nfm

9 ms·

31.
by nfm 7y ago
UsabilityHub | Melbourne, Australia | Senior Software Engineers | Full-time | Onsite UsabilityHub is hiring senior engineers to join our team in Melbourne. If you’re not familiar, we help businesses (including Amazon, NASA, and Reddit) be m
32.
by nfm 8y ago
A high dependency count does increase your vulnerability surface area. All it takes is one weak or reused password on an account without 2FA enabled for a malicious package to be uploaded. You're more vulnerable to this when you depend
33.
by nfm 8y ago
UsabilityHub | Melbourne, Australia | Senior Software Engineers | Full-time | Onsite UsabilityHub is hiring senior engineers to join our team in Melbourne. If you’re not familiar, we help businesses (including Amazon, NASA, and Reddit) be m
34.
by nfm 8y ago
The data isn't lost, but it's not straightforward to query if you don't have a record of it in your own database. Eventually you'll want to find out what your resubscribe rate is, or what the average interval between sub
35.
by nfm 8y ago
UsabilityHub | Melbourne, Australia | Senior Software Engineers, Senior Product/UX Designer | Full-time | Onsite UsabilityHub is hiring senior engineers and a product designer to join our team in Melbourne. If you’re not familiar, we h
36.
by nfm 9y ago
In principal, I agree. I'm certain Slack has run the numbers and decided the ROI of implementing cross-browser video calling is lower than whatever else they're investing engineering time into. Sure, they have a lot of capital, bu
37.
by nfm 9y ago
Not really. It's hard for your editor to do this statically, but there's heaps of good tooling for finding the method source and docs dynamically. pry> show-source SomeClass.class_method pry> show-source AnotherClass#i
38.
by nfm 10y ago
The difference is that you can push a tab from one device to another. So if you're reading something on your phone, and push it to your laptop, it will automatically open in a new tab there once it syncs. It's good for when you&#x
39.
by nfm 10y ago
> It's only kind of open source, and only partly. That's a pretty misleading characterisation. You can browse the source code, submit issues, see what's being worked on, contribute PRs, and freely download and run your own
40.
by nfm 10y ago
I really disagree with this. Google has extremely strict safeguards in place to prevent eg. employee Joe from accessing ex-girlfriend Mary's Gmail. Very few people would have full access to individuals' Google accounts. This kind
41.
by nfm 10y ago
I'm not sure what you mean about changing the JSON structure; the Stripe API is versioned and you have to opt-in to any updates, including breaking changes like removing or renaming keys in the response.
42.
by nfm 10y ago
The rationale is also explained in the policy: Ubuntu is a trusted open source platform. To maintain that trust we need to manage the use of Ubuntu and the components within it very carefully. This way, when people use Ubuntu, or anything
43.
by nfm 10y ago
I think everyone would agree that the above commit history is bad, and should be avoided. But solving that issue by adopting a squash-on-merge policy is like doing surgery with a chainsaw. There are better tools for the job.
44.
by nfm 11y ago
Most of those advantages aren't microservice specific - they're just a function of well factored code.
45.
by nfm 11y ago
Doesn't look too bad, although there are a lot of CVEs to go through: - A timing attack if you're using HTTP basic auth - A couple of GC related DoS attacks - An issue with `accepts_nested_attributes_for` if you're using bo
46.
by nfm 11y ago
For what it's worth, I'd definitely prefer logins from new devices to require an email confirmation when 2FA is enabled.
47.
by nfm 11y ago
Yes, yes it is. Does the link work as expected for you? The strange thing is that it does work for me if I copy-paste the link (as opposed to ctrl-clicking it). There really shouldn't be much that's different between those two req
48.
by nfm 11y ago
That link is redirecting to an unexpected image for me. Edit: it works if I copy-paste the URL.
49.
by nfm 11y ago
What webserver are you using? Running puma in threaded mode, even on MRI, should allow your external API calls to run in parallel - this might simplify things a bit :)
50.
by nfm 11y ago
Nice work :) And the migration process ( http://v4-alpha.getbootstrap.com/migration/ ) doesn't look to be too hard, either.
51.
by nfm 11y ago
The warning is a bit annoying, but without it attacks like this would be harder to spot: http://feross.org/html5-fullscreen-api-attack/ (it's just a proof-of-concept, no malicious payload)
52.
by nfm 11y ago
FUD! https://developer.android.com/about/dashboards/index.html Only 5.9% of Android users are on obsolete 2.x. 5.1% are on 4.0.x, for which Chrome was just EOL'ed at version 42 ( http://blog.chrom
53.
by nfm 11y ago
This is unlike Stripe but this landing page is totally broken in Chrome and Firefox on Android for me: https://www.dropbox.com/s/axl4ogngkmdtc83/Screenshot_2015-06...
54.
by nfm 11y ago
Do you think that's a problem that can be solved generically by the browser? It seems infeasible to me.
55.
Animation Performance in the Browser(ada.is)
2 points by nfm 11y ago|0 comments
56.
by nfm 11y ago
Yes, I had no idea the email field isn't publicly visible. Thanks for the heads up :)
57.
by nfm 12y ago
Paper ballots tend to work. There have been significant screwups though: http://blogs.abc.net.au/antonygreen/2014/02/wa-senate-re-ele... Given that we're generally happy to trust online banking, my feeli
58.
by nfm 12y ago
Depending on the era and location, slave labour totally skews the calculation too.
59.
by nfm 12y ago
The merge example that introduced a logical bug in the article was only visible in the diff because the bug occurred within 3 lines of the added line in the feature branch. The best way to avoid this issue is automated testing. The second
60.
by nfm 12y ago
I think the author's point was that the example in question was orders of magnitude smaller than "big data" and that it was more efficient to process it on a single machine, not that Hadoop and friends aren't easy to use

More ›