pyjug

6 ms·

1.
by pyjug 4y ago
>you can just update the webhook URL Fair enough, but often consumers that use multiple vendors receive webhooks in the same service; think about going from /v1/webhooks -> /v2/webhooks, they'd have to change
2.
by pyjug 4y ago
Disallowing redirects altogether is probably too big of a hammer. There are legit reasons to use redirects (like migration to new versions). A limit to the number of redirects seems ideal -- that's what Twilio does, for example.
3.
by pyjug 4y ago
>Domains that resolve to private IPs: attacker could set up foo.com which resolves to a private IP There's a clever extension to this attack; a naive way to mitigate it is to do a DNS resolution first to verify it's not a priva
4.
by pyjug 5y ago
> In this architecture, the authorization service was properly validating user authorization to packages based on data passed in request URL paths. However, the service that performs underlying updates to the registry data determined whi
5.
by pyjug 5y ago
The FAANG have a lot more leverage over their employees than people seem to think. Very few if any outside of these companies pay a mid level engineer 700k (yes, this number is real, can we please stop debating this fact?). So, if all FAAN
6.
by pyjug 5y ago
> I'm not really making contortions I would politely disagree — in any case the thread is there for all to judge. If you sincerely believe that this is a product that should exist and will positively impact everyone involved, I can
7.
by pyjug 5y ago
You didn’t address whether engineers at Netflix would put up with this. > I'm pretty sure that is what they are going for here with the global leaderboard Sorry, I’m confused. This seems like a change in your position? Earlier you a
8.
by pyjug 5y ago
The structure already exists. It’s called your bug tracker. By building tools to gamify this process, it’s clearly incentivizing devs to put in more hours. I have no doubt that the global leaderboard will consist of devs that would’ve clock
9.
by pyjug 5y ago
> the employee overvalues their skill, thinking that showing up on the leaderboard is a shoo-in. Maybe the employer is right, maybe the employee is right, Come on, this is just being coy — you and I both know this is a terrible deal for
10.
by pyjug 5y ago
> The risk to the company is pretty low that their employee would show up on a global leaderboard. This invalidates your other point that it benefits developers. Why would a dev sink countless hours for a “very low” chance at being on th
11.
by pyjug 5y ago
> For a lot of people at a lot of companies, a trip to re:invent is a huge prize Only for cheapo companies. Companies should (and do) _pay_ their devs to attend re:invent. I get your point though. For naive devs, it’s like getting to go
12.
by pyjug 5y ago
> The companies that put up the contest benefits > if you’re looking to make a job move,… Why would companies allow their best developers to be poached? Unless of course there’s a way for companies to keep their developer scores priva
13.
by pyjug 5y ago
LOL. Developers are so gullible. It would be cute if it weren’t so tragic. They’re giving out t shirts and jackets for 10s of thousands of $ worth of work and we’re lapping it up. Vogels openly said it helps AWS customers reduce “costs”, he
14.
by pyjug 5y ago
It’s not surprising considering that employees and founders of ad funded companies hang out here. In this case, jedberg (correct me if I’m wrong) was an early employee at Reddit, which is almost entirely ad funded. I’m not saying he’s being
15.
by pyjug 5y ago
Heh, so many valley people microdose openly. It's not a fireable offence. Also, that incident happened in 2019. Why fire him now?
16.
by pyjug 5y ago
> The ad would simply display some of the information collected about the viewer which the advertising platform uses. Facebook was not into that idea. Genius! But it’s unclear to me if the examples in the blog were actual ads shown to us
17.
by pyjug 5y ago
Sorry, I didn’t mean to come off condescending at all, it was a genuine question! At the end of the day, these are all just tools and people have their preferences. I try not to get too attached to any of them personally. Also, if it wasn’t
18.
by pyjug 5y ago
I sympathize with the general sentiment of your argument, which is what initially drew me towards Go (in addition to the hype). For better or worse, Go is where all the energy is in terms of OSS, so I do hope I see the light some day, but f
19.
by pyjug 5y ago
Right, I wanted to have the “modern development experience” as much as possible. Most tutorials out there still recommend VSCode to get started with Go.
20.
by pyjug 5y ago
As an experienced Java programmer , I decided to do a project in Golang to see for myself what the hype was all about. And it was...underwhelming. The Go plugin for VScode barely works - terribly slow, inconsistent autocomplete, hanging dur
21.
by pyjug 5y ago
Also, to caution folks who think India is only a place for "cheap devs", there is a perfect confluence of factors happening right now that is driving salaries up and incentivizing good engineers to stay back in India -- immigratio
22.
by pyjug 5y ago
Indian tech salaries are very bi-modal. I'm not talking about body shops here - I'm talking about capable engineers who can get hired in SV, though not necessarily at FAANG. Think tier 2/3 cos. These engineers know their wor
23.
by pyjug 5y ago
The salaries in Germany for engineers are astoundingly low. Good engineers from India (I'm Indian working in SV) often ask me if it's worth migrating to Germany since US immigration is so hard. The answer is absolutely not -- you
24.
by pyjug 5y ago
Fair enough, good for you. I'm not sure if you're a Googler, but nevertheless, my point was that this luxury isn't afforded to the vast majority of people in tech. I highly doubt it's even afforded to the majority of Goo
25.
by pyjug 5y ago
Sorry if I wasn't clear - GP's thesis was that white men are overrepresented in senior positions _because_ they can more easily "fight back" and "be open" than others. In other words, they still believe in meri
26.
by pyjug 5y ago
> I just never made a separate “work self”, and it’s been a deliberate decision This is amazing self-awareness. I wish I had it earlier in my career. >And in my opinion is why white men are so overrepresented in senior levels of compa
27.
by pyjug 5y ago
>psychologically safe in a world with climate change, cancer, random attacks of violence, earthquakes, etc? Obviously, "total" in this context means in the workplace. Also, psychological safety essentially means "ability t
28.
by pyjug 5y ago
>All of them Really? Why are y'all working on FLoC then? :-)
29.
by pyjug 5y ago
>employee forgetting the nature of the relationship in the heat of the moment Curious to learn others' experiences, but I've never seen this in my career, ever. I've seen _peers_ yell at each other, but never seen an emplo
30.
by pyjug 5y ago
Sometimes I feel like a lot of managers don't live in reality. Sure, psychological safety as a concept is nice to talk about, but how can an employee be totally psychologically safe in an employer-employee relationship? How many line e

More ›