psanford

7 ms·

31.
by psanford 1y ago
Internally at slack the general consensus was that dnssec was a giant waste of time and money from a security perspective. We did it for compliance to sell into the Federal govt and federal contractors.
32.
by psanford 1y ago
AWS AppRunner is the closest equivalent to Cloud Run. Its really not close though, AppRunner is an unloved service at AWS and is missing a lot of the features that make Cloud Run nice.
33.
by psanford 1y ago
Do not try to compete with pinboard.
34.
by psanford 1y ago
This looks great! A few years ago I wrote a sqlite vfs for using dynamodb as a backing store[0] called DonutDB. With the recent addition of CAS to S3, I was thinking about making a new version of DonutDB backed by S3. I'm really glad l
35.
by psanford 1y ago
I was shocked when I rewatched this recently just how good the cryptography technobabble is in this movie. Specifically the scene where the professor is presenting on breaking public key cryptography. The very first thing he mentions is a n
36.
by psanford 1y ago
Vanguard is one of the few financial institutions that supports webauthn.
37.
by psanford 2y ago
As a Go developer, I certainly find the complaints about the go conventions amusing. I guess if you have really invested so much into understanding all the details in the rest of this article you might be annoyed that it doesn't transl
38.
by psanford 2y ago
That doesn't solve the problem of TLS handshake fingerprinting, which is the whole point of this project.
39.
by psanford 2y ago
I've used wiz in a previous job. Its a good product. I don't know if they invented disk snapshot based security scanning, but they certainly popularized it. Companies like CrowdStrike have copied a lot of what Wiz has been doing (
40.
by psanford 2y ago
Don't use mobile apps that could just be websites.
41.
by psanford 2y ago
Happy that Quickwit is going to Apache 2. Sad that the team won't be working on it anymore. I loved that I was able to setup Quickwit on AWS lambda and have a good cloud based search engine for $0.01 / month.
42.
by psanford 2y ago
Marc Benioff says a lot of things. You would think they wouldn't have any software engineering job postings up if this were actually true.
43.
by psanford 2y ago
> Most people who make a lot of money all at once blow it within seven years This is a commonly recited myth about lottery winners[1]. [1]: https://www.forbes.com/sites/johnjennings/2023/08/29/deb
44.
by psanford 2y ago
The client situation for RCS is really quite bad. With SMS and MMS I can fairly easily run my own client on a linux system that has a GSM modem. This is not the case at all with RCS. Even worse, Google Messages is not open source and so far
45.
by psanford 2y ago
It sucks that the ongoing maintenance cost for the native mobile platforms is so high. Who wants to develop on top of a platform that is constantly changing out from under you? It really makes me nostalgic for the vision of webOS (although
46.
by psanford 2y ago
I'm a little sad that this has seemingly taken precedence over all other hardware support. M3 support, dp-alt mode, making the microphone work are all things that I was hoping were going to land in the past year.
47.
by psanford 2y ago
I have an opensource android app on the app store. I was a little annoyed/worried that the 'Verify your Play Console Developer account' was going to be super painful since I'm not running a business or trying to make mon
48.
by psanford 2y ago
I use magit. I still use git absorb. The issue for me is not the speed at which I can run the interactive rebase, it is the amount of looking I have to do to find the correct commit to fixup onto in a big stack of commits. git absorb figure
49.
by psanford 2y ago
I'm a huge fan of git absorb. I love tools that do-the-right-thing so I can think less. That is what git absorb is.
50.
by psanford 2y ago
As of the beginning of this year, slack still used a lot of hhvm.
51.
by psanford 2y ago
Hey Brian! Just wanted to say that I really appreciate all the work that you put into Magic Wormhole.
52.
by psanford 2y ago
Every go developer I know who likes the language disagrees with this sentiment (including myself). If you really want async/await Go is probably not the language for you. Thats ok! There are a lot of languages that other people like th
53.
by psanford 2y ago
You have to take at least 1 day off for a standard tech interview, often more. I don't see how this is much different from a demand on your time.
54.
by psanford 2y ago
Not directly addressing your point but asking an LLM to not include something in its output often doesn't work well. Its a bit like saying to someone "whatever you do, don't think about elephants."
55.
by psanford 2y ago
Are you (and redpanda) committing to not relicensing any other benthos components in the future? If you are committing to that then you should say so.
56.
by psanford 3y ago
The only benefit this format provides is the ability to read some columns without needing to read all columns. Unfortunately it is not a seekable format. That's a pretty big miss. It also wouldn't be that hard to make it seekable.
57.
by psanford 3y ago
> I cannot use clipper cash to pay for a caltrain ride and vice versa. You absolutely can use cash on your clipper card to pay for a one way caltrain ride. Likewise Bart and Muni are integrated in SF. My muni monthly pass includes bart r
58.
by psanford 3y ago
I think this is pretty straight forward. Don't accept PRs for code that cannot be reasoned about easily.
59.
by psanford 3y ago
One big take away for me is that we should stop tolerating inscrutable code in our systems. M4 has got to go! Inscrutable shell script have got to go! Its time to stop accepting that the way we've done this in the past is the way we wi
60.
by psanford 3y ago
It was always my opinion that Github's killer feature was putting repositories under user namespaces. Its hard to imagine but before Github you had to ask SourceForge politely if you could have a given project name. Just the ability to

More ›