paulhammond

5 ms·

1.
by paulhammond 16y ago
This explains a lot, but thing it doesn't cover is why the patch for Rails ends the session when a CSRF token is missing. I'm guessing this is just extra paranoia, but it opens an obvious attack to log people out of a site maliciously. Any
2.
by paulhammond 16y ago
Here's a copy on the original author's personal site that doesn't require a login: http://algeri-wong.com/yishan/engineering-management-tools-a... The whole series is worth a read: http://algeri-wong.com/yishan/engineering-management.htm
3.
by paulhammond 16y ago
Now that iOS 4.2 is out Typekit has changed how we support for iOS devices. We've stopped supporting iOS3 and earlier, which means users that haven't upgraded yet won't get browser crashes. There's more details at http://blog.typekit.com/2
4.
by paulhammond 16y ago
The "new school" is not about operations doing it all themselves, or about a new "devops" position that does both dev and ops. It's about greater cooperation between the team that's developing the application ("dev") and the team that suppo
5.
by paulhammond 16y ago
We're not aware of any issues in Safari 5 - could you drop an email to support@typekit.com with an example URL showing the problems so we can look into it?
6.
by paulhammond 16y ago
Performance. Embedding 18 fonts via CSS would add a lot of weight and the browsers (particularly mobile safari) don't cope too well when you embed too many fonts at once. (I work at Typekit)
7.
by paulhammond 17y ago
All the time. For example, we switched from one video transcoding backend to another recently. Having a single config flag used to chose which codepath a video went through meant we could launch it for staff only at first. Then, as we rolle
8.
by paulhammond 17y ago
[I work at flickr and gave the presentation linked to above] You don't need to test every permutation. Pretty much all of the flags in the codebase are independent of each other - someone might be working on changes to our admin interface i
9.
by paulhammond 17y ago
(I work at flickr) The problem is finding all the places that the language has changed and all the places you relied on the old behavior. The documented stuff was easy to find, it was the undocumented (or unintended?) changes that were hard