decentralize the infrastru
79.
Scaling Elasticsearch Percolation for Government Data(medium.com)
2 points by lordofmoria 5y ago|0 comments
80.
by lordofmoria 5y ago
> An example of one of these, the most commonly cited bad-thing-to-optmize example that I've seen, is typing speed (when discussing this, people usually say that typing speed doesn't matter because more time is spent thinking t
81.
by lordofmoria 5y ago
It’s interesting how much this foreshadowed what’s happening with BI dashboard aggregators that Get built into Snowflake and Power BI. Sometimes I wonder why the RSS feed didn’t become more foundational internet tech
82.
by lordofmoria 6y ago
I actually did this by accident this summer after coming back from a 2 week vacation and being snowed under by a project immediately left me with about 3-4 weeks of backed up emails - I found that my “rate of required response” even for com
83.
Ask HN: What’s the most effective developer onboarding you’ve gone through?
10 points by lordofmoria 6y ago|4 comments
84.
by lordofmoria 6y ago
I agree, especially given how many developer “eyes” were on this from having to integrate the log in with Apple flow into their apps. Just as a first-hand anecdote to back this up, a dev at my former company which did a mix of software dev
85.
by lordofmoria 7y ago
For anyone out there needing some way to respond - I find that music, and especially classical music performed live, speaks something incredibly profound to the soul. It finds strength inside of you that is buried deep. Yo-yo Ma released a
86.
Preliminary Adventures on a Jailbroken iPad(pkc.io)
1 points by lordofmoria 7y ago|0 comments
87.
Apple Pay Buttons Can Make Websites Unsafe(wired.com)
5 points by lordofmoria 7y ago|0 comments
88.
by lordofmoria 8y ago
> Before you embark on a rebuild, you should have solid data (ideally backed up by logs) about which features your users are using, which ones they care about, which ones are "nice to haves", which ones were very necessary to g
89.
by lordofmoria 9y ago
I would argue that usually it doesn’t matter because of the reasons you mentioned, but in this particular case it really did. The US government, and the NSA in particular, made it a matter of explicit policy to delay and discourage commerci
90.
by lordofmoria 9y ago
Seeing the comments of some of these Facebook employees and the caps for “integirty” checks reminds me of flavor of the internal discussions at Booz Allen Hamilton after Edward Snowden leaked and was promptly fired from the company. If you’

More ›