markbnj

153 ms·

1381.
by markbnj 13y ago
I admit that my first instinct on reading a piece like this is to shout out in agreement. But at the same time I know that instinct comes from having worked on small teams, in small companies, for my entire career. I like small teams, and I
1382.
by markbnj 13y ago
A lot of good comments here, and I think the OP stepped in it a little bit. It should have been a wee bit more obvious that the overlap was likely to cause some concern, so chalk this one up to a professional learning experience, which as o
1383.
by markbnj 13y ago
The main point, that more eyeballs doesn't necessarily lead to more bugs found and fixed, is a good one. Reading code, or text, specifically with the intent of finding errors is very hard, and is itself an error-prone activity. Anyone
1384.
by markbnj 13y ago
Does it matter? Once you know they might have, you have to assume they did. That's why the Cloudflare challenge was watched so closely.
1385.
by markbnj 13y ago
I'll keep that in mind, Brian, although my reading list is long, and not getting any shorter.
1386.
by markbnj 13y ago
Agreed, it's a loose analogy at best. The juxtaposition just struck me, mainly because it could be viewed as singling out the real difference, which is how the code was handled.
1387.
by markbnj 13y ago
It seems interesting that Akamai protected itself from heartbleed by implementing a custom allocator, which was in some respects at least part of what caused heartbleed.
1388.
by markbnj 13y ago
Sure, he can become a software developer if that's what he'd rather be doing. It's still (largely) a business where demonstrated skill outweighs paper testimonials of brilliance. If he actually likes programming then encoura
1389.
by markbnj 13y ago
They're damn near impossible to enforce unless written very carefully and specifically, and in general they're just a distraction and a waste of time. Good move, Massachusetts.
1390.
by markbnj 13y ago
Can we not call this a "bug?" It's clearly a design weakness and "schofield" said it was working as intended, ergo not a bug, but just a poor choice of mechanism. Pretty humorous that "schofield" thought i
1391.
by markbnj 13y ago
Very nicely done. As someone else pointed out there are quite a few of these tools, but I think you've done a really nice job with this one. One suggestion: make the reference easier to scan at a top level as opposed to drilling down.
1392.
by markbnj 13y ago
Developers put these kinds of bypasses into login code quite frequently. When you're testing and fixing bugs typing in a password over and over gets old. As the poster above noted, the code is usually surrounded by conditional compilat
1393.
by markbnj 13y ago
Getting Harry Potter for the unveiling was quite a coup.
1394.
by markbnj 13y ago
I've been working from home for close to ten years, and one thing to note is that the challenges are exponentially increased when children enter the picture. When those children become teens, the challenges can be epic. Nothing like a
1395.
by markbnj 13y ago
Just to clarify, I've worked in this business. You can set something up and test it in sandbox mode with every payment processor I've worked with. That's the proper approach for a "side project." What blows my mind
1396.
by markbnj 13y ago
My exact reaction. It just seems mind-boggling that anyone would set something up like this as a side project. I'm not even sure it would be legal in the U.S. One thing I am not at all confused about: I would shut it down right now. Li
1397.
by markbnj 13y ago
I think I _sort_ of got it. Still confused over what "ether" is paying for: computing cycles? Bandwidth? Trust?
1398.
by markbnj 13y ago
I've been using docker for a couple of months, but we have only just begun experimenting with actual deployment in a test environment on ec2. Right now we use it primarily as configuration/dependency management. We're a small
1399.
by markbnj 13y ago
Yeah, I was thinking specifically of the case where the plane is still intact and on the ground somewhere. If it has crashed into the sea this technique wouldn't be useful. And it could also be foiled by hiding the plane, which would b
1400.
by markbnj 13y ago
I was thinking yesterday that there are not _that_ many jets the size of the 777 in the world, and the location of most of them can probably be detected by U.S. military satellites. If that satellite data were correlated with data from the
1401.
by markbnj 13y ago
Software is a craft. Why would we stop practicing our craft as we get older? Do cabinetmakers stop making cabinets? Not as long as their hands can hold the tools. I'm 53 and still a working developer. Over my career I've worked wi
1402.
by markbnj 13y ago
You seem too anxious. I don't know about you, but once an idea occurs to me about what might be causing a problem, there's zero chance of forgetting it. You should have just enjoyed the party. After all, the ROI on the relaxation
1403.
by markbnj 13y ago
Agreed, and a fair point. Statefulness is not a consequence of using Baseimage-docker, and I didn't mean to suggest it was. A clearer way to put it is perhaps to say that aiming for a container that is as simple and stateless as possib
1404.
by markbnj 13y ago
I've only been working with Docker for a couple of months, and I find this discussion really interesting. The goal of trying to get containers to behave more like a full system across various lifecycle events is somewhat orthogonal to
1405.
by markbnj 13y ago
Interesting. I've only been working with Docker for a couple of weeks, so I probably have some misconceptions, but I thought that only the kernel was shared with the container host. Of course, you will be installing an OS into the cont