sehrope

35 ms·

241.
by sehrope 13y ago
This was an easy choice for us when we setup two-factor auth for our app. We chose TOTP. The only real con (if you can call it that) is requiring the user to install a TOTP app (eg. Google Authenticator) but given our target userbase that w
242.
Using self-signed SSL certificates with JackDB(blog.jackdb.com)
2 points by sehrope 13y ago|0 comments
243.
Sslcertx - SSL Certificate Extractor(github.com)
1 points by sehrope 13y ago|0 comments
244.
by sehrope 13y ago
This does not factor in interest on the original loan. $1,776 in year 24 is not worth $1,776 today, it's worth considerably less[1]. Here's a breakdown at a couple of different interest rates of $1,776 in year 24 in today's d
245.
by sehrope 13y ago
You can find Proper SSL here: http://properssl.org
246.
Proper SSL, a repository of SSL best practices(blog.jackdb.com)
4 points by sehrope 13y ago|1 comments
247.
by sehrope 13y ago
Yes that's the biggest downfall and also where having a centralized persistent store wins out. The best compromise between the two I've thought of is to have a centralized store that lists revoked tokens. Presumably there wouldn&#
248.
by sehrope 13y ago
Remember me cookies are a specific case of some data sent to the client that the server would like to verify at a later point in time. The most direct way that comes to mind for solving this type of problem is to send the client just a rand
249.
by sehrope 13y ago
> since I already store sha256 Storing SHA-256 of passwords is a bad idea. You should use either scrypt, bcrypt, or at the very least PBDKF2 (with a large number of rounds). For a signed token round tripped to the client you should use a
250.
by sehrope 13y ago
A big part of the ease of use of package managers comes from implicit trust in the maintainers of the repositories. Convention over configuration dictates you as a node dev trust the NPM repos. Ditto for ruby gems. Like most things java rel
251.
by sehrope 13y ago
Exactly. Installing postgres on any Debian system is a one line "apt-get install". The only part that might be considered complicated is if you want to open up the server to non-local network traffic as you have to edit both the p
252.
by sehrope 13y ago
The rules for NYC taxis are known to everyone that has lived in their for a non trivial amount of time. Tourists might not be familiar with them but any red blooded New Yorker would definitely remind the cabbie they have to go to the final
253.
by sehrope 13y ago
Yes role based bonuses for referrals are common in the financial services sector. For example at one firm an AVP referral that was hired would be a $5K bonus whereas a VP referral would be a $10K. Unsurprisingly there is quite a push for fo
254.
JackDB Adds Two Factor Authentication(blog.jackdb.com)
1 points by sehrope 13y ago|0 comments
255.
JackDB introduces Teams and Organizations, A Better Way to Share Data Sources(blog.jackdb.com)
2 points by sehrope 13y ago|0 comments
256.
by sehrope 13y ago
Yes existing MySQL tooling works with MariaDB. The wire protocol is still the same so existing MySQL drivers work to connect to MariaDB as well. The reverse situation is also useful. The MariaDB client drivers can connect to both MariaDB an
257.
by sehrope 13y ago
Anyone else find it funny that a language originally designed to add dynamic content to the client side is being used to generate static content on the server side? Makes sense to me though ... It's a natural fit for a front end dev
258.
by sehrope 13y ago
Having a product that also involves connecting to other people's databases we're pretty well versed in this problem. I will admit its a bold step to allow an external service access to your production databases but as a trade off of conveni
259.
by sehrope 13y ago
If you really want to master non-trivial SQL learn to think about filtering, joining, and combining data via set theory. Once you can logically break down the set you're trying to get to the rest then just becomes learning/looking-up syntax
260.
by sehrope 13y ago
No issues to speak of so far. Our app databases are in the VPC itself so our own traffic does not get routed through the NAT gateway but I haven't heard any issues from users either. At the moment we're using an m1.small for the NAT itself
261.
by sehrope 13y ago
Wow that is pretty steep pricing. The lowest tier that seems usable is the $75/mo one. Then again if you're locked into Heroku then even $1,250/mo isn't that much for piece of mind and added security. I'm sure whoever is paying for it is
262.
by sehrope 13y ago
A nice follow up to this would be NATing external access from all dynos (web and worker) for an application through a single unique IP per app. That way external resources (eg your app's database) can be white listed by IP. One of the reaso
263.
JackDB, Now with Google and GitHub Integration(blog.jackdb.com)
2 points by sehrope 14y ago|0 comments
264.
by sehrope 14y ago
As we scale up JackDB, we'll be bumping up the usage limits and revising our pricing plans. Connection pooling doesn't really make sense in this context because users can't share a database connection; if one is in the middle of a transacti
265.
by sehrope 14y ago
Although JackDB works great as a management and administration tool, a big use case is developers and DBAs running ad-hoc queries and digging deep into their data sources. We don't host databases. To start, our focus has been on building an
266.
by sehrope 14y ago
This is a great question. Of course, trust is an ongoing concern. Being upfront about how we handle security is a start. There's already a lot of trust in *aaS platforms, and we think JackDB is a great tool for building new data-driven proj
267.
by sehrope 14y ago
Thanks! Definitely. NoSQL support is coming soon, starting with MongoDB.
268.
by sehrope 14y ago
JackDB is about more than just database administration. There's nothing to install. And it's much more interactive.
269.
by sehrope 14y ago
Thanks. This is actually great feedback for us. The distraction-free splash page is designed for first impressions. For return visitors, we make it easy to log in or try JackDB in a couple of clicks. We're always trying out new things with
270.
by sehrope 14y ago
Hi founder here - Hopefully the github page does a decent job explaining how it all works. If not, I can answer any questions you guys have.

More ›